[Swan-commit] Changes to ref refs/heads/master
Antony Antony
antony at vault.libreswan.fi
Thu Feb 6 11:39:32 UTC 2020
New commits:
commit 76070f8b3ec9dd03e32d812e39e51edb1054c963
Author: Antony Antony <antony at phenome.org>
Date: Thu Feb 6 11:35:57 2020 +0000
testing: travis compile CentOS 6,7,8 with USE_XFRM_INTERFACE_IFLA_HEADER=true
commit 81eadcb1d7f956f87b9921000aa556c0e124afeb
Author: Antony Antony <antony at phenome.org>
Date: Thu Feb 6 11:20:28 2020 +0000
packaging: stretch bionic compile with xfrmi USE_XFRM_INTERFACE_IFLA_HEADER=true
On stretch or bionic with kernel 4.19 or later xfrmi will work.
commit c21909c851e8ccbe9d9aa4a823eeed53b008a12e
Author: Antony Antony <antony at phenome.org>
Date: Wed Jan 29 14:31:20 2020 +0000
pluto: add extra enum for xfrmi interface to compile on CentOS 6,7,8
Add missing enum declerations to compile xfrmi support on older
distributions, with older if_link.h.
use
make USE_XFRM_INTERFACE_IFLA_HEADER=true programs
error when USE_XFRM_INTERFACE_IFLA_HEADER=false with older
kernel headers < 4.19
Compile error:
/root/rpmbuild/BUILD/libreswan-3.28rc1494_g7c7a490_xfrmi/programs/pluto/kernel_xfrm_interface.c:180:30: error:
'IFLA_XFRM_IF_ID' undeclared (first use in this function)
nl_addattr32(&req->n, 1024, IFLA_XFRM_IF_ID, if_id);
"ipsec-interface=yes" need kernel 4.19 or xfrmi back ported.
If kernel is missing xfrmi, e.g on kernel-2.6.32-696.16.1.el6.x86_64 on CentOS 6,
the connection will fail to load.
036 ipsec-interface=1 not supported. may be missing CONFIG_XFRM_INTERFACE support in kernel
Tested by Paul on CentOS 6 and Tuomo on Foo Linux 7.
More information about the Swan-commit
mailing list