[Swan-commit] Changes to ref refs/heads/master

Antony Antony antony at vault.libreswan.fi
Thu Feb 6 11:39:32 UTC 2020


New commits:
commit 76070f8b3ec9dd03e32d812e39e51edb1054c963
Author: Antony Antony <antony at phenome.org>
Date:   Thu Feb 6 11:35:57 2020 +0000

    testing: travis compile CentOS 6,7,8 with USE_XFRM_INTERFACE_IFLA_HEADER=true

commit 81eadcb1d7f956f87b9921000aa556c0e124afeb
Author: Antony Antony <antony at phenome.org>
Date:   Thu Feb 6 11:20:28 2020 +0000

    packaging: stretch bionic compile with xfrmi USE_XFRM_INTERFACE_IFLA_HEADER=true
    
    On stretch or bionic with kernel 4.19 or later xfrmi will work.

commit c21909c851e8ccbe9d9aa4a823eeed53b008a12e
Author: Antony Antony <antony at phenome.org>
Date:   Wed Jan 29 14:31:20 2020 +0000

    pluto: add extra enum for xfrmi interface to compile on CentOS 6,7,8
    
    Add missing enum declerations to compile xfrmi support on older
    distributions, with older if_link.h.
    
    use
    make USE_XFRM_INTERFACE_IFLA_HEADER=true programs
    
    error when USE_XFRM_INTERFACE_IFLA_HEADER=false with older
    kernel headers < 4.19
    Compile error:
    /root/rpmbuild/BUILD/libreswan-3.28rc1494_g7c7a490_xfrmi/programs/pluto/kernel_xfrm_interface.c:180:30: error:
    'IFLA_XFRM_IF_ID' undeclared (first use in this function)
      nl_addattr32(&req->n, 1024, IFLA_XFRM_IF_ID, if_id);
    
    "ipsec-interface=yes" need kernel 4.19 or xfrmi back ported.
    If kernel is missing xfrmi, e.g on kernel-2.6.32-696.16.1.el6.x86_64 on CentOS 6,
    the connection will fail to load.
    
    036 ipsec-interface=1 not supported. may be missing CONFIG_XFRM_INTERFACE support in kernel
    
    Tested by Paul on CentOS 6 and Tuomo on Foo Linux 7.



More information about the Swan-commit mailing list