[Swan-dev] expirimental : ipsec device/interface aka XFRMi

[Andrew Cagney]

On Thu, 30 Jan 2020 at 06:39, Paul Wouters <paul at nohats.ca> wrote:
>
> On Thu, 30 Jan 2020, Antony Antony wrote:
>
> > Here is my proposed patch to compile xfrmi on CentOS8.
> > Any adjustments?
>
> Looks good. Perhaps just add a note saying "if you see IFLA_XFRM_IF_ID
> undefined, try enabling this" just before the
> USE_XFRM_INTERFACE_IFLA_HEADER option ?

I assume you mean in the code and not in the .mk file.  For instance,
if the build could barf due to a missing header, add a note at the
#include point.

> >> 036 ipsec-interface=1 not supported. may be missing CONFIG_XFRM_INTERFACE support in kernel
>
> Note this should not return a 0XX code because we fail to load the
> connection. It is a fatal error (4xx)
>
> We might not be fully consistent with these in our code though, so I'm
> happy to look at this after merging it in.
>
> Paul
> _______________________________________________
> Swan-dev mailing list
> Swan-dev at lists.libreswan.org
> https://lists.libreswan.org/mailman/listinfo/swan-dev