[Swan-dev] expirimental : ipsec device/interface aka XFRMi
andrew.cagney at gmail.com
Thu Jan 30 14:06:48 UTC 2020
On Thu, 30 Jan 2020 at 06:39, Paul Wouters <paul at nohats.ca> wrote:
> On Thu, 30 Jan 2020, Antony Antony wrote:
> > Here is my proposed patch to compile xfrmi on CentOS8.
> > Any adjustments?
> Looks good. Perhaps just add a note saying "if you see IFLA_XFRM_IF_ID
> undefined, try enabling this" just before the
> USE_XFRM_INTERFACE_IFLA_HEADER option ?
I assume you mean in the code and not in the .mk file. For instance,
if the build could barf due to a missing header, add a note at the
> >> 036 ipsec-interface=1 not supported. may be missing CONFIG_XFRM_INTERFACE support in kernel
> Note this should not return a 0XX code because we fail to load the
> connection. It is a fatal error (4xx)
> We might not be fully consistent with these in our code though, so I'm
> happy to look at this after merging it in.
> Swan-dev mailing list
> Swan-dev at lists.libreswan.org
More information about the Swan-dev