[Swan] Building on OSX 10.9 Mavericks

Noah Easterly noah.easterly at gmail.com
Mon Oct 27 20:49:57 EET 2014


Yep, I can remove that line without obvious issue, but the build still has
issues:

Next attempt at `make programs` got

/usr/local/src/libreswan-3.8/lib/libswan/udpfromto.c:75:2: error: "Must
have either IP_PKTINFO or IP_RECVDSTADDR"

So I added the following to ports/darwin/include/sysdep.h, as OSX supports
IP_RECVDSTADDR (
https://developer.apple.com/library/mac/documentation/Darwin/Reference/ManPages/man4/ip.4.html
)

/* udpfromto socket option for BSD */
#define HAVE_UDPFROMTO 1
#define HAVE_IP_RECVDSTADDR 1

The next error after that proved to be

/usr/local/src/libreswan-3.8/lib/libbsdpfkey/pfkey.c:38:10: fatal error:
'netkey/key_var.h' file not found

The racoon macport had a similar issue (
http://article.gmane.org/gmane.os.opendarwin.darwinports/6225) and I solved
it the same way they did (https://trac.macports.org/ticket/2173), by
creating an include/netkey directory and putting netkey/key_var.h and
netkey/key_debug.h (from
http://www.opensource.apple.com/source/xnu/xnu-1456.1.26/bsd/netkey/) in
there.

The next error was

/usr/local/src/libreswan-3.8/programs/pluto/plutomain.c:100:11: fatal
error: 'cap-ng.h' file not found

And a quick google doesn't seem sufficient to solve that. I don't think OSX
supports capng_change_id, and I'm not sure what the local analogue would be.

On Fri, Oct 24, 2014 at 5:09 PM, Paul Wouters <paul at nohats.ca> wrote:

> On Fri, 24 Oct 2014, Noah Easterly wrote:
>
>  Has anyone managed to build on OSX 10.9 Mavericks?
>>
>
> We used to build on OSX but I don't think we recently tried.
>
>  I've tried building from source (after using brew to install nspr, nss,
>> pkg-config, and unbound), but I've run into
>> an issue because tcpd.h can't be found.
>>
>> In file included from /usr/local/src/libreswan-3.8/
>> linux/net/ipsec/addrtoa.c:16:
>> /usr/local/src/libreswan-3.8/linux/include/libreswan.h:117:10: fatal
>> error: 'tcpd.h' file not found
>> #include <tcpd.h>
>>
>
> That's from tcp_wrappers. Can you try just deleting the line?
>
> I just did on linux and both userland and kernel module build fine. So I
> think it is not actually needed. Looking back at the commit it came in
> on, 7836dfce, it looks like it was added for the OSX case :)
>
> Paul
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.libreswan.org/pipermail/swan/attachments/20141027/be058e6b/attachment.html>


More information about the Swan mailing list