[Swan] Installing klips

[Paul Wouters]

On Sun, 15 Mar 2015, Antonio Scattolini wrote:

> I tried to install libreswan with klips support using what is written in the
> makefile or in the readme and readme.klips:

Note libreswan always has klips support built in. I guess you mean to
say you want to build and use klips?

> make module module_install programs install
> I did it after an "export KERNELSRC=/usr/src/linux" where linux is a link to
> /usr/src/linux-source-3.16 obtained after extraction of
> linux-source-3.16.tar.xz plus some make oldconfig && make prepare (in
> /usr/src/linux) plus some other make I did (in /usr/src/linux) to correct
> errors of make module module_install (in libreswan directory).

looks good.

> However I obtain:
> root at fw:~# ipsec verify
> Verifying installed system and configuration files
>
> Version check and ipsec on-path                         [OK]
> Libreswan 3.12 (netkey) on 3.16.0-4-686-pae

You did not change /etc/ipsec.conf to have protostack=klips ?

Paul