[Swan] R: Installing klips

Antonio Scattolini antonio.scattolini at atpesercizio.it
Mon Mar 16 09:54:10 EET 2015

Now it seems ok after inserting protostack parameter.
I only have two more questions:
1) previously I inserted protostack but, without indentation, service gave
me an error; why don't eliminate the need of indentation?
2) how to link ipsec0 to eth1 permanently (instead of eth0)? ipsec tncfg is
not permanent...
3) there is no more /etc/init.d/ipsec start|stop|restart... right?


-----Messaggio originale-----
Da: Paul Wouters [mailto:paul at nohats.ca]
Inviato: domenica 15 marzo 2015 23.30
A: Antonio Scattolini
Cc: swan at lists.libreswan.org
Oggetto: Re: [Swan] Installing klips

On Sun, 15 Mar 2015, Antonio Scattolini wrote:

> I tried to install libreswan with klips support using what is written in
> makefile or in the readme and readme.klips:

Note libreswan always has klips support built in. I guess you mean to
say you want to build and use klips?

> make module module_install programs install
> I did it after an "export KERNELSRC=/usr/src/linux" where linux is a link
> /usr/src/linux-source-3.16 obtained after extraction of
> linux-source-3.16.tar.xz plus some make oldconfig && make prepare (in
> /usr/src/linux) plus some other make I did (in /usr/src/linux) to correct
> errors of make module module_install (in libreswan directory).

looks good.

> However I obtain:
> root at fw:~# ipsec verify
> Verifying installed system and configuration files
> Version check and ipsec on-path                         [OK]
> Libreswan 3.12 (netkey) on 3.16.0-4-686-pae

You did not change /etc/ipsec.conf to have protostack=klips ?


More information about the Swan mailing list