[Swan] Compiling 3.28 on Ubuntu 18.04.2 - certificateUsageIPsec?

[Paul Wouters]

On Fri, 24 May 2019, Whit Blauvelt wrote:

> 3.27 built okay here, but 3.28 stops at:
>
> /usr/src/libreswan-3.28/programs/pluto/nss_cert_verify.c:248:5: error: ‘certificateUsageIPsec’ undeclared (first use in this function); did you mean ‘certificateUsageAnyCA’?
>   { certificateUsageIPsec, "IPsec" },
>     ^~~~~~~~~~~~~~~~~~~~~
>     certificateUsageAnyCA
>
> Should I substitute "certificateUsageAnyCA," or update some library, or ...?

if you use "make deb" on a clean tree, it should work with the right
settings for you :)

If compiling with manualconfigurations, you might need to tweak things.
In your case, your nss is not >= 3.41, so you will need to run:

echo "USE_NSS_IPSEC_PROFILE=false" >> Makefile.inc.local

Paul