[Swan] libreswan v3.29, Kernel 4.9.119, enable klips

Paul Wouters paul at nohats.ca
Wed Sep 4 17:07:57 UTC 2019


On Wed, 4 Sep 2019, Brian T wrote:

>> That's not in my spi.c. Can you try git master?
>>
>
> It's a symlink to the repo.  I do not see a master branch on upstream
> https://github.com/libreswan/libreswan.git

That is the one with the master branch yes :)

> I am using the v3.29 tag + 1 extra commit.

Then you are some commits behind.

paul at bofh7:~/libreswan (master)$ git diff v3.29 programs/spi/spi.c

@@ -89,7 +90,9 @@ int alg = 0;

  #include <assert.h>
  const char *alg_string = NULL;          /* algorithm string */
-struct proposal_info *esp_info = NULL;       /* esp info from 1st (only) element */
+struct proposal *proposal = NULL;       /* esp info from 1st (only) element */
+struct algorithm *encrypt = NULL;
+struct algorithm *integ = NULL;
  int proc_read_ok = 0;                   /* /proc/net/pf_key_support read ok */

  unsigned long replay_window = 0;


@@ -409,71 +412,64 @@ static bool kernel_alg_proc_read(void)
   */

  const struct proposal_policy policy = {
-       .ikev1 = false,
-       .ikev2 = false,
+       .version = 0, /* any? */
         .alg_is_ok = kernel_alg_is_ok,
  };



[...etc ]

So it seems this is already addressed if you grab master HEAD

Paul


More information about the Swan mailing list