<html><body><span class="xfm_47023601"><div>Hi,</div><div><br/></div><div>Centos 7.3.1611</div><div>kernel 3.10.0-514.26.2.el7.local.x86_64</div><div><br/></div><div>1. That kernel I built with 0001-SAREF-add-support-for-SA-selection-through-sendmsg.patch and 0002-SAREF-implement-IP_IPSEC_BINDREF.patch from 3.11.0-15.25. <span class="xfmc1" id="xfmi1" lang="en">The assembly was successful.</span></div><div><span class="xfmc1" lang="en">2. Libreswan 3.21 make module.</span></div><div><span class="xfmc1" lang="en"><br/></span></div><div><span class="xfmc1" lang="en">First problem:</span></div><div><span class="xfmc1" lang="en">==========</span></div><div><span class="xfmc1" lang="en">In file included from /home/pit/rpmbuild/BUILD/libreswan-3.21/modobj/ipsec_xmit.c:57:0:<br/>/home/pit/rpmbuild/BUILD/libreswan-3.21/modobj/ipsec_xmit.c: In function 'ipsec_xmit_ipip':<br/>/home/pit/rpmbuild/BUILD/libreswan-3.21/linux/include/libreswan/ipsec_tunnel.h:32:42: warning: passing argument 1 of '__ip_select_ident' from incompatible pointer type [enabled by default]<br/> #define lsw_ip4_hdr(ixirs)      ((struct iphdr *) (ixirs)->iph)                                                                                                                            <br/>                                          ^<br/>/home/pit/rpmbuild/BUILD/libreswan-3.21/linux/include/libreswan/ipsec_param2.h:33:60: note: in definition of macro 'KLIPS_IP_SELECT_IDENT'<br/> # define KLIPS_IP_SELECT_IDENT(iph, skb) __ip_select_ident(iph, skb_dst(skb), 0)                                                         <br/>                                                            ^<br/>/home/pit/rpmbuild/BUILD/libreswan-3.21/modobj/ipsec_xmit.c:1282:25: note: in expansion of macro 'lsw_ip4_hdr'<br/>   KLIPS_IP_SELECT_IDENT(lsw_ip4_hdr(ixs), ixs->skb);                                                         <br/>                         ^<br/>In file included from include/net/tcp.h:42:0,<br/>                 from /home/pit/rpmbuild/BUILD/libreswan-3.21/modobj/ipsec_xmit.c:47:<br/>include/net/ip.h:325:6: note: expected 'struct net *' but argument is of type 'struct iphdr *'<br/> void __ip_select_ident(struct net *net, struct iphdr *iph, int segs);</span></div><div><span class="xfmc1" lang="en"><br/></span></div><div><span class="xfmc1" lang="en"><br/></span></div><div><span class="xfmc1" lang="en">Second problem:</span></div><div><span class="xfmc1" lang="en">=============</span></div><div><span class="xfmc1" lang="en">/home/pit/rpmbuild/BUILD/libreswan-3.21/modobj/ipsec_xmit.c: In function 'ipsec_xmit_send':<br/>/home/pit/rpmbuild/BUILD/libreswan-3.21/modobj/ipsec_xmit.c:2918:11: warning: passing argument 3 of 'NF_HOOK' from incompatible pointer type [enabled by default]<br/>           ipsec_xmit_send2);                                                                                                                                    <br/>           ^<br/>In file included from include/net/netns/netfilter.h:5:0,<br/>                 from include/net/net_namespace.h:22,<br/>                 from include/linux/netdevice.h:44,<br/>                 from include/net/addrconf.h:49,<br/>                 from /home/pit/rpmbuild/BUILD/libreswan-3.21/linux/include/libreswan/ipsec_kversion.h:394,<br/>                 from /home/pit/rpmbuild/BUILD/libreswan-3.21/linux/include/libreswan/ipsec_param.h:34,<br/>                 from /home/pit/rpmbuild/BUILD/libreswan-3.21/modobj/ipsec_xmit.c:33:<br/>include/linux/netfilter.h:245:1: note: expected 'struct sock *' but argument is of type 'struct sk_buff *'<br/> NF_HOOK(uint8_t pf, unsigned int hook, struct sock *sk, struct sk_buff *skb, </span></div><div><span class="xfmc1" lang="en"><br/></span></div><div><span class="xfmc1" lang="en">Can you help ?</span></div><div><span class="xfmc1" lang="en"><br/></span></div></span></body></html>