• view
• edit
• upload
• print
• history

Building for 2.4 kernels using KLIPS (the default)

This document describes the steps to install and use Linux Openswan with your 2.4 kernel with. Used Linux Openswan code is the current CVS of the openswan-2 tree.

Requirements

You must:

• have the correct libraries
• check out the latest openswan-2 source
• adjust the source
• compile the source and install the tools
• have compiled a 2.4 kernel with the right options
• have root access to your Linux box

Next, I'll describe these steps.

Have the correct libraries installed

You should have the gmp libraries installed. In Debian unstable, use apt-get install libgmp3 and apt-get install libgmp3-dev to install them.

Check out the latest openswan-2 source from CVS

To check out the latest source, follow the steps on http://www.openswan.com/development/cvs.php.

Fix the source

First, you should edit a file to make Openswan work quickly. In the openswan-2 directory, open Makefile.inc with your favourite editor. Search for the line:

LWRES

{{{

   USE_LWRES?=true

}}}

Change this line to:

{{{

   USE_LWRES?=false

}}}

Save the file and close your editor.

Compile the source and install the tools

Now, you should compile the userland tools. To compile these tools type:

{{{

   make programs

}}}

If everything goes well, you'll get a shell and you don't see any errors on your screen.

To install the tools, type:

{{{

   make install

}}}

If you want NAT-Traversal support, you need to patch the kernel source:

{{{

   make nattpatch | (cd /usr/src/linux && patch -p1)

}}}

Next, build and install the ipsec.o module

{{{

   make KERNELSRC=/usr/src/linux module minstall

}}}

DisableOE by adding {{{

   include /etc/ipsec.d/examples/no_oe.conf

}}}

To your /etc/ipsec.conf file.

You should be finished now.