From: Sam Sgro (sam_at_freeswan.org)
Date: Mon Nov 04 2002 - 21:08:23 CET
-----BEGIN PGP SIGNED MESSAGE-----
On Mon, 4 Nov 2002, Leonardo A. de Camargo wrote:
> My first message on the list... hope it doesnt sucks :)
>
> Im goin to try Freeswan to implement a VPN and i wanted to know :
>
> Is necessary recompile the kernel ? Im using 2.4 series...
> What options/support do i have to use when recompile ?
1) If you are using RedHat, there's a good chance we've built an RPM for your
system. Check:
ftp://ftp.xs4all/pub/crypto/freeswan/binaries
or
2) If using a different distro, like Mandrake, SuSE, Connectiva or Debian,
check to see if your kernel already has IPSec support enabled; you'll only
need to install the approrpriate RPM.
3) If you've already recompiled your kernel, you can quickly compile FreeS/WAN
support as a module. Use "make oldmod", and then hand copy the ipsec.o module
into place (from net/ipsec to /lib/modules/kernelversion/kernel/net/ipsec).
I've managed to get FreeS/WAN running within moments using this method.
Why hand copy the module? The "make modules_install" target in the 2.4 kernels
I've run across nukes all existing modules before beginning the install
process. I haven't found a way to easily circumvent this without having to
define a good number of variables for the "make modules_install" target; it's
much easier to use the good old "mkdir" and "cp" commands. If anyone knows a
trick, I'd be happy to hear it. This still seems to be a crude workaround. :)
4) You use the above method for many distros using #3, even if you haven't
compiled the kernel yourself. Install their kernel source tree; make sure the
".config" at the root of your distro's source tree is the one appropriate to
your configuration; and run "make oldmod" as above.
5) You can use "make oldgo" and "make kinstall" to statically compile ipsec
support into your kernel.
- --
Sam Sgro
sam_at_freeswan.org
-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv
Comment: For the matching public key, finger the Reply-To: address.
iQCVAwUBPcbTuEOSC4btEQUtAQGdhQP/f7RnJUKoxyVmSzI1XT5rKd0sS0LKrK36
Y3BBXPV9LMx+ZIgRQA/akr7b2dfUOMbEindKQ8ND4NIgd2cIifQRknpbjhoOtqaz
jzE93Lz3R5Ccq2oK1i8NyTWSVQVpX8k/L7xVVjinFI58ze2eLof7CcXtQMtl6wGt
VVFkoktp0IM=
=nhsM
-----END PGP SIGNATURE-----
_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users
This archive was generated by hypermail 2.1.5 : Tue Nov 05 2002 - 05:20:44 CET