Hello Cpu,

I think the fix to support cryptoapi is rather simple, it's just broken in
the openswan sources (patch).

If you change the following line in the kernel's linux/net/ipsec/Config.in
from:
bool '   IPsec Modular Extensions' CONFIG_KLIPS_ALG
if [ "$CONFIG_KLIPS_ALG" != "n" ]; then
        source net/ipsec/alg/Config.in
fi

to:

bool '   IPsec Modular Extensions' CONFIG_KLIPS_ALG
if [ "$CONFIG_KLIPS_ALG" != "n" ]; then
  bool '      CryptoAPI algorithm interface' CONFIG_KLIPS_ENC_CRYPTOAPI
fi

Do a "make menuconfig", enable klips cryptoapi support and (optional)
disable klips 3des and aes (you can use the crypto ciphers now) it should
work.

Eric



-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
------------------------------------------------------------------------
leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Reply via email to