I'm currently trying to install an IPSec package in our 2.2.8 FreeBSD
boxes and I chose the Kame version.
I downloaded the file kame-1999131-fbsd228-stable.tgz and followed all
the instructions contained in the kit/INSTALL. I applied the patch:
patch -p1 -f < $SOMEWHERE/kit/sys-228.diff
and then edit the IP6 conf file maintaining the option IPSEC.
'make depend' produces many warnings, all of the same kind, like:
../../netid/in.h:355: warning: IP_ESP_TRANS_LEVEL redefined
../../netid/in.h:351: this is the location of the previous definition
These warnings appear for several #define macro name like
IPSEC_LEVEL_BYPASS, etc. This is normal (and wrong I guess) because the
#ifdef IPSEC clause contains a second definition for all these macros
without putting them in #else.
Then the make depend exits with the 'Error code 1'.
Beeing a stable release, I guess I missed something. I've noticed that
at www.kame.net there is an include-1999131-fbsd228-stable.tgz:
should I include this one too? If yes, where to explode the tar file?
We would like to have IPSec for the IPv4 stack, somewhere on the mailing
lists I read it's sufficient ot mask the option "INET6". Is that enough?
(Btw the errors I got are with the above option in)
To Unsubscribe: send mail to majo...@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message