| 1 |
On Sunday 20 October 2002 06:34 am, Calum Selkirk wrote: |
| 2 |
|
| 3 |
> You might try to apply the patches |
| 4 |
> from freeswan to ppc-sources but you may run into conflicts with |
| 5 |
> previously applied patches. Please let us know how you get on. |
| 6 |
|
| 7 |
Thanks for the suggestion. I tried it and it worked. I manually built freeswan |
| 8 |
following the instructions on "www.freeswan.org" and applied the patches to |
| 9 |
the ppc kernel that is installed by |
| 10 |
"ppc-sources/ppc-sources-2.4.19-r6.ebuild." |
| 11 |
|
| 12 |
Here's a summary of what I did: |
| 13 |
|
| 14 |
1) Duplicated my existing kernel directory: |
| 15 |
|
| 16 |
cp -r /usr/src/linux-2.4.19-r6 /usr/src/linux-2.4.19-r6-freeswan |
| 17 |
|
| 18 |
2) Adjusted my "/usr/src/linux" symlink to point to the new copy of the kernel |
| 19 |
source tree: |
| 20 |
|
| 21 |
cd /usr/src |
| 22 |
mv linux linux.old |
| 23 |
ln -s linux-2.4.19-r6-freeswan linux |
| 24 |
|
| 25 |
3) Downloaded "freeswan-1.98b.tar.gz" into "/usr/src" and unpacked it: |
| 26 |
|
| 27 |
cd /usr/src |
| 28 |
wget ftp://ftp.xs4all.nl/pub/crypto/freeswan/freeswan-1.98b.tar.gz |
| 29 |
tar zxvf freeswan-1.98b.tar.gz |
| 30 |
|
| 31 |
4) Followed the install instructions for installing from sources on the |
| 32 |
freeswan web page. In brief: |
| 33 |
|
| 34 |
cd /usr/src/freeswan-1.98b |
| 35 |
make menugo |
| 36 |
cd /usr/src/linux |
| 37 |
make |
| 38 |
make vmlinux |
| 39 |
make modules |
| 40 |
make modules_install |
| 41 |
|
| 42 |
(the docs have "make install" rather than "make vmlinux". I have to use the |
| 43 |
latter since I have an old world Mac and use BootX. Normally I then copy |
| 44 |
vmlinux to my MacOS partitition in System Folder:Linux Kernels) |
| 45 |
|
| 46 |
5) After rebooting into the new kernel, I did: |
| 47 |
|
| 48 |
modprobe ipsec |
| 49 |
/etc/init.d/ipsec start |
| 50 |
/usr/local/sbin/ipsec verify |
| 51 |
|
| 52 |
6) To make it start up automagically, I added "ipsec" to |
| 53 |
"/etc/modules.autoload" and updated my run levels: |
| 54 |
|
| 55 |
rc-update add ipsec default |
| 56 |
|
| 57 |
At this point, "ipsec verify" gives me "OK" for everything. My project for |
| 58 |
next week is to actually try using this thing to connect to my university's |
| 59 |
wireless VPN gateway. |
| 60 |
|
| 61 |
Wish me luck :) |
| 62 |
|
| 63 |
Marcio Luis Teixeira |
Archives