Enable IPsec

[bl0ndynek]

Hi,

I download latest package and put on SD card. Everything is going grate but I need to enable IPsec in kernel.
Could someone tell me what is easiest way to do that?

[WarheadsSE]

Cleanly PR the kernel config at our github.

Do it right, follow the instructions inside the PKGBUILD.

[bl0ndynek]

Thank you for answer.

But is there way to cross compile it to create package?
I read on archlinux arm about distcc but this is not a option as me and raspberry are now on different networks.
Is there way to make makepkg use cross compiler?

Do you have plan to enable ipsec by default?

[moonman]

WarheadsSE said you can submit a Pull Request on github to enable ipsec "by default"

[bl0ndynek]

Sorry I don't understand.
Hope I do everything correctly.

Here is pool request:
https://github.com/archlinuxarm/PKGBUILDs/pull/1083

[moonman]

All the modules you PR'ed are already built. We will not make them built in, so you kust jave to load them manually with modprobe

[bl0ndynek]

Ok, big thanks and sorry for trouble, but I still have problem with IPsec may by some of you my help.

I got with tutorial:
https://raymii.org/s/tutorials/IPSEC_L2 ... Linux.html

At point where I have to execute command:
$this->bbcode_second_pass_code('', '
ipsec verify
')
I get output:
$this->bbcode_second_pass_code('', '
ipsec verify
Checking if IPsec got installed and started correctly:

Version check and ipsec on-path [OK]
Openswan U2.6.42/K(no kernel code presently loaded)
See `ipsec --copyright' for copyright information.
Checking for IPsec support in kernel [FAILED]

The ipsec service should be started before running 'ipsec verify'

Hardware random device check [N/A]
Two or more interfaces found, checking IP forwarding [OK]
Checking rp_filter [ENABLED]
/proc/sys/net/ipv4/conf/all/rp_filter [ENABLED]
Checking that pluto is running [FAILED]
Checking NAT and MASQUERADEing [TEST INCOMPLETE]
Checking 'ip' command [OK]
Checking 'iptables' command [OK]
')
I load all modules that are listed on this site:
https://wiki.strongswan.org/projects/st ... nelModules
$this->bbcode_second_pass_code('', '
sudo modprobe xfrm_ipcomp
sudo modprobe esp4
sudo modprobe ipcomp
sudo modprobe xfrm4_tunnel
sudo modprobe tunnel4
sudo modprobe xfrm4_mode_tunnel
sudo modprobe xfrm4_mode_transport
sudo modprobe xfrm4_mode_beet
sudo modprobe dccp_ipv6
sudo modprobe ipv6
sudo modprobe ah6
sudo modprobe esp6
sudo modprobe ipcomp6
sudo modprobe xfrm6_tunnel
sudo modprobe tunnel6
sudo modprobe xfrm6_mode_transport
sudo modprobe xfrm6_mode_tunnel
sudo modprobe xfrm6_mode_beet
sudo modprobe x_tables
sudo modprobe xt_tcpudp
sudo modprobe aead
sudo modprobe authenc
sudo modprobe authencesn
sudo modprobe deflate
')
and still output is the same do you have any idea why?