Conformance test installation problem on FreeBSD
I tried to build strongSwan 5.1.0 (tried also with 5.0.4) on FreeBSD with conftest option enabled.
Build options: ./configure --enable-kernel-pfkey --enable-kernel-pfroute --enable-conftest --disable-tools --disable-scripts --disable-kernel-netlink
However, it fails. StrongSwan builds fine without option --enable-conftest.
Build log is attached. Please let me know where the problem is.
#1 Updated by Tobias Brunner almost 9 years ago
- Tracker changed from Issue to Bug
- Status changed from New to Closed
- Assignee set to Tobias Brunner
- Priority changed from High to Normal
- Target version set to 5.1.1
- Resolution set to Fixed
The reset_seq hook implementation is very Linux/Netlink/XFRM specific and, therefore, does not work on FreeBSD. The FreeBSD kernel unfortunately does not provide an interface to change the sequence number of an IPsec SA, so providing an alternative implementation is currently not possible (at least not for the oseq functionality - setting it to zero would probably be possible by retrieving, deleting and reinstalling the SA - if you need that please file a feature request).
The associated patch fixes the compilation issue by disabling the hook.