[strongSwan] Centos6.5, building SS 5.1.1 or 5.1.2dr2 fails

Kimmo K koippa at gmail.com
Thu Dec 19 19:29:12 CET 2013


update 2: fixed the issue, capabilities.h is the one that needs fixing.

Could you add the fix to the 5.1.2?

Regards,
Kimmo

diff -ur strongswan-5.1.1/src/libstrongswan/utils/capabilities.h
strongswan-5.1.1-capabilities/src/libstrongswan/utils/capabilities.h
--- strongswan-5.1.1/src/libstrongswan/utils/capabilities.h
2013-10-18 04:38:17.000000000 +0300
+++ strongswan-5.1.1-capabilities/src/libstrongswan/utils/capabilities.h
       2013-12-19 20:21:19.906417396 +0200
@@ -25,6 +25,7 @@

 typedef struct capabilities_t capabilities_t;

+#include <linux/types.h>
 #include <library.h>
 #ifdef HAVE_SYS_CAPABILITY_H
 # include <sys/capability.h>

2013/12/19 Kimmo K <koippa at gmail.com>:
> update: --with-capabilities=native fails too.
>
> And I cannot get 5.1.1 to work without --with-capabilities:
>
> Dec 19 19:34:27 10[CFG] received stroke: route 'conn1'
> Dec 19 19:34:27 10[KNL] received netlink error: Operation not permitted (1)
> Dec 19 19:34:27 10[KNL] unable to add policy xx.xx.xx.xx/16 ===
> yy.yy.yy.yy/32 out
> ...
>
> Regards,
> Kimmo
>
> 2013/12/19 Kimmo K <koippa at gmail.com>:
>> Hello Tobias
>>
>> Thanks for your help, I was able to track this down.
>> It builds fine (with or without patch) as long as I don't define
>> --with-capabilities=libcap
>>
>> With  --with-capabilities=libcap, it does build 5.1.0 but won't build
>> 5.1.1 or 5.1.2dr2.
>>
>> I don't even know that that does, but maybe it should be fixed?
>>
>> Regards,
>> Kimmo
>>
>> 2013/12/19 Tobias Brunner <tobias at strongswan.org>:
>>> Hi Kimmo,
>>>
>>>> Did not help, is there any other patches for this issue?
>>>
>>> I successfully built strongSwan 5.1.1 (without the patch) on a freshly
>>> installed and fully updated CentOS 6.5 (2.6.32-431.1.2.0.1.el6.x86_64).
>>>
>>> Regards,
>>> Tobias
>>>




More information about the Users mailing list