[Trying again, it didn't go through the first time] Hi, So, I was hoping to get FreeS/WAN to compile as a module and add it to one of my kernels. I then realized that I had to patch my kernel. Would have been easier with a real patch instead of the dreadful makefile and patch process which dies if anything doesn't patch perfectly. After the pain of working around it, I eventually got the compile to bomb at the end (fs 1.91 and 2.4.17). After the pain of working around it, I eventually got the compile to bomb at the end (see failure at the end of the message) So, I looked around and found cryptoapi.sf.net which had the goal of making crypto a module in an existing kernel. While it doesn't include FS, I did find a promising freeswan-import.sh script which seems to convert the FS patches into a real patch that I can just apply. However, I don't think it's going to make FS 1.91 work any better if it fails to build now, but if I like the features offered by cryptoapi, and wouldn't mind having them in addition to FS (I can't tell if it makes FS share the cryptoAPI code or if they each have their own). I guess my main question is can I get FS to work with cryptoapi 2.4.7.0, and linux 2.4.17? If so, which version of FS should I try to patch? Can I try to use the freeswan-import.sh script? Thanks Marc Linking failure attached here: /var/local/src/misckernels/linux-2.4.17-fswan-1.91-grsec-1.9.2-servers1/arch/i386/lib/lib.a /var/local/src/misckernels/linux-2.4.17-fswan-1.91-grsec-1.9.2-servers1/lib/lib.a /var/local/src/misckernels/linux-2.4.17-fswan-1.91-grsec-1.9.2-servers1/arch/i386/lib/lib.a \ --end-group \ -o vmlinux net/network.o: In function `SHA1Update': /var/local/src/misckernels/linux-2.4.17-fswan-1.91-grsec-1.9.2-servers1/net/ipsec/ipsec_sha1.c(.text+0x5f1bc): multiple definition of `SHA1Update' kernel/kernel.o(.text+0x1776c): first defined here ld: Warning: size of symbol `SHA1Update' changed from 222 to 215 in net/network.o net/network.o: In function `SHA1Init': /var/local/src/misckernels/linux-2.4.17-fswan-1.91-grsec-1.9.2-servers1/net/ipsec/ipsec_sha1.c:101: multiple definition of `SHA1Init' kernel/kernel.o(.text+0x17734): first defined here net/network.o: In function `SHA1Final': /var/local/src/misckernels/linux-2.4.17-fswan-1.91-grsec-1.9.2-servers1/net/ipsec/ipsec_sha1.c(.text+0x5f294): multiple definition of `SHA1Final' kernel/kernel.o(.text+0x1784c): first defined here ld: Warning: size of symbol `SHA1Final' changed from 313 to 309 in net/network.o net/network.o: In function `SHA1Transform': /var/local/src/misckernels/linux-2.4.17-fswan-1.91-grsec-1.9.2-servers1/net/ipsec/ipsec_sha1.c(.text+0x5d420): multiple definition of `SHA1Transform' kernel/kernel.o(.text+0x159d0): first defined here make: *** [vmlinux] Error 1 -- Microsoft is to operating systems & security .... .... what McDonalds is to gourmet cooking Home page: http://marc.merlins.org/ | Finger marc_f@merlins.org for PGP key - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/