Openswan dkms module doesn't compie

Exaltia, it's true that the DKMS modules doesn't build on Trusty as this
was only fixed upstream in a later release.

Fortunately, chances are you don't need the DKMS module as most of the
time, the builtin IPsec implementation (netkey) is enough. The builtin
implementation is also what's used by OpenSwan by default.

Regards,
Simon

On 10/24/2014 04:58 PM, Exaltia wrote:
> Public bug reported:
>
> Hi,
> Trying to install the package openswan-modules-dkms on kernel 3.13.0-37-generic #64-Ubuntu SMP Mon Sep 22 21:28:38 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux
> ---
> Package: openswan-modules-dkms
> Priority: optional
> Section: universe/kernel
> Installed-Size: 2415
> Maintainer: Ubuntu Developers <email address hidden>
> Original-Maintainer: Rene Mayrhofer <email address hidden>
> Architecture: amd64
> Source: openswan
> Version: 1:2.6.38-1
> Depends: dkms, openswan
> Filename: pool/universe/o/openswan/openswan-modules-dkms_2.6.38-1_amd64.deb
> ---
> Module doesn't compile, fails with erros
> See attached log for more info
>
> ProblemType: Bug
> DistroRelease: Ubuntu 14.04
> Package: openswan-modules-dkms 1:2.6.38-1
> ProcVersionSignature: Ubuntu 3.13.0-37.64-generic 3.13.11.7
> Uname: Linux 3.13.0-37-generic x86_64
> ApportVersion: 2.14.1-0ubuntu3.5
> Architecture: amd64
> Date: Fri Oct 24 22:47:52 2014
> InstallationDate: Installed on 2014-10-16 (8 days ago)
> InstallationMedia: Ubuntu-Server 14.04.1 LTS "Trusty Tahr" - Release amd64 (20140722.3)
> ProcEnviron:
> TERM=screen
> PATH=(custom, no user)
> XDG_RUNTIME_DIR=<set>
> LANG=fr_FR.UTF-8
> SHELL=/bin/bash
> SourcePackage: openswan
> UpgradeStatus: No upgrade log present (probably fresh install)
>
> ** Affects: openswan (Ubuntu)
> Importance: Undecided
> Status: New
>
>
> ** Tags: amd64 apport-bug trusty
>
> ** Attachment added: "Compilation log of the module"
> https://bugs.launchpad.net/bugs/1385487/+attachment/4244037/+files/openswan-dkms-compile-bug.txt
>

Thanks for such a quickly first answer.
Honestly, i don't know. this is a test server, switchted from debian to ubuntu 14.04 regarding another bug on an older openswan+xl2tp bug on android wich disallow them to connect to the server when klips is used
On the other side , the klips solution was the only way i was able to setup to allow multiple windows seven OS behind the same nated dsl connection to connect to the same server

BTW, if there is others solutions to achieved the sames goal that i've missed, could you please lead me a bit to those ones, please?
Also, i'm not sure if using beta ubuntu distro is the right way to do, as once i'm able to do what i want , the solution will be used on production servers.

On 10/24/2014 06:50 PM, Exaltia wrote:
> Thanks for such a quickly first answer.
> Honestly, i don't know. this is a test server, switchted from debian to ubuntu 14.04 regarding another bug on an older openswan+xl2tp bug on android wich disallow them to connect to the server when klips is used
> On the other side , the klips solution was the only way i was able to setup to allow multiple windows seven OS behind the same nated dsl connection to connect to the same server
>
> BTW, if there is others solutions to achieved the sames goal that i've missed, could you please lead me a bit to those ones, please?

Nowadays, the best way to support Windows 7 and newer is to use IKEv2
instead of IKEv1. Android and Mac OS X are best handled with IKEv1 +
XAUTH. IKEv1 + XAUTH is referred as "Cisco VPN" mode in the built-in OS
X and Android VPN clients. This way, you don't have to use L2TP inside
your VPN tunnel so that's one less moving part.

To support all those, you should look at Strongswan. The version
packaged in Ubuntu supports all those very well in the Trusty LTS
release, no need to use a non-LTS version.