From 365066d25eaed1f5e47030d593888b922a84c11c Mon Sep 17 00:00:00 2001 From: Waldemar Brodkorb Date: Fri, 16 Jul 2010 13:53:32 +0200 Subject: fix strongswan package, ESP now works. --- target/linux/config/Config.in.crypto | 35 +++++++++++++++++++++++++++++++++++ target/linux/config/Config.in.ipsec | 3 ++- 2 files changed, 37 insertions(+), 1 deletion(-) (limited to 'target/linux') diff --git a/target/linux/config/Config.in.crypto b/target/linux/config/Config.in.crypto index cb6675468..b9d73aac2 100644 --- a/target/linux/config/Config.in.crypto +++ b/target/linux/config/Config.in.crypto @@ -150,6 +150,22 @@ config ADK_KPACKAGE_KMOD_CRYPTO_BLKCIPHER select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI help +config ADK_KPACKAGE_KMOD_CRYPTO_AUTHENC + prompt "kmod-crypto-authenc.................. AuthENC (IPsec)" + tristate + select ADK_KPACKAGE_KMOD_CRYPTO_MANAGER + default n + help + +config ADK_KPACKAGE_KMOD_CRYPTO_SEQIV + prompt "kmod-crypto-seqiv.................... Sequence Number IV Generator" + select ADK_KPACKAGE_KMOD_CRYPTO_RNG2 + select ADK_KPACKAGE_KMOD_CRYPTO_ALGAPI + tristate + help + This IV generator generates an IV based on a sequence number by + xoring it with a salt. This algorithm is mainly useful for CTR + config ADK_KPACKAGE_KMOD_CRYPTO_CBC prompt "kmod-crypto-cbc...................... CBC support" tristate @@ -161,6 +177,25 @@ config ADK_KPACKAGE_KMOD_CRYPTO_CBC CBC: Cipher Block Chaining mode This block cipher algorithm is required for IPSec. +config ADK_KPACKAGE_KMOD_CRYPTO_CCM + prompt "kmod-crypto-ccm...................... CCM support" + tristate + select ADK_KPACKAGE_KMOD_CRYPTO_MANAGER + select ADK_KPACKAGE_KMOD_CRYPTO_CTR + default n + help + Support for Counter with CBC MAC. Required for IPsec. + +config ADK_KPACKAGE_KMOD_CRYPTO_CTR + prompt "kmod-crypto-ctr...................... CTR support" + tristate + select ADK_KPACKAGE_KMOD_CRYPTO_MANAGER + select ADK_KPACKAGE_KMOD_CRYPTO_SEQIV + default n + help + CTR: Counter mode + This block cipher algorithm is required for IPSec. + config ADK_KPACKAGE_KMOD_CRYPTO_ECB prompt "kmod-crypto-ecb...................... ECB support" tristate diff --git a/target/linux/config/Config.in.ipsec b/target/linux/config/Config.in.ipsec index f1b17327a..05c5da5ba 100644 --- a/target/linux/config/Config.in.ipsec +++ b/target/linux/config/Config.in.ipsec @@ -1,7 +1,7 @@ menu "IPSec support" config ADK_KPACKAGE_KMOD_NET_KEY - prompt "kmod-net-ipsec-netkey............. PF_KEYv2 socket family" + prompt "kmod-net-key..................... PF_KEYv2 socket family" tristate default n help @@ -32,6 +32,7 @@ config ADK_KPACKAGE_KMOD_INET_ESP config ADK_KPACKAGE_KMOD_INET_IPCOMP prompt "kmod-inet-ipcomp.................. IP Payload Compression" tristate + select ADK_KPACKAGE_KMOD_CRYPTO_DEFLATE default n help Support for IP Payload Compression Protocol (IPComp) (RFC3173), -- cgit v1.2.3