StrongSwan/LibreSwan support

anaelorlinski / OpenWrt-NanoPi-R2S-R4S-Builds

OpenWRT Builds for NanoPi R2S & R4S from official Openwrt source code with minimal set of patches

MIT License

175 stars 58 forks source link

StrongSwan/LibreSwan support #14

Closed aw1cks closed 2 years ago

aw1cks commented 2 years ago

Hi there! Cool project, thanks! I made something similar but yours is better :)

I was wondering, if you would be opposed to adding a few kernel modules, needed for IPsec. The following kernel modules would need adding:

kmod-ip6-vti
kmod-ipsec6
kmod-ipt-ipsec
kmod-ip-vti
kmod-iptunnel4
kmod-ipsec4
kmod-xfrm-interface

I'll happily make a PR to do this - just wanting to check if it will be accepted if I do so!

anaelorlinski commented 2 years ago

Sounds legit to me to be added in the full release, but only adding kernel modules will probably not be enough. Instead I could add those packages :

libreswan : will automatically add the required kernel deps
strongswan : seems heavy but modular so I will pick a subset of all available modules

aw1cks commented 2 years ago

Sounds good! I'll make a PR.

anaelorlinski commented 2 years ago

I added libreswan (and dependencies). Build is in progress. Regarding strongswan, it cannot be built-in at the same time as libreswan so I made a choice because there are much less dependencies.

aw1cks commented 2 years ago

Thanks - package is showing up, I will test it out over the next few days. Happy holidays!