search

xelerance / Openswan

Openswan
Other
849 stars 214 forks source link

OpenSwan on QNX #482

Open madhu542 opened 7 months ago

madhu542 commented 7 months ago

Hi All,

Would like to use IPSec (IKEv2) stack in one of our system for QNX platform. Will OpenSwan is compatible to it? Can any one help me with the details.

Thanks in advance.

shussain commented 7 months ago

Could you please clarify what architecture the QNX platform is in.

I am assuming you will be compiling from source so you will need gcc, and make. Depending on what you are doing, you will need flex, bison, python (minimal), libgmp, libpcap, electric-fence and gcc-multilib

madhu542 commented 7 months ago

QNX is based on PPC. Yes you are correct. compiling with gcc, gmake/make and other dependencies.

paulwouters commented 7 months ago

See http://www.qnx.com/developers/docs/6.5.0/index.jsp?topic=%2Fcom.qnx.doc.neutrino_lib_ref%2Fi%2Fipsec_proto.html

Using the PF_KEY is similar to using KLIPS, but it is ancient and many things are not supported via the PF_KEY interface.

openswan won't work on QNX without months of hacking. The same is true for the IKE daemons that are actually still being developed, such as libreswan and strongswan, but you'd have a much better change at talking to actual developers for libreswan or strongswan. For instance, openswan ONLY works on linux, where as libreswan and strongswan work on Linux, FreeBSD, OpenBSD, etc. So much more portable with kernel stacks. Openswan has not been developed for over a decade. see https://nohats.ca/swan.gif