Subversion Repositories openrisc

    The FreeBSD network stack which is part of

    eCos can be configured to use IPSEC to

    provide more secure communications between Internet hosts. IPSEC

    can be used with both IPv4 and IPv6.

    Due to the restrictions imposed by various countries on the

    exportation and importation of cryptographic software, it has been

    decided to distribute the crypto parts of FreeBSD IPSEC separately

    from the rest of eCos. Before IPSEC can be enabled the eCos

    package bsd_crypto must be installed. This package can be found on

    the eCosCentric server at

    ftp.ecoscentric.com:/pub/contrib. Once the package has been

    downloaded it must be installed using the

    ecosadmin.tcl script.

    When the bsd_crypto package has been installed, the building of

    IPSEC will automatically be enabled when the FreeBSD stack is

    used. It can be disabled using the configuration option

    CYGPKG_NET_IPSEC. There are no other

    configuration options for IPSEC as a whole.

    In order to use IPSEC, connections must be configured. This can be

    performed using setsockopt() calls. A more

    convenient way is the use the libipsec library

    from the KAME distribution. eCos

    contains a snapshot of this library, which is documented else

    where. The aim is to also port the

    racoon daemon to eCos in the near

    future.

    It should be noted that the FreeBSD stack in eCos is quite

    old. IPSEC and IPv6 have continued to develop. It is quite

    possible there could be interoperabilty problems when using the

    IPSEC implementation in eCos with more modern implementations.

    It should also be noted that IPSEC, libipsec etc are currently

    work in progress items.

  &net-ipsec-libipsec-libipsec-manpages-sgml;