Gentoo Kernel (gentoo-sources-2.4.20-r5) contains the following version of IPSEC/freeswan: SuperFreeS/WAN to 1,99,7rc2 freeswan requires that userspace tools be the same version as the kernel tools (obtained from freeswan developers). the only versions available are: (obtained from emerge search) * net-misc/super-freeswan [ Masked ] Latest version available: 1.99_p4 * net-misc/freeswan Latest version available: 1.98b Reproducible: Always Steps to Reproduce: 1. emerge gentoo-sources 2. attempt to find a matching version 3. Actual Results: No matching version to ensure freeswan/IPSEC works. Expected Results: A matched version to merge.
It is even worse now. Using ~x86, an "emerge -u" gave me freeswan 2.02 because package.mask has =net-misc/freeswan-2.01 instead of >=net-misc/freeswan-2.01. Userspace at 2.02 and kernel (gentoo-sources-2.4.20-r7) at 1.99 do not work together at all. The pkg_setup() function in the freeswan ebuild could be more sofisticated by also checking that the version indicated in /usr/src/linux/net/ipsec/Makefile.ver and the version of the ebuild are compatible.
there are matching super-freeswan tools, they are called "super-freeswan". You're using the wrong package here, that's all i'd suggest closing this bug
yep. the patches in gentoo sources relate to super-freeswan, not freeswan proper. and the version of super-freeswan is 1.99.7.3, which is the same as in the kernel.