Re: RELENG_5 Compile problems when using FAST_IPSEC?

> > I'm having problems compiling a RELENG_5 kernel if I add FAST_IPSEC to
it.
> It looks like you didn't include 'device crypto'.

I've done some more testing:
First, I added the following lines to GENERIC, and the kernel compiled fine:

options               FAST_IPSEC      #new IPsec (cannot define w/ IPSEC)
device                crypto          # core crypto support
device                cryptodev       # /dev/crypto for access to h/w
device                rndtest         # FIPS 140-2 entropy tester
device                hifn            # Hifn 7951, 7781, etc.
options               HIFN_DEBUG      # enable debugging support:
hw.hifn.debug
options               HIFN_RNDTEST    # enable rndtest support

Then, I added:

device                pf              #PF OpenBSD packet-filter firewall
device                pflog           #logging support interface for PF
device                pfsync          #synchronization interface for PF

and I got the following error:

cc -c -O -pipe -march=pentium3 -Wall -Wredundant-decls -Wnested-externs -Wst
rict-prototypes  -Wmissing-prototypes -Wpointer-arith -Winline -Wcast-qual  
-fformat-extensions -std=c99  -nostdinc -I-  -I. -I/usr/src/sys -I/usr/src/s
ys/contrib/dev/acpica -I/usr/src/sys/contrib/altq -I/usr/src/sys/contrib/ipf
ilter -I/usr/src/sys/contrib/pf -I/usr/src/sys/contrib/dev/ath -I/usr/src/sy
s/contrib/dev/ath/freebsd -I/usr/src/sys/contrib/ngatm -D_KERNEL -include
opt_global.h -fno-common -finline-limit=8000 --param
inline-unit-growth=100 --param
arge-function-growth=1000  -mno-align-long-strings -mpreferred-stack-boundar
y=2 -ffreestanding -Werror  /usr/src/sys/netinet/ip_id.c
cc -c -O -pipe -march=pentium3 -Wall -Wredundant-decls -Wnested-externs -Wst
rict-prototypes  -Wmissing-prototypes -Wpointer-arith -Winline -Wcast-qual  
-fformat-extensions -std=c99  -nostdinc -I-  -I. -I/usr/src/sys -I/usr/src/s
ys/contrib/dev/acpica -I/usr/src/sys/contrib/altq -I/usr/src/sys/contrib/ipf
ilter -I/usr/src/sys/contrib/pf -I/usr/src/sys/contrib/dev/ath -I/usr/src/sy
s/contrib/dev/ath/freebsd -I/usr/src/sys/contrib/ngatm -D_KERNEL -include
opt_global.h -fno-common -finline-limit=8000 --param
inline-unit-growth=100 --param
arge-function-growth=1000  -mno-align-long-strings -mpreferred-stack-boundar
y=2 -ffreestanding -Werror  /usr/src/sys/netinet/in_pcb.c
cc -c -O -pipe -march=pentium3 -Wall -Wredundant-decls -Wnested-externs -Wst
rict-prototypes  -Wmissing-prototypes -Wpointer-arith -Winline -Wcast-qual  
-fformat-extensions -std=c99  -nostdinc -I-  -I. -I/usr/src/sys -I/usr/src/s
ys/contrib/dev/acpica -I/usr/src/sys/contrib/altq -I/usr/src/sys/contrib/ipf
ilter -I/usr/src/sys/contrib/pf -I/usr/src/sys/contrib/dev/ath -I/usr/src/sy
s/contrib/dev/ath/freebsd -I/usr/src/sys/contrib/ngatm -D_KERNEL -include
opt_global.h -fno-common -finline-limit=8000 --param
inline-unit-growth=100 --param
arge-function-growth=1000  -mno-align-long-strings -mpreferred-stack-boundar
y=2 -ffreestanding -Werror  /usr/src/sys/netinet/in_proto.c
In file included from /usr/src/sys/netinet/in_proto.c:91:
/usr/src/sys/contrib/pf/net/pfvar.h:57: error: redefinition of `union
sockaddr_union'
*** Error code 1

Stop in /usr/obj/usr/src/sys/VIMES.
*** Error code 1

Stop in /usr/src.
*** Error code 1

Stop in /usr/src.

Finally, I commented out the FAST_IPSEC line, and the kernel compiled fine
again.
Looks like there might be something odd with pf + FAST_IPSEC? Or am I
misinterpreting things here?

-- 
Regards
Eivind Olsen