Problems with IPSec during kernel compilation with sources from CURRENT 9.0

Dear all,

I performed an upgrade of my kernel sources this morning using CVSup, and successfully retrieved all the sources from HEAD (CURRENT 9.0).

I then performed a kernel compilation to upgrade it, and since I wanted to test out IPSec, I added the following lines in my kernel configuration file :

Options        IPSEC
Options        IPSEC_DEBUG

But the kernel compilation doesn't go through and I get errors. Here are the errors I got (it's a bit long) :


xform_ah.o(.text+0x13): In function `ah_algorithm_lookup':
/usr/src/sys/netipsec/xform_ah.c:116: undefined reference to `auth_hash_hmac_sha2_512'
xform_ah.o(.text+0x26):/usr/src/sys/netipsec/xform_ah.c:120: undefined reference to `auth_hash_hmac_sha1'
xform_ah.o(.text+0x43):/usr/src/sys/netipsec/xform_ah.c:128: undefined reference to `auth_hash_hmac_sha2_256'
xform_ah.o(.text+0x55):/usr/src/sys/netipsec/xform_ah.c:124: undefined reference to `auth_hash_key_md5'
xform_ah.o(.text+0x73):/usr/src/sys/netipsec/xform_ah.c:126: undefined reference to `auth_hash_key_sha1'
xform_ah.o(.text+0x80):/usr/src/sys/netipsec/xform_ah.c:116: undefined reference to `auth_hash_null'
xform_ah.o(.text+0x8f):/usr/src/sys/netipsec/xform_ah.c:118: undefined reference to `auth_hash_hmac_md5'
xform_ah.o(.text+0x96):/usr/src/sys/netipsec/xform_ah.c:122: undefined reference to `auth_hash_hmac_ripemd_160'
xform_ah.o(.text+0x9d):/usr/src/sys/netipsec/xform_ah.c:130: undefined reference to `auth_hash_hmac_sha2_384'
xform_ah.o(.text+0x540): In function `ah_massage_headers':
/usr/src/sys/netipsec/xform_ah.c:432: undefined reference to `M_XDATA'
xform_ah.o(.text+0x623):/usr/src/sys/netipsec/xform_ah.c:485: undefined reference to `M_XDATA'
xform_ah.o(.text+0x688):/usr/src/sys/netipsec/xform_ah.c:505: undefined reference to `M_XDATA'
xform_ah.o(.text+0x705):/usr/src/sys/netipsec/xform_ah.c:529: undefined reference to `M_XDATA'
xform_ah.o(.text+0x756):/usr/src/sys/netipsec/xform_ah.c:538: undefined reference to `M_XDATA'
xform_ah.o(.text+0x8dc): In function `ah_output_cb':
/usr/src/sys/netipsec/xform_ah.c:1146: undefined reference to `crypto_dispatch'
xform_ah.o(.text+0x986):/usr/src/sys/netipsec/xform_ah.c:1172: undefined reference to `M_XDATA'
xform_ah.o(.text+0x996):/usr/src/sys/netipsec/xform_ah.c:1173: undefined reference to `crypto_freereq'
xform_ah.o(.text+0xa49):/usr/src/sys/netipsec/xform_ah.c:1200: undefined reference to `M_XDATA'
xform_ah.o(.text+0xa59):/usr/src/sys/netipsec/xform_ah.c:1201: undefined reference to `crypto_freereq'
xform_ah.o(.text+0xb79): In function `ah_input_cb':
/usr/src/sys/netipsec/xform_ah.c:768: undefined reference to `crypto_dispatch'
xform_ah.o(.text+0xbd0):/usr/src/sys/netipsec/xform_ah.c:778: undefined reference to `crypto_freereq'
xform_ah.o(.text+0xd32):/usr/src/sys/netipsec/xform_ah.c:825: undefined reference to `M_XDATA'
xform_ah.o(.text+0xebc):/usr/src/sys/netipsec/xform_ah.c:869: undefined reference to `M_XDATA'
xform_ah.o(.text+0xed0):/usr/src/sys/netipsec/xform_ah.c:871: undefined reference to `crypto_freereq'
xform_ah.o(.text+0x10e7): In function `ah_init':
/usr/src/sys/netipsec/xform_ah.c:221: undefined reference to `crypto_newsession'
xform_ah.o(.text+0x1148): In function `ah_zeroize':
/usr/src/sys/netipsec/xform_ah.c:238: undefined reference to `crypto_freesession'
xform_ah.o(.text+0x1469): In function `ah_output':
/usr/src/sys/netipsec/xform_ah.c:1003: undefined reference to `crypto_getreq'
xform_ah.o(.text+0x14e3):/usr/src/sys/netipsec/xform_ah.c:1024: undefined reference to `M_XDATA'
xform_ah.o(.text+0x1500):/usr/src/sys/netipsec/xform_ah.c:1027: undefined reference to `crypto_freereq'
xform_ah.o(.text+0x1676):/usr/src/sys/netipsec/xform_ah.c:1078: undefined reference to `M_XDATA'
xform_ah.o(.text+0x168c):/usr/src/sys/netipsec/xform_ah.c:1079: undefined reference to `crypto_freereq'
xform_ah.o(.text+0x171f):/usr/src/sys/netipsec/xform_ah.c:1099: undefined reference to `crypto_dispatch'
xform_ah.o(.text+0x1971): In function `ah_input':
/usr/src/sys/netipsec/xform_ah.c:608: undefined reference to `crypto_getreq'
xform_ah.o(.text+0x1ab4):/usr/src/sys/netipsec/xform_ah.c:646: undefined reference to `M_XDATA'
xform_ah.o(.text+0x1af8):/usr/src/sys/netipsec/xform_ah.c:652: undefined reference to `crypto_freereq'
xform_ah.o(.text+0x1b93):/usr/src/sys/netipsec/xform_ah.c:676: undefined reference to `M_XDATA'
xform_ah.o(.text+0x1ba9):/usr/src/sys/netipsec/xform_ah.c:677: undefined reference to `crypto_freereq'
xform_ah.o(.text+0x1c4d):/usr/src/sys/netipsec/xform_ah.c:700: undefined reference to `crypto_dispatch'
xform_ah.o(.text+0x1c77):/usr/src/sys/netipsec/xform_ah.c:642: undefined reference to `M_XDATA'
xform_esp.o(.text+0xf): In function `esp_algorithm_lookup':
/usr/src/sys/netipsec/xform_esp.c:110: undefined reference to `enc_xform_blf'
xform_esp.o(.text+0x1e):/usr/src/sys/netipsec/xform_esp.c:106: undefined reference to `enc_xform_3des'
xform_esp.o(.text+0x28):/usr/src/sys/netipsec/xform_esp.c:112: undefined reference to `enc_xform_cast5'
xform_esp.o(.text+0x39):/usr/src/sys/netipsec/xform_esp.c:108: undefined reference to `enc_xform_rijndael128'
xform_esp.o(.text+0x53):/usr/src/sys/netipsec/xform_esp.c:104: undefined reference to `enc_xform_camellia'
xform_esp.o(.text+0x67):/usr/src/sys/netipsec/xform_esp.c:104: undefined reference to `enc_xform_des'
xform_esp.o(.text+0x6e):/usr/src/sys/netipsec/xform_esp.c:114: undefined reference to `enc_xform_skipjack'
xform_esp.o(.text+0x75):/usr/src/sys/netipsec/xform_esp.c:116: undefined reference to `enc_xform_null'
xform_esp.o(.text+0x99): In function `esp_attach':
/usr/src/sys/netipsec/xform_esp.c:992: undefined reference to `enc_xform_des'
xform_esp.o(.text+0xad):/usr/src/sys/netipsec/xform_esp.c:993: undefined reference to `enc_xform_3des'
xform_esp.o(.text+0xc1):/usr/src/sys/netipsec/xform_esp.c:994: undefined reference to `enc_xform_rijndael128'
xform_esp.o(.text+0xd5):/usr/src/sys/netipsec/xform_esp.c:995: undefined reference to `enc_xform_blf'
xform_esp.o(.text+0xe9):/usr/src/sys/netipsec/xform_esp.c:996: undefined reference to `enc_xform_cast5'
xform_esp.o(.text+0xfd):/usr/src/sys/netipsec/xform_esp.c:997: undefined reference to `enc_xform_skipjack'
xform_esp.o(.text+0x111):/usr/src/sys/netipsec/xform_esp.c:998: undefined reference to `enc_xform_null'
xform_esp.o(.text+0x125):/usr/src/sys/netipsec/xform_esp.c:999: undefined reference to `enc_xform_camellia'
xform_esp.o(.text+0x2bb): In function `esp_input_cb':
/usr/src/sys/netipsec/xform_esp.c:502: undefined reference to `crypto_dispatch'
xform_esp.o(.text+0x417):/usr/src/sys/netipsec/xform_esp.c:554: undefined reference to `M_XDATA'
xform_esp.o(.text+0x427):/usr/src/sys/netipsec/xform_esp.c:555: undefined reference to `crypto_freereq'
xform_esp.o(.text+0x762):/usr/src/sys/netipsec/xform_esp.c:639: undefined reference to `M_XDATA'
xform_esp.o(.text+0x776):/usr/src/sys/netipsec/xform_esp.c:641: undefined reference to `crypto_freereq'
xform_esp.o(.text+0x7e0): In function `esp_zeroize':
/usr/src/sys/netipsec/xform_esp.c:258: undefined reference to `M_XDATA'
xform_esp.o(.text+0x946): In function `esp_init':
/usr/src/sys/netipsec/xform_esp.c:198: undefined reference to `enc_xform_null'
xform_esp.o(.text+0x95f):/usr/src/sys/netipsec/xform_esp.c:199: undefined reference to `M_XDATA'
xform_esp.o(.text+0xa2b):/usr/src/sys/netipsec/xform_esp.c:229: undefined reference to `crypto_newsession'
xform_esp.o(.text+0xa4e):/usr/src/sys/netipsec/xform_esp.c:232: undefined reference to `crypto_newsession'
xform_esp.o(.text+0xa9e):/usr/src/sys/netipsec/xform_esp.c:235: undefined reference to `crypto_newsession'
xform_esp.o(.text+0xcb2): In function `esp_output_cb':
/usr/src/sys/netipsec/xform_esp.c:920: undefined reference to `crypto_dispatch'
xform_esp.o(.text+0xd5d):/usr/src/sys/netipsec/xform_esp.c:942: undefined reference to `M_XDATA'
xform_esp.o(.text+0xd70):/usr/src/sys/netipsec/xform_esp.c:943: undefined reference to `crypto_freereq'
xform_esp.o(.text+0xe1e):/usr/src/sys/netipsec/xform_esp.c:974: undefined reference to `M_XDATA'
xform_esp.o(.text+0xe31):/usr/src/sys/netipsec/xform_esp.c:975: undefined reference to `crypto_freereq'
xform_esp.o(.text+0x1235): In function `esp_output':
/usr/src/sys/netipsec/xform_esp.c:810: undefined reference to `crypto_getreq'
xform_esp.o(.text+0x12ba):/usr/src/sys/netipsec/xform_esp.c:838: undefined reference to `M_XDATA'
xform_esp.o(.text+0x12d4):/usr/src/sys/netipsec/xform_esp.c:841: undefined reference to `crypto_freereq'
xform_esp.o(.text+0x13b0):/usr/src/sys/netipsec/xform_esp.c:874: undefined reference to `crypto_dispatch'
xform_esp.o(.text+0x16af): In function `esp_input':
/usr/src/sys/netipsec/xform_esp.c:350: undefined reference to `crypto_getreq'
xform_esp.o(.text+0x1706):/usr/src/sys/netipsec/xform_esp.c:361: undefined reference to `M_XDATA'
xform_esp.o(.text+0x1727):/usr/src/sys/netipsec/xform_esp.c:364: undefined reference to `M_XDATA'
xform_esp.o(.text+0x1746):/usr/src/sys/netipsec/xform_esp.c:367: undefined reference to `crypto_freereq'
xform_esp.o(.text+0x18fe):/usr/src/sys/netipsec/xform_esp.c:430: undefined reference to `crypto_dispatch'
xform_ipcomp.o(.text+0xa): In function `ipcomp_algorithm_lookup':
/usr/src/sys/netipsec/xform_ipcomp.c:88: undefined reference to `comp_algo_deflate'
xform_ipcomp.o(.text+0x5a): In function `ipcomp_input':
/usr/src/sys/netipsec/xform_ipcomp.c:147: undefined reference to `crypto_getreq'
xform_ipcomp.o(.text+0xad):/usr/src/sys/netipsec/xform_ipcomp.c:155: undefined reference to `M_XDATA'
xform_ipcomp.o(.text+0xcf):/usr/src/sys/netipsec/xform_ipcomp.c:158: undefined reference to `crypto_freereq'
xform_ipcomp.o(.text+0x1a4):/usr/src/sys/netipsec/xform_ipcomp.c:189: undefined reference to `crypto_dispatch'
xform_ipcomp.o(.text+0x1d8): In function `ipcomp_zeroize':
/usr/src/sys/netipsec/xform_ipcomp.c:130: undefined reference to `crypto_freesession'
xform_ipcomp.o(.text+0x288): In function `ipcomp_init':
/usr/src/sys/netipsec/xform_ipcomp.c:119: undefined reference to `crypto_newsession'
xform_ipcomp.o(.text+0x3f7): In function `ipcomp_output_cb':
/usr/src/sys/netipsec/xform_ipcomp.c:521: undefined reference to `crypto_dispatch'
xform_ipcomp.o(.text+0x534):/usr/src/sys/netipsec/xform_ipcomp.c:568: undefined reference to `M_XDATA'
xform_ipcomp.o(.text+0x544):/usr/src/sys/netipsec/xform_ipcomp.c:569: undefined reference to `crypto_freereq'
xform_ipcomp.o(.text+0x5f9):/usr/src/sys/netipsec/xform_ipcomp.c:582: undefined reference to `M_XDATA'
xform_ipcomp.o(.text+0x609):/usr/src/sys/netipsec/xform_ipcomp.c:583: undefined reference to `crypto_freereq'
xform_ipcomp.o(.text+0x733): In function `ipcomp_input_cb':
/usr/src/sys/netipsec/xform_ipcomp.c:252: undefined reference to `crypto_dispatch'
xform_ipcomp.o(.text+0x7d3):/usr/src/sys/netipsec/xform_ipcomp.c:273: undefined reference to `M_XDATA'
xform_ipcomp.o(.text+0x7e3):/usr/src/sys/netipsec/xform_ipcomp.c:274: undefined reference to `crypto_freereq'
xform_ipcomp.o(.text+0x9c0):/usr/src/sys/netipsec/xform_ipcomp.c:313: undefined reference to `M_XDATA'
xform_ipcomp.o(.text+0x9d4):/usr/src/sys/netipsec/xform_ipcomp.c:315: undefined reference to `crypto_freereq'
xform_ipcomp.o(.text+0xc81): In function `ipcomp_output':
/usr/src/sys/netipsec/xform_ipcomp.c:433: undefined reference to `crypto_getreq'
xform_ipcomp.o(.text+0xcea):/usr/src/sys/netipsec/xform_ipcomp.c:452: undefined reference to `M_XDATA'
xform_ipcomp.o(.text+0xd28):/usr/src/sys/netipsec/xform_ipcomp.c:457: undefined reference to `crypto_freereq'
xform_ipcomp.o(.text+0xda6):/usr/src/sys/netipsec/xform_ipcomp.c:476: undefined reference to `crypto_dispatch'
*** Error code 1
Stop in /usr/obj/usr/src/sys/MYKERNEL.
*** Error code 1
Stop in /usr/src.
*** Error code 1
Stop in /usr/src.
#


I must have made something silly or forgotten something important, but all I did was getting my kernel sources up to date via cvsup and recompiling it (the classic way : "# make buildkernel KERNCONF=MYKERNEL" ; MYKERNEL being my kernel configuration file) ... Do I have to recompile world too before recompiling the kernel ? Has someone even encountered this before ?
I removed these options from my kernel configuration file for the while and use the same file as GENERIC, expect that I added SCTP_DEBUG in it. Compilation was performed successfully and my laptop booted finely on it. But the fact that IPSec couldn't be compiled startled me a bit.

Thanks in advance for your help.


Aman Jassal