bartman's blog

leaner meaner openswan

bartman

I started working for Xelerance in April of 2006, and the contract ended in December. Since then I’ve been working on a KLIPS-ng, of sorts. The idea was to remove all the crypto code from KLIPS and convert it to use CryptoAPI already in the Linux kernel.

Last objective of my work was to add OCF support to KLIPS, so that we could take advantage of the asynchronous crypto facilities provided there, as well as several OCF hardware drivers. The BSD kernels have been using OCF, Open Cryptographic Framework, for some time and more recently it was ported to Linux.

A lot of work as already been finished. and we are a lot leaner.

    $ git diff origin/public my-ocf+fsm_v2.6.18 -- include/openswan net/ipsec/ | diffstat | tail -n1
     98 files changed, 5688 insertions(+), 22162 deletions(-)

That’s about 16k lines less… and still functional.

Recently Martin Hicks has expressed interest in fixing up KLIPS to bring it upto date with the CodingStyle, and to remove all the support for prehistoric kernels. He would like to see KLIPS put up for inclusion into the kernel.

I suggested that he start not with the #public branch of KLIPS but with my tree where some of the warts have been removed.

In the last week, he’s been a patching machine!

    $ git diff origin/public HEAD -- include/openswan net/ipsec/ | diffstat | tail -n1
     130 files changed, 18140 insertions(+), 36060 deletions(-)

We are now 18k lines leaner then #public.

The tree is available at git://git.jukie.net/klips-fsm.git/, but I would really appreciate if you seeded from linux before getting my changes. Here is one way you could do this:

    git clone git://git2.kernel.org/pub/scm/linux/kernel/git/torvalds/linux-2.6.git/ linux-2.6.git
    git clone --reference linux-2.6.git git://git.jukie.net/klips-fsm.git/ klips-fsm.git

(this will clone Linus’ tree into linux-2.6.git and then use that as an alternative source of revisions to complete your clone of klips-fsm.git)

There have been two regressions that I noticed:

My immediate KLIPS TODO list is:

Tags: