Rebuild procedure for super-freeswan : - download latest version from http://freeswan.ca/ - untar it to a fresh directory - copy the current stable kernel to a temporary one WARNING !!! some files will be modified without prior unlinking. The kernel should be duplicated and not linked. At least, Configure.help must be duplicated, but it's possible that other files will be affected. A read-only tree will easily exhibit the affected files. - do a "make kpatch KERNELSRC=path_to_temporary" - cd path_to_temporary_kernel - find . -name '*.orig' -o -name '*~' -o -name '*.*ipsec*' -o -name '*.mangled' -o -size 0 | xargs rm -vf - make distclean - rm freeswan.patch net/ipsec/GNUmakefile - you may have to move the doc from the end of Documentation/Configure.help to just after IPV6 to avoid patch collisions - diff the two trees to rebuild the patch - superfreeswan_dir and temporary_kernel_dir can NOW be removed