Rebuild procedure for openswan 1.0 : - download latest version from http://www.openswan.org/code/ - untar it to a fresh directory - copy the current stable kernel to a temporary one WARNING !!! some files will be modified without prior unlinking, unless the patch "openswan-1.0.1-patcher-use-mv.diff" is applied to the tree. Otherwise, the kernel should be duplicated and not linked. (At least, Configure.help must be duplicated, but it's possible that other files will be affected. A read-only tree will easily exhibit the affected files). - do a "make insert KERNELSRC=path_to_temporary" - cd path_to_temporary_kernel - manually edit Configure.help to move the IPSEC help from the end to just above KHTTPD. - find . -name '*.orig' -o -name '*~' -o -name '*.*ipsec*' -o -name '*.mangled' -o -size 0 | xargs rm -vf - make distclean - diff the two trees to rebuild the patch - openswan_dir and temporary_kernel_dir can NOW be removed To clean a kernel containing openswan : - make distclean - find net/ipsec -type l | xargs rm -vf - rm -rf net/ipsec/alg/lib*