Rebuild procedure for super-freeswan : - download latest version from http://freeswan.ca/ - untar it to a fresh directory - copy the current stable kernel to a temporary one WARNING !!! some files will be modified without prior unlinking. The kernel should be duplicated and not linked. At least, Configure.help must be duplicated, but it's possible that other files will be affected. A read-only tree will easily exhibit the affected files. - do a "make insert KERNELSRC=path_to_temporary" - cd path_to_temporary_kernel - manually edit Configure.help to move the IPSEC help from the end to just above KHTTPD. - find . -name '*.orig' -o -name '*~' -o -name '*.*ipsec*' -o -name '*.mangled' -o -size 0 | xargs rm -vf - make distclean - you may have to move the doc from the end of Documentation/Configure.help to just after IPV6 to avoid patch collisions - diff the two trees to rebuild the patch - superfreeswan_dir and temporary_kernel_dir can NOW be removed To clean a kernel containing superfreeswan : - make distclean - find net/ipsec -type l | xargs rm -vf - rm -rf net/ipsec/alg/lib*