Re: 0.99 ESP protocol preferences

On Jun 11, 2006, at 8:42 AM, Joerg Mayer wrote:

> This is, how it looks on my system (untested):
>
> CFLAGS="-O3 -DHAVE_LIBCRYPT" ./configure --with-extra-gcc- 
> checks .......

If you have to explicitly add in "HAVE_LIBCRYPT", that's a bug in the  
configure script; it should figure out whether you have the  
appropriate library.

It appears, from the code in packet-ipsec.c, that the appropriate  
library is libgcrypt:

	http://directory.fsf.org/security/libgcrypt.html

A comment early in the file says:

/* If you want to be able to decrypt or Check Authentication of ESP  
packets you MUST define this : */

which sounds suspiciously as if the person who added the ESP  
decryption code didn't do any configure script work, they just  
expected you to explicitly define HAVE_LIBCRYPT in order to get the  
decryption code.

I'd say the configure script should check whether libgcrypt is  
installed and, if so, use it.