amd64/62295: ipsec failure on 5.2.1-RC amd64

[James Van Artsdalen]

> Date: Mon, 2 Feb 2004 19:04:22 -0800 (PST)
> From: Christopher McCrory <chrismcc+freebsd at freebsd.org>
> 
> >Synopsis:       ipsec failure on 5.2.1-RC amd64
> 
> bf_ecb.o: In function `BF_ecb_encrypt':
> bf_ecb.o(.text+0x77): undefined reference to `BF_encrypt'
> bf_ecb.o(.text+0x86): undefined reference to `BF_decrypt'
> bf_skey.o: In function `BF_set_key':
> bf_skey.o(.text+0xb7): undefined reference to `BF_encrypt'
> bf_skey.o(.text+0xeb): undefined reference to `BF_encrypt'
> des_ecb.o: In function `des_ecb_encrypt':
> des_ecb.o(.text+0xbc): undefined reference to `des_encrypt1'
> des_ecb.o: In function `des_ecb3_encrypt':
> des_ecb.o(.text+0x193): undefined reference to `des_encrypt3'
> des_ecb.o(.text+0x1a8): undefined reference to `des_decrypt3'

Please try this and tell me if IPSEC works.

I'd also like to know how performance compares to other
implementations - I'm wondering if the assembly language
optimizations from i386 should be ported to AMD64.

--- sys/conf/files.amd64.orig    Mon Nov 17 02:58:16 2003
+++ sys/conf/files.amd64 Mon Feb  2 23:08:43 2004
@@ -123,3 +123,10 @@
 compat/ia32/ia32_sigtramp.S    optional        ia32
 compat/ia32/ia32_sysvec.c      optional        ia32
 kern/imgact_elf32.c            optional        ia32
+#
+crypto/des/des_ecb.c                   optional        netsmbcrypto
+crypto/des/des_enc.c                   optional        netsmbcrypto
+crypto/des/des_setkey.c                        optional        netsmbcrypto
+crypto/blowfish/bf_enc.c               optional        crypto
+crypto/blowfish/bf_enc.c  optional        ipsec ipsec_esp
+crypto/des/des_enc.c              optional        ipsec ipsec_esp