IPSec on AM5728 PSDK

Kzk

Other Parts Discussed in Thread: AM5728

Hello,

Could you tell me how to process IPSec on AM5728 Processor SDK Linux? I can see the following benchmark of IPSec with Crypto driver. It looks like Crypto driver exists in PSDK as default. Does IPSec driver or library(AH, ESP and IKE) also exist in PSDK?

wiki.tiprocessors.com/.../Processor_SDK_Linux_Kernel_Performance_Guide

I see a building method for IPSec with OpenSwan on Sitara. But I don't think it's for kernel 4.x.

processors.wiki.ti.com/.../Build_OpenSwan_for_Sitara

Regards,
Kazu

over 10 years ago

0 Cvetolin Shulev-XID over 10 years ago

TI__Guru 65405 points

Hi Kazu,

The linked tutorial about Build OpenSwan refer to an old SDK release but you can try it with the newer SDK and kernel releases.

BR
Tsvetolin Shulev

0 Kzk over 10 years ago in reply to Cvetolin Shulev-XID

Genius 5785 points

Hi Tsvetolin,

Thank you for your quick reply. Do you know whether IPSec of wiki benchmark uses OpenSwan? I want to understand proven method if possible.

Regards,
Kazu

0 Bin Liu over 10 years ago in reply to Kzk

TI__Guru**** 180836 points

The wiki benchmark does not use Openswan. It uses Strongswan which binaries are already included in the root filesystem delivered in Processor SDK 3.0. The only thing you have to do is to generate those certificates and config ipsec in the root filesystem.

0 Kzk over 10 years ago in reply to Bin Liu

Genius 5785 points

Hi Bin and Tsvetolin,

Do binaries mean libraries? I can find some shared object files which are libraries in target file system of PSDKv2.0.2 and v3.0.0. But I can't find any executable files about strongswan. Could you give me advice?

Regards,
Kazu

0 Bin Liu over 10 years ago in reply to Kzk

TI__Guru**** 180836 points

By binaries, I meant libraries and ipsec command. Once you have all the certificates and ipsec.conf in place, you should be able to use ipsec command to setup IPsec tunnel.

Processors

Processors forum

IPSec on AM5728 PSDK