<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px"><div></div><span id="yui_3_16_0_1_1427198093997_3831"><div><font face="Times New Roman">
</font></div><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri">Hi Noel,</font></span></div><div><font face="Times New Roman">
</font></div><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri">Thank you
for the response. Connecting requires an uri, prefixed with unix://. I added
the below in strongswan.conf file and there is no issue. </font></span></div><div><font face="Times New Roman">
</font></div><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"> </font></span></div><div><font face="Times New Roman">
</font></div><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"> </font></span></div><div><font face="Times New Roman">
</font></div><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>vici {</font></span></div><div><font face="Times New Roman">
</font></div><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"> </font></span></div><div><font face="Times New Roman">
</font></div><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>socket =
unix:///var/run/charon.vici</font></span></div><div><font face="Times New Roman">
</font></div><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>}</font></span></div><div><font face="Times New Roman">
</font></div><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"> </font></span></div><div><font face="Times New Roman">
</font></div><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri"> </font></span></div><div><font face="Times New Roman">
</font></div><div id="yui_3_16_0_1_1427198093997_3830" style="margin: 0in 0in 10pt;"><font id="yui_3_16_0_1_1427198093997_3829" face="Calibri"><span id="yui_3_16_0_1_1427198093997_3828" style="line-height: 115%; font-size: 12pt;">Configured
the /etc/swanctl.conf and <span style="mso-spacerun: yes;"> </span><span style="mso-spacerun: yes;"> </span>trigged #swanctl --load-conns (which loads
connection configuration) to initiate and establish the IPsec tunnel with IKE
Responder. The swanctl works independently from starter, ipsec.conf file. Is
there any way to get rid of any configuration file (i.e., swanctl.conf and
strongswan.conf) and </span><span style="line-height: 115%; font-size: 12pt; mso-bidi-font-family: Calibri; mso-bidi-theme-font: minor-latin;">configure, control
and monitor the IKE daemon Charon via command line interface only? </span></font></div><div><font face="Times New Roman">
</font></div><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri">Regards,</font></span></div><div><font face="Times New Roman">
</font></div><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt;"><font face="Calibri">Chinmaya</font></span></div><div><font face="Times New Roman">
</font></div></span><div></div> <br><div class="qtdSeparateBR"><br><br></div><div class="yahoo_quoted" style="display: block;"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;"> <div dir="ltr"> <font face="Arial" size="2"> On Friday, March 20, 2015 1:31 PM, Chinmaya Dwibedy <ckdwibedy@yahoo.com> wrote:<br> </font> </div> <br><br> <div class="y_msg_container"><div id="yiv3522283121"><div><div style="color: rgb(0, 0, 0); font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px; background-color: rgb(255, 255, 255);"><div id="yiv3522283121yui_3_16_0_1_1426836234465_55834"><span></span><br clear="none"></div><div id="yiv3522283121yui_3_16_0_1_1426836234465_56247"><span></span><br clear="none"></div><font face="Times New Roman">
</font><div id="yiv3522283121yui_3_16_0_1_1426836234465_56246" style="margin: 0in 0in 10pt; line-height: normal;"><span style="color: rgb(0, 32, 96); font-size: 12pt;"><font face="Calibri">Hi Noel,</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt; line-height: normal;"><span style="color: rgb(0, 32, 96); font-size: 12pt;"><font face="Calibri">I
do not know why I am not getting the response in my email Id ( registered with
users list) . Anyway checked the response at </font><a href="https://www.mail-archive.com/users@lists.strongswan.org/msg09148.html" target="_blank" rel="nofollow" shape="rect"><font face="Calibri">https://www.mail-archive.com/users@lists.strongswan.org/msg09148.html</font></a><font face="Calibri">.
Thank you for prompt reply.</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt; line-height: normal;"><span style="color: rgb(0, 32, 96); font-size: 12pt;"><font face="Calibri">Yes,
launched Charon as a root user. I used the followings configuration options</font></span></div><font face="Times New Roman">
</font><div id="yiv3522283121yui_3_16_0_1_1426836234465_56245" style="margin: 0in 0in 10pt; line-height: normal;"><span id="yiv3522283121yui_3_16_0_1_1426836234465_56244" style="color: rgb(0, 32, 96); font-size: 12pt;"><font id="yiv3522283121yui_3_16_0_1_1426836234465_56243" face="Calibri">./configure
--prefix=/usr --sysconfdir=/etc --enable-load-tester --enable-ctr --enable-ccm
--enable-gcm --enable-vici --enable-error-notify</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt; line-height: normal;"><span style="color: rgb(0, 32, 96); font-size: 12pt;"><font face="Calibri">Thereafter
did make clean && make && make install . I am using the Fedora
release 17.</font></span></div><font face="Times New Roman">
</font><div id="yiv3522283121yui_3_16_0_1_1426836234465_56254" style="margin: 0in 0in 10pt; line-height: normal;"><span id="yiv3522283121yui_3_16_0_1_1426836234465_56253" style="color: rgb(0, 32, 96); font-size: 12pt;"><font id="yiv3522283121yui_3_16_0_1_1426836234465_56252" face="Calibri">[root@sefpdev-1
strongswan-5.2.2]# cat /etc/issue</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt; line-height: normal;"><span style="color: rgb(0, 32, 96); font-size: 12pt;"><font face="Calibri">Fedora
release 17 (Beefy Miracle)</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt; line-height: normal;"><span style="color: rgb(0, 32, 96); font-size: 12pt;"><font face="Calibri">Kernel
\r on an \m (\l)</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt; line-height: normal;"><span style="color: rgb(0, 32, 96); font-size: 12pt;"><font face="Calibri">[root@sefpdev-1
strongswan-5.2.2]#</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt; line-height: normal;"><span style="color: rgb(0, 32, 96); font-size: 12pt;"><font face="Calibri"> </font></span></div><font face="Times New Roman">
</font><div id="yiv3522283121yui_3_16_0_1_1426836234465_56240" style="margin: 0in 0in 10pt; line-height: normal;"><span id="yiv3522283121yui_3_16_0_1_1426836234465_56239" style="color: rgb(0, 32, 96); font-size: 12pt;"><font id="yiv3522283121yui_3_16_0_1_1426836234465_56238" face="Calibri">[root@sefpdev-1
strongswan-5.2.2]# uname -a</font></span></div><font face="Times New Roman">
</font><div id="yiv3522283121yui_3_16_0_1_1426836234465_56237" style="margin: 0in 0in 10pt; line-height: normal;"><span id="yiv3522283121yui_3_16_0_1_1426836234465_56236" style="color: rgb(0, 32, 96); font-size: 12pt;"><font id="yiv3522283121yui_3_16_0_1_1426836234465_56235" face="Calibri">Linux
sefpdev-1 3.9.10-100.fc17.x86_64 #1 SMP Sun Jul 14 01:31:27 UTC 2013 x86_64
x86_64 x86_64 GNU/Linux</font></span></div><font face="Times New Roman">
</font><div id="yiv3522283121yui_3_16_0_1_1426836234465_56102" style="margin: 0in 0in 10pt; line-height: normal;"><span style="color: rgb(0, 32, 96); font-size: 12pt;"><font face="Calibri">[root@sefpdev-1
strongswan-5.2.2]#</font></span></div><font face="Times New Roman">
</font><div id="yiv3522283121yui_3_16_0_1_1426836234465_56234" style="margin: 0in 0in 10pt; line-height: normal;"><span style="color: rgb(0, 32, 96); font-size: 12pt;"><font face="Calibri"> </font></span></div><font face="Times New Roman">
</font><div id="yiv3522283121yui_3_16_0_1_1426836234465_56255" style="margin: 0in 0in 10pt; line-height: normal;"><span style="color: rgb(0, 32, 96); font-size: 12pt;"><font face="Calibri"> </font></span></div><font face="Times New Roman">
</font><div id="yiv3522283121yui_3_16_0_1_1426836234465_56258" style="margin: 0in 0in 10pt; line-height: normal;"><span id="yiv3522283121yui_3_16_0_1_1426836234465_56257" style="color: rgb(0, 32, 96); font-size: 12pt;"><font id="yiv3522283121yui_3_16_0_1_1426836234465_56256" face="Calibri">[root@sefpdev-1
strongswan-5.2.2]# uname -r</font></span></div><font face="Times New Roman">
</font><div id="yiv3522283121yui_3_16_0_1_1426836234465_56261" style="margin: 0in 0in 10pt; line-height: normal;"><span id="yiv3522283121yui_3_16_0_1_1426836234465_56260" style="color: rgb(0, 32, 96); font-size: 12pt;"><font id="yiv3522283121yui_3_16_0_1_1426836234465_56259" face="Calibri">3.9.10-100.fc17.x86_64</font></span></div><font face="Times New Roman">
</font><div id="yiv3522283121yui_3_16_0_1_1426836234465_56264" style="margin: 0in 0in 10pt; line-height: normal;"><span id="yiv3522283121yui_3_16_0_1_1426836234465_56263" style="color: rgb(0, 32, 96); font-size: 12pt;"><font id="yiv3522283121yui_3_16_0_1_1426836234465_56262" face="Calibri">[root@sefpdev-1
strongswan-5.2.2]#</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt; line-height: normal;"><span style="color: rgb(0, 32, 96); font-size: 12pt;"><font face="Calibri"> </font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt; line-height: normal;"><span style="color: rgb(0, 32, 96); font-size: 12pt;"><font face="Calibri">[root@sefpdev-1
strongswan-5.2.2]# file /var/run/charon.vici</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt; line-height: normal;"><span style="color: rgb(0, 32, 96); font-size: 12pt;"><font face="Calibri">/var/run/charon.vici:
socket</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt; line-height: normal;"><span style="color: rgb(0, 32, 96); font-size: 12pt;"><font face="Calibri">[root@sefpdev-1
strongswan-5.2.2]#</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt; line-height: normal;"><span style="color: rgb(0, 32, 96); font-size: 12pt;"><font face="Calibri">[root@sefpdev-1
strongswan-5.2.2]# sestatus</font></span></div><font face="Times New Roman">
</font><div id="yiv3522283121yui_3_16_0_1_1426836234465_55973" style="margin: 0in 0in 10pt; line-height: normal;"><span style="color: rgb(0, 32, 96); font-size: 12pt;"><font face="Calibri">SELinux
status:<span> </span>disabled</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt; line-height: normal;"><span style="color: rgb(0, 32, 96); font-size: 12pt;"><font face="Calibri">[root@sefpdev-1
strongswan-5.2.2]#</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt; line-height: normal;"><span style="color: rgb(0, 32, 96); font-size: 12pt;"><font face="Calibri"> </font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt; line-height: normal;"><span style="color: rgb(0, 32, 96); font-size: 12pt;"><font face="Calibri">Regards,</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt; line-height: normal;"><span style="color: rgb(0, 32, 96); font-size: 12pt;"><font face="Calibri">Chinmaya</font></span></div><font face="Times New Roman">
</font><br clear="none"><div class="yiv3522283121qtdSeparateBR"><br clear="none"><br clear="none"></div><div class="yiv3522283121yqt7862869258" id="yiv3522283121yqt15740"><div class="yiv3522283121yahoo_quoted" style="display: block;"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;"> <div dir="ltr"> <font face="Arial" size="2"> On Friday, March 20, 2015 1:00 PM, Chinmaya Dwibedy <ckdwibedy@yahoo.com> wrote:<br clear="none"> </font> </div> <br clear="none"><br clear="none"> <div class="yiv3522283121y_msg_container"><div id="yiv3522283121"><div><div style="color: rgb(0, 0, 0); font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px; background-color: rgb(255, 255, 255);"> <font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt; line-height: normal;"><span style="color: rgb(0, 32, 96); font-size: 12pt;"><font face="Calibri">Hi
,</font></span></div><font face="Times New Roman">
</font><div id="yiv3522283121yui_3_16_0_1_1426836234465_5030" style="margin: 0in 0in 10pt; line-height: normal;"><font id="yiv3522283121yui_3_16_0_1_1426836234465_5029" face="Calibri"><span style="color: rgb(0, 32, 96); font-size: 12pt;">I
am trying to use </span><span id="yiv3522283121yui_3_16_0_1_1426836234465_5028" style="font-size: 12pt;">the swanctl utility (i.e., a command
line application to configure and control charon) (strongswan: 5.2.2) . I configured
the /etc/swanctl/swanctl.conf file (On IKE Initiator end) and then upon trying
to initiate the connection <span> </span>thru #swanctl
--load-conns, it gives the following errors</span></font></div><font face="Times New Roman">
</font><div id="yiv3522283121yui_3_16_0_1_1426836234465_5002" style="margin: 0in 0in 10pt; line-height: normal;"><span id="yiv3522283121yui_3_16_0_1_1426836234465_5001" style="font-size: 12pt;"><font id="yiv3522283121yui_3_16_0_1_1426836234465_5000" face="Calibri">connecting to 'unix:///var/run/charon.vici'
failed: Connection refused</font></span></div><font face="Times New Roman">
</font><div id="yiv3522283121yui_3_16_0_1_1426836234465_5033" style="margin: 0in 0in 10pt; line-height: normal;"><span id="yiv3522283121yui_3_16_0_1_1426836234465_5032" style="font-size: 12pt;"><font id="yiv3522283121yui_3_16_0_1_1426836234465_5031" face="Calibri">Error: connecting to 'default' URI failed:
Connection refused</font></span></div><font face="Times New Roman">
</font><div id="yiv3522283121yui_3_16_0_1_1426836234465_5036" style="margin: 0in 0in 10pt; line-height: normal;"><span id="yiv3522283121yui_3_16_0_1_1426836234465_5035" style="font-size: 12pt;"><font id="yiv3522283121yui_3_16_0_1_1426836234465_5034" face="Calibri">strongSwan 5.2.2 swanctl</font></span></div><div id="yiv3522283121yui_3_16_0_1_1426836234465_5037" style="margin: 0in 0in 10pt; line-height: normal;"><span style="font-size: 12pt;"><font face="Calibri"> </font></span></div><font face="Times New Roman">
</font><div id="yiv3522283121yui_3_16_0_1_1426836234465_5040" style="margin: 0in 0in 10pt; line-height: normal;"><span id="yiv3522283121yui_3_16_0_1_1426836234465_5039" style="font-size: 12pt;"><font id="yiv3522283121yui_3_16_0_1_1426836234465_5038" face="Calibri">I run the #ipsec start command to get the
startup log and found that, creation of VICI socket is getting failed. <span> </span>Can anyone suggest how to resolve this ?</font></span></div><font face="Times New Roman">
</font><div id="yiv3522283121yui_3_16_0_1_1426836234465_5041" style="margin: 0in 0in 10pt; line-height: normal;"><span style="color: rgb(0, 32, 96); font-size: 12pt;"><font face="Calibri"> </font></span></div><font face="Times New Roman">
</font><div id="yiv3522283121yui_3_16_0_1_1426836234465_5044" style="margin: 0in 0in 10pt; line-height: normal;"><span id="yiv3522283121yui_3_16_0_1_1426836234465_5043" style="color: rgb(0, 32, 96); font-size: 12pt;"><font id="yiv3522283121yui_3_16_0_1_1426836234465_5042" face="Calibri">[root@sefpdev-1
strongswan-5.2.2]# cat /var/log/charon.log | grep vici</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt; line-height: normal;"><span style="color: rgb(0, 32, 96); font-size: 12pt;"><font face="Calibri">Mar
20 00:00:15 00[LIB] plugin 'vici': loaded successfully</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt; line-height: normal;"><span style="color: rgb(0, 32, 96); font-size: 12pt;"><font face="Calibri">Mar
20 00:00:15 00[LIB] loading feature CUSTOM:vici in plugin 'vici'</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt; line-height: normal;"><span style="color: rgb(0, 32, 96); font-size: 12pt;"><font face="Calibri">Mar
20 00:00:15 00[CFG] creating vici socket failed</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt; line-height: normal;"><span style="color: rgb(0, 32, 96); font-size: 12pt;"><font face="Calibri">Mar
20 00:00:15 00[LIB] feature CUSTOM:vici in plugin 'vici' failed to load</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt; line-height: normal;"><span style="color: rgb(0, 32, 96); font-size: 12pt;"><font face="Calibri">Mar
20 00:00:15 00[LIB] unloading plugin 'vici' without loaded features</font></span></div><font face="Times New Roman">
</font><div style="margin: 0in 0in 10pt; line-height: normal;"><span style="color: rgb(0, 32, 96); font-size: 12pt;"><font face="Calibri">[root@sefpdev-1
strongswan-5.2.2]#</font></span></div><div style="margin: 0in 0in 10pt; line-height: normal;"><span style="color: rgb(0, 32, 96); font-size: 12pt;"><font face="Calibri"></font></span><br clear="none"></div><div style="margin: 0in 0in 10pt; line-height: normal;" dir="ltr"><span style="color: rgb(0, 32, 96); font-size: 12pt;"><font face="Calibri">Regards,</font></span></div><div style="margin: 0in 0in 10pt; line-height: normal;" dir="ltr"><span style="color: rgb(0, 32, 96); font-size: 12pt;"><font face="Calibri">Chinmaya</font></span></div><font face="Times New Roman">
</font></div></div></div><br clear="none"><br clear="none"></div> </div> </div> </div></div></div></div></div><br><br></div> </div> </div> </div></div></body></html>