<div dir="ltr"><br><div class="gmail_quote"><div dir="ltr"><div>Hi Andreas,<br></div>I am getting below log in both the ubuntu 14.04 LTS machine.Please suggest me where I went wrong.<br>Starting IKE charon daemon (strongSwan 5.1.2, Linux 3.13.0-32-generic, x86_64)<br>May 19 17:16:20 necs101-desktop charon: 00[CFG] loading ca certificates from '/etc/ipsec.d/cacerts'<br>May 19 17:16:20 necs101-desktop charon: 00[CFG] loaded ca certificate "C=in, ST=karnataka, L=bangalore, O=netcloudsystems, OU=dev, CN=necs, E=<a href="mailto:priyaranjan@netcloudsystems.com" target="_blank">priyaranjan@netcloudsystems.com</a>" from '/etc/ipsec.d/cacerts/strongswanCert.pem'<br>May 19 17:16:20 necs101-desktop charon: 00[CFG] loading aa certificates from '/etc/ipsec.d/aacerts'<br>May 19 17:16:20 necs101-desktop charon: 00[CFG] loading ocsp signer certificates from '/etc/ipsec.d/ocspcerts'<br>May 19 17:16:20 necs101-desktop charon: 00[CFG] loading attribute certificates from '/etc/ipsec.d/acerts'<br>May 19 17:16:20 necs101-desktop charon: 00[CFG] loading crls from '/etc/ipsec.d/crls'<br>May 19 17:16:20 necs101-desktop charon: 00[CFG] loading secrets from '/etc/ipsec.secrets'<br>May 19 17:16:20 necs101-desktop charon: 00[LIB] loaded plugins: charon test-vectors aes rc2 sha1 sha2 md4 md5 rdrand random nonce x509 revocation constraints pkcs1 pkcs7 pkcs8 pkcs12 pem openssl xcbc cmac hmac ctr ccm gcm attr kernel-netlink resolve socket-default stroke updown eap-identity addrblock<br>May 19 17:16:20 necs101-desktop charon: 00[LIB] unable to load 5 plugin features (5 due to unmet dependencies)<br>May 19 17:16:20 necs101-desktop charon: 00[LIB] dropped capabilities, running as uid 0, gid 0<br>May 19 17:16:20 necs101-desktop charon: 00[JOB] spawning 16 worker threads<br>May 19 17:16:20 necs101-desktop charon: 05[CFG] crl caching to /etc/ipsec.d/crls enabled<br>May 19 17:16:20 necs101-desktop charon: 04[CFG] received stroke: add ca 'strongswan'<br>May 19 17:16:20 necs101-desktop charon: 04[CFG] loaded ca certificate "C=in, ST=karnataka, L=bangalore, O=netcloudsystems, OU=dev, CN=necs, E=<a href="mailto:priyaranjan@netcloudsystems.com" target="_blank">priyaranjan@netcloudsystems.com</a>" from 'strongswanCert.pem'<br>May 19 17:16:20 necs101-desktop charon: 04[CFG] added ca 'strongswan'<br>May 19 17:16:20 necs101-desktop charon: 09[CFG] received stroke: add connection 'host-host'<br>May 19 17:16:20 necs101-desktop charon: 09[LIB] OpenSSL X.509 parsing failed<br>May 19 17:16:20 necs101-desktop charon: 09[LIB] building CRED_CERTIFICATE - ANY failed, tried 1 builders<br>May 19 17:16:20 necs101-desktop charon: 09[CFG] loading certificate from 'hostKey.pem' failed<br>May 19 17:16:20 necs101-desktop charon: 09[CFG] added configuration 'host-host'<br><br></div><div class="gmail_extra"><div><div class="h5"><br><div class="gmail_quote">On Tue, May 19, 2015 at 4:40 PM, Priyaranjan Nayak <span dir="ltr"><<a href="mailto:priyaranjan4169@gmail.com" target="_blank">priyaranjan4169@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>Hi Andreas,<br><br></div>I have got below syslogs from my machine.<br><br> Starting IKE charon daemon (strongSwan 5.1.2, Linux 3.13.0-19-generic, x86_64)<br>May 19 16:23:49 priya charon: 00[CFG] loading ca certificates from '/etc/ipsec.d/cacerts'<br>May 19 16:23:49 priya charon: 00[CFG] loaded ca certificate "C=in, ST=karnataka, L=bangalore, O=netcloudsystems, OU=dev, CN=necs, E=<a href="mailto:priyaranjan@netcloudsystems.com" target="_blank">priyaranjan@netcloudsystems.com</a>" from '/etc/ipsec.d/cacerts/strongswanCert.pem'<br>May 19 16:23:49 priya charon: 00[CFG] loading aa certificates from '/etc/ipsec.d/aacerts'<br>May 19 16:23:49 priya charon: 00[CFG] loading ocsp signer certificates from '/etc/ipsec.d/ocspcerts'<br>May 19 16:23:49 priya charon: 00[CFG] loading attribute certificates from '/etc/ipsec.d/acerts'<br>May 19 16:23:49 priya charon: 00[CFG] loading crls from '/etc/ipsec.d/crls'<br>May 19 16:23:49 priya charon: 00[CFG] loading secrets from '/etc/ipsec.secrets'<br>May 19 16:23:49 priya charon: 00[LIB] building CRED_PRIVATE_KEY - RSA failed, tried 5 builders<br>May 19 16:23:49 priya charon: 00[CFG] loading private key from '/etc/ipsec.d/private/hostKey.pem' failed<br>May 19 16:23:49 priya charon: 00[LIB] loaded plugins: charon test-vectors aes rc2 sha1 sha2 md4 md5 rdrand random nonce x509 revocation constraints pkcs1 pkcs7 pkcs8 pkcs12 pem openssl xcbc cmac hmac ctr ccm gcm attr kernel-netlink resolve socket-default stroke updown eap-identity addrblock<br>May 19 16:23:49 priya charon: 00[LIB] unable to load 5 plugin features (5 due to unmet dependencies)<br>May 19 16:23:49 priya charon: 00[LIB] dropped capabilities, running as uid 0, gid 0<br>May 19 16:23:49 priya charon: 00[JOB] spawning 16 worker threads<br>May 19 16:23:49 priya charon: 03[CFG] crl caching to /etc/ipsec.d/crls enabled<br>May 19 16:23:49 priya charon: 09[CFG] received stroke: add ca 'strongswan'<br>May 19 16:23:49 priya charon: 09[CFG] loaded ca certificate "C=in, ST=karnataka, L=bangalore, O=netcloudsystems, OU=dev, CN=necs, E=<a href="mailto:priyaranjan@netcloudsystems.com" target="_blank">priyaranjan@netcloudsystems.com</a>" from 'strongswanCert.pem'<br>May 19 16:23:49 priya charon: 09[CFG] added ca 'strongswan'<br>May 19 16:23:49 priya charon: 10[CFG] received stroke: add connection 'host-host'<br>May 19 16:23:49 priya charon: 10[LIB] OpenSSL X.509 parsing failed<br>May 19 16:23:49 priya charon: 10[LIB] building CRED_CERTIFICATE - ANY failed, tried 1 builders<br>May 19 16:23:49 priya charon: 10[CFG] loading certificate from 'hostKey.pem' failed<br>May 19 16:23:49 priya charon: 10[CFG] added configuration 'host-host'<br><br><br></div><div class="gmail_extra"><div><div><br><div class="gmail_quote">On Tue, May 19, 2015 at 4:03 PM, Andreas Steffen <span dir="ltr"><<a href="mailto:andreas.steffen@strongswan.org" target="_blank">andreas.steffen@strongswan.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> Hi Priyaranjan,<br>
<br>
the links I sent you should be fine as a guidance for your host-host<br>
IPsec setup. If you run into any problems just send us the strongSwan<br>
log files.<br>
<br>
Regards<br>
<br>
Andreas<span><br>
<br>
On 19.05.2015 12:26, Priyaranjan Nayak wrote:<br>
</span><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span>
Hi Andreas,<br>
<br>
I have two machine i.e 192.168.1.116 and 192.168.1.118 and wanted to<br>
setup the IPsec between these two machine. In my network one MODEM ,<br>
SWITCH and two machine are there.For more clarification of network, I<br>
have attached the network diagram. I have tried the above link ,it's not<br>
working for me . Please suggest me to setup the IPsec for my<br>
network.Thanks for your quick reply.<br>
<br>
On Tue, May 19, 2015 at 1:38 PM, Andreas Steffen<br></span>
<<a href="mailto:andreas.steffen@strongswan.org" target="_blank">andreas.steffen@strongswan.org</a> <mailto:<a href="mailto:andreas.steffen@strongswan.org" target="_blank">andreas.steffen@strongswan.org</a>>><span><br>
wrote:<br>
<br>
Hi Priyaranjan,<br>
<br>
here is an example for a host-host connection in IPsec tunnel mode:<br>
<br>
<a href="http://www.strongswan.org/uml/testresults/ikev2/host2host-cert/" target="_blank">http://www.strongswan.org/uml/testresults/ikev2/host2host-cert/</a><br>
<br>
and here in IPsec transport mode:<br>
<br>
<a href="http://www.strongswan.org/uml/testresults/ikev2/host2host-transport/" target="_blank">http://www.strongswan.org/uml/testresults/ikev2/host2host-transport/</a><br>
<br>
Regards<br>
<br>
Andreas<br>
<br>
POn 05/19/2015 09:47 AM, Priyaranjan Nayak wrote:<br>
> Hi All,<br>
><br>
> I wanted to use the strongswan with IKEv2 for IPsec between two<br>
hosts.<br>
> Could you please suggest me how can configure for two hosts ?<br>
> Please suggest me if you have any other idea/link ?<br>
><br>
><br>
> Thanks<br>
> Priyaranjan<br>
<br>
======================================================================<br>
Andreas Steffen <a href="mailto:andreas.steffen@strongswan.org" target="_blank">andreas.steffen@strongswan.org</a><br></span>
<mailto:<a href="mailto:andreas.steffen@strongswan.org" target="_blank">andreas.steffen@strongswan.org</a>><span><br>
strongSwan - the Open Source VPN Solution! <a href="http://www.strongswan.org" target="_blank">www.strongswan.org</a><br></span>
<<a href="http://www.strongswan.org" target="_blank">http://www.strongswan.org</a>><span><br>
Institute for Internet Technologies and Applications<br>
University of Applied Sciences Rapperswil<br>
CH-8640 Rapperswil (Switzerland)<br>
===========================================================[ITA-HSR]==<br>
<br>
<br>
<br>
<br>
--<br>
Thanks<br>
Priyaranjan<br>
</span></blockquote>
<br>
-- <br><div><div>
======================================================================<br>
Andreas Steffen <a href="mailto:andreas.steffen@strongswan.org" target="_blank">andreas.steffen@strongswan.org</a><br>
strongSwan - the Open Source VPN Solution! <a href="http://www.strongswan.org" target="_blank">www.strongswan.org</a><br>
Institute for Internet Technologies and Applications<br>
University of Applied Sciences Rapperswil<br>
CH-8640 Rapperswil (Switzerland)<br>
===========================================================[ITA-HSR]==<br>
<br>
</div></div></blockquote></div><br><br clear="all"><br></div></div><span><font color="#888888">-- <br><div>Thanks<br>Priyaranjan<br></div>
</font></span></div>
</blockquote></div><br><br clear="all"><br></div></div><span class="HOEnZb"><font color="#888888">-- <br><div>Thanks<br>Priyaranjan<br></div>
</font></span></div>
</div><br><br clear="all"><br>-- <br><div class="gmail_signature">Thanks<br>Priyaranjan<br></div>
</div>