[strongSwan] Problem configuring strongSwan

[Andreas Steffen]

Hi Pankaj,

the relevant error message is

 > integrity test enabled, but not supported

you must disable the integrity tests in
/etc/strongswan.conf:

libstrongswan {
   dh_exponent_ansi_x9_42 = no
   integrity_test = no
}

since some required components for the tests
are missing.

Regards

Andreas

On 15.04.2010 16:44, pankaj gupta wrote:
> Thanks so much for the response.
>
> here is the output:
> root at karmic:~# ipsec start --nofork
> Starting strongSwan 4.3.6 IPsec [starter]...
> starter_start_pluto entered
> integrity test enabled, but not supported
> pluto too long to start... - kill kill
> connect(pluto_ctl) failed: No such file or directory
> connect(pluto_ctl) failed: No such file or directory
> connect(pluto_ctl) failed: No such file or directory
> connect(pluto_ctl) failed: No such file or directory
> starter_stop_pluto(): pluto does not respond, sending KILL
> starter_stop_pluto(): can't stop pluto !!!
> ipsec starter stopped
>
> what this means?
>
> Regards
> Pankaj Gupta
>
>
> On Thu, Apr 15, 2010 at 8:01 PM, Andreas Steffen
> <andreas.steffen at strongswan.org <mailto:andreas.steffen at strongswan.org>>
> wrote:
>
>     Hi Pankaj,
>
>     could you start the pluto daemon without forking with the command
>
>        ipsec start --nofork
>
>     and see what happens?
>
>     Regards
>
>     Andreas
>

======================================================================
Andreas Steffen                         andreas.steffen at strongswan.org
strongSwan - the Linux VPN Solution!                www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
===========================================================[ITA-HSR]==