[strongSwan] Problem configuring strongSwan

[pankaj gupta]

Thanks so much Andreas. I did it and got overwhelming output at console. I
am attaching the output with this mail for your review.
At some places it reports of some plugins not found, but doesnt stop there.
So think those are not creating problem.
There are a lot of signature verification, locking and unlocking of values.
I could not understand if its running fine or not.

I really appreciate your support in my distress.

Regards
Pankaj Gupta


On Thu, Apr 15, 2010 at 8:22 PM, Andreas Steffen <
andreas.steffen at strongswan.org> wrote:

> Hi Pankaj,
>
> the relevant error message is
>
>
> > integrity test enabled, but not supported
>
> you must disable the integrity tests in
> /etc/strongswan.conf:
>
> libstrongswan {
>  dh_exponent_ansi_x9_42 = no
>  integrity_test = no
> }
>
> since some required components for the tests
> are missing.
>
> Regards
>
> Andreas
>
>
> On 15.04.2010 16:44, pankaj gupta wrote:
>
>> Thanks so much for the response.
>>
>> here is the output:
>> root at karmic:~# ipsec start --nofork
>> Starting strongSwan 4.3.6 IPsec [starter]...
>> starter_start_pluto entered
>> integrity test enabled, but not supported
>> pluto too long to start... - kill kill
>> connect(pluto_ctl) failed: No such file or directory
>> connect(pluto_ctl) failed: No such file or directory
>> connect(pluto_ctl) failed: No such file or directory
>> connect(pluto_ctl) failed: No such file or directory
>> starter_stop_pluto(): pluto does not respond, sending KILL
>> starter_stop_pluto(): can't stop pluto !!!
>> ipsec starter stopped
>>
>> what this means?
>>
>> Regards
>> Pankaj Gupta
>>
>>
>> On Thu, Apr 15, 2010 at 8:01 PM, Andreas Steffen
>> <andreas.steffen at strongswan.org <mailto:andreas.steffen at strongswan.org>>
>>
>> wrote:
>>
>>    Hi Pankaj,
>>
>>    could you start the pluto daemon without forking with the command
>>
>>       ipsec start --nofork
>>
>>    and see what happens?
>>
>>    Regards
>>
>>    Andreas
>>
>>
> ======================================================================
> Andreas Steffen                         andreas.steffen at strongswan.org
> strongSwan - the Linux VPN Solution!                www.strongswan.org
> Institute for Internet Technologies and Applications
> University of Applied Sciences Rapperswil
> CH-8640 Rapperswil (Switzerland)
> ===========================================================[ITA-HSR]==
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20100416/fed0fe8f/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ipsec start --nofork.log
Type: text/x-log
Size: 74792 bytes
Desc: not available
URL: <http://lists.strongswan.org/pipermail/users/attachments/20100416/fed0fe8f/attachment.bin>