[strongSwan] Explicit module loading on charon

Claude Tompers claude.tompers at restena.lu
Mon Aug 9 16:07:11 CEST 2010


I've tried to get rid of the explicit module loading in strongswan.conf for charon, but if I omit the statement, the VPN does not work anymore.
For comparison:

The load statement in strongswan.conf:

load = attr aes des sha1 sha2 md5 pem pkcs1 gmp random x509 hmac xcbc stroke socket-raw kernel-netlink fips-prf eap-radius eap-mschapv2 eap-identity updown

The automatically generated plugin load list if I omit the statement :

loaded plugins: curl aes des sha1 sha2 md5 random x509 revocation pubkey pkcs1 pgp dnskey pem fips-prf xcbc hmac gmp attr resolve kernel-netlink socket-default socket-raw stroke updown eap-identity eap-md5 eap-mschapv2 eap-radius

My ./configure options :

./configure \
        --with-user=vpn \
        --with-group=vpn \
        --with-capabilities=libcap \
        --enable-curl \
        --enable-eap-md5 \
        --enable-eap-mschapv2 \
        --enable-eap-identity \
        --enable-eap-radius \
        --enable-nat-transport \
        --enable-cisco-quirks \

I've tried to get anything out of the logs, but I can't see anything. It simply seems to ignore connection attempts.

thanks a lot in advance for your help

kind regards

Claude Tompers
Ingénieur réseau et système
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche
6, rue Richard Coudenhove-Kalergi
L-1359 Luxembourg

Tel: +352 424409 1
Fax: +352 422473
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.strongswan.org/pipermail/users/attachments/20100809/ea6512dd/attachment.pgp>

More information about the Users mailing list