[strongSwan] use PFKEY instead of NETLINK

[Andreas Steffen]

Hi Ali,

the kernel-pfkey plugin still needs the kernel-netlink plugin
for controlling the routing. Thus do not disable it. The
remaining open dependencies are not fatal.

Regards

Andreas


On 06.08.2012 07:24, Ali Masoudi wrote:
> Hi
> 
> I use strongswan v5.0.0. I want to use PFKEY interace instead of
> NETLINK. I configure strongswan with these parameters:
> 
> ./configure --enable-openssl --disable-kernel-netlink
> --enable-kernel-pfkey --enable-eap-radius --enable-xauth-eap
> --enable-eap-tls --enable-eap-md5 --enable-mysql --enable-ldap
> 
> after executing make , I tried to start a test vpn but it seemed that
> charon have missed some dependencies, here is the log:
> 
> 00[LIB] feature CUSTOM:libcharon in 'charon' plugin has unsatisfied
> dependency: CUSTOM:kernel-net
> 00[LIB] feature PRIVKEY:DSA in 'pem' plugin has unsatisfied
> dependency: PRIVKEY:DSA
> 00[LIB] feature PUBKEY:ECDSA in 'pem' plugin has unsatisfied
> dependency: PUBKEY:ECDSA
> 00[LIB] feature PUBKEY:DSA in 'pem' plugin has unsatisfied dependency:
> PUBKEY:DSA
> 00[LIB] feature CERT_DECODE:X509_OCSP_REQUEST in 'pem' plugin has
> unsatisfied dependency: CERT_DECODE:X509_OCSP_REQUEST
> 00[LIB]   failed to load CUSTOM:libcharon in critical plugin 'charon'
> 00[LIB] failed to load 1 feature in critical plugin 'charon'
> 00[DMN] initialization failed - aborting charon
> 
> I think it is because I disabled netlink in configuration, should I
> use pfkey alongside of netlink? how can i use pfkey instead of
> netlink?
> 
> Thanks in advance

======================================================================
Andreas Steffen                         andreas.steffen at strongswan.org
strongSwan - the Linux VPN Solution!                www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
===========================================================[ITA-HSR]==

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4502 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.strongswan.org/pipermail/users/attachments/20120806/a70ebab2/attachment.bin>