[strongSwan] use PFKEY instead of NETLINK

Ali Masoudi masoudi1983 at gmail.com
Mon Aug 6 11:27:49 CEST 2012


Thank you so much Andreas, I will try it.

On Mon, Aug 6, 2012 at 11:52 AM, Andreas Steffen
<andreas.steffen at strongswan.org> wrote:
> Hi Ali,
>
> the kernel-pfkey plugin still needs the kernel-netlink plugin
> for controlling the routing. Thus do not disable it. The
> remaining open dependencies are not fatal.
>
> Regards
>
> Andreas
>
>
> On 06.08.2012 07:24, Ali Masoudi wrote:
>> Hi
>>
>> I use strongswan v5.0.0. I want to use PFKEY interace instead of
>> NETLINK. I configure strongswan with these parameters:
>>
>> ./configure --enable-openssl --disable-kernel-netlink
>> --enable-kernel-pfkey --enable-eap-radius --enable-xauth-eap
>> --enable-eap-tls --enable-eap-md5 --enable-mysql --enable-ldap
>>
>> after executing make , I tried to start a test vpn but it seemed that
>> charon have missed some dependencies, here is the log:
>>
>> 00[LIB] feature CUSTOM:libcharon in 'charon' plugin has unsatisfied
>> dependency: CUSTOM:kernel-net
>> 00[LIB] feature PRIVKEY:DSA in 'pem' plugin has unsatisfied
>> dependency: PRIVKEY:DSA
>> 00[LIB] feature PUBKEY:ECDSA in 'pem' plugin has unsatisfied
>> dependency: PUBKEY:ECDSA
>> 00[LIB] feature PUBKEY:DSA in 'pem' plugin has unsatisfied dependency:
>> PUBKEY:DSA
>> 00[LIB] feature CERT_DECODE:X509_OCSP_REQUEST in 'pem' plugin has
>> unsatisfied dependency: CERT_DECODE:X509_OCSP_REQUEST
>> 00[LIB]   failed to load CUSTOM:libcharon in critical plugin 'charon'
>> 00[LIB] failed to load 1 feature in critical plugin 'charon'
>> 00[DMN] initialization failed - aborting charon
>>
>> I think it is because I disabled netlink in configuration, should I
>> use pfkey alongside of netlink? how can i use pfkey instead of
>> netlink?
>>
>> Thanks in advance
>
> ======================================================================
> Andreas Steffen                         andreas.steffen at strongswan.org
> strongSwan - the Linux VPN Solution!                www.strongswan.org
> Institute for Internet Technologies and Applications
> University of Applied Sciences Rapperswil
> CH-8640 Rapperswil (Switzerland)
> ===========================================================[ITA-HSR]==
>




More information about the Users mailing list