[strongSwan] Startup with strongSwan 5.2.0

Prashant Upadhyaya prashant.upadhyaya at aricent.com
Mon Aug 11 18:00:02 CEST 2014


Hi,

I could finally get over this issue.
The main problem was that the .so's for the plugins were not building.

The following configure line helped me generate the .so's [I had to pass the --target and --host properly]

./configure  --with-random-device=/dev/urandom --target=mips64-octeon-linux-gnu --host mips64-octeon-linux-gnu  CC=mips64-octeon-linux-gnu-gcc AR=mips64-octeon-linux-gnu-ar RANLIB=mips64-octeon-linux-gnu-ranlib LD=mips64-octeon-linux-gnu-ld LDFLAGS=-L/home/prashant/gmp/usr/local/lib CPPFLAGS=-I/home/prashant/gmp/usr/local/include

I also had to pass the --with-random-device otherwise by default /dev/random was taken and that just blocks on my mips target which resulted into key generation failure

Finally Charon started properly on my target but was giving some netlink errors.
For that I had to put the following line in the Charon section of strongswan.conf
routing_table=0

Regards
-Prashant




-----Original Message-----
From: users-bounces at lists.strongswan.org [mailto:users-bounces at lists.strongswan.org] On Behalf Of Prashant Upadhyaya
Sent: Wednesday, August 06, 2014 2:51 AM
To: Martin Willi; users at lists.strongswan.org
Subject: Re: [strongSwan] Startup with strongSwan 5.2.0

Hi guys,

I am open to further education on this topic.
Clearly I am missing the plugins, but what do I do to ensure that the plugins are building and what do I carry from the build machine to the target for the plugins to function, can someone scold me and explain me this basic concept.

Regards
-Prashant


-----Original Message-----
From: users-bounces at lists.strongswan.org [mailto:users-bounces at lists.strongswan.org] On Behalf Of Prashant Upadhyaya
Sent: Thursday, July 31, 2014 2:47 PM
To: Martin Willi
Cc: users at lists.strongswan.org
Subject: Re: [strongSwan] Startup with strongSwan 5.2.0

>>Seems like you are missing some basic plugins. Have you copied them to your target?

PU> Does the make install  not copy all the plugins already ? Well, I can copy manually whatever is required. Can you please let me know what a plugin file looks like. I did a quick check in the source tree after the build and do see the *.lo files, but no *.so files.
I just took everything which "make install" created, to the target i.e the following directories bin  etc  lib  libexec  sbin  share In lib/ipsec/plugins, I see a lot of *.a and *.la files, but they seem more like for static linking for development purposes I don't see any plugin like files in libexec In share/strongswan/templates/config/plugins, I do see files which are just *.conf Can you please tell what I should check after the build to see if my plugins are in place.

>>When defining a --prefix=, that prefix is used on your target, the files must be installed and accessible under that path. To just install your files to a mounted root filesystem, use the DESTDIR [1] variable when invoking "make install".

PU> Currently I took care of this manually and adjusted the paths at the
PU> target accordingly to match what was passed with --prefix. So I
PU> think I am good there. (Without doing this gave me a problem so I am
PU> sure that I managed to repair it successfully.)


Regards
-Prashant

-----Original Message-----
From: Martin Willi [mailto:martin at strongswan.org]
Sent: Thursday, July 31, 2014 12:52 PM
To: Prashant Upadhyaya
Cc: users at lists.strongswan.org
Subject: Re: [strongSwan] Startup with strongSwan 5.2.0

Hi,

> ./configure [...] --prefix=/home/prashant/strongswan

> Then I picked all the install stuff and took it to the MIPS target

> 00[LIB] feature CUSTOM:libcharon in critical plugin 'charon' has unmet
> dependency: NONCE_GEN

Seems like you are missing some basic plugins. Have you copied them to your target?

When defining a --prefix=, that prefix is used on your target, the files must be installed and accessible under that path. To just install your files to a mounted root filesystem, use the DESTDIR [1] variable when invoking "make install".

Regards
Martin

[1]https://www.gnu.org/software/automake/manual/html_node/DESTDIR.html



"DISCLAIMER: This message is proprietary to Aricent and is intended solely for the use of the individual to whom it is addressed. It may contain privileged or confidential information and should not be circulated or used for any purpose other than for what it is intended. If you have received this message in error, please notify the originator immediately. If you are not the intended recipient, you are notified that you are strictly prohibited from using, copying, altering, or disclosing the contents of this message. Aricent accepts no responsibility for loss or damage arising from the use of the information transmitted by this email including damage from virus."
_______________________________________________
Users mailing list
Users at lists.strongswan.org
https://lists.strongswan.org/mailman/listinfo/users


"DISCLAIMER: This message is proprietary to Aricent and is intended solely for the use of the individual to whom it is addressed. It may contain privileged or confidential information and should not be circulated or used for any purpose other than for what it is intended. If you have received this message in error, please notify the originator immediately. If you are not the intended recipient, you are notified that you are strictly prohibited from using, copying, altering, or disclosing the contents of this message. Aricent accepts no responsibility for loss or damage arising from the use of the information transmitted by this email including damage from virus."
_______________________________________________
Users mailing list
Users at lists.strongswan.org
https://lists.strongswan.org/mailman/listinfo/users


"DISCLAIMER: This message is proprietary to Aricent and is intended solely for the use of the individual to whom it is addressed. It may contain privileged or confidential information and should not be circulated or used for any purpose other than for what it is intended. If you have received this message in error, please notify the originator immediately. If you are not the intended recipient, you are notified that you are strictly prohibited from using, copying, altering, or disclosing the contents of this message. Aricent accepts no responsibility for loss or damage arising from the use of the information transmitted by this email including damage from virus."


More information about the Users mailing list