[strongSwan] Problems connecting to Strongswan with WP8.1

[Noel Kuntze]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hello Nickola,

You need to either have your own kernel on the host or use userspace processing of IPsec traffic.
So either switch from a container VM to a paravirtual VM or hardware virtualized VM, like KVM or XEN based or use libipsec.
See [1].

[1] https://wiki.strongswan.org/projects/strongswan/wiki/Kernel-libipsec

Mit freundlichen Grüßen/Regards,
Noel Kuntze

GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658

Am 19.10.2014 um 13:23 schrieb Nickola Kolev:
> On Sat, 18 Oct 2014 22:56:53 +0200
> "raceface" <raceface_the_one at gmx.net> wrote:
>
>
> [ cut ]
>> 00[DMN] Starting IKE charon daemon (strongSwan 5.2.0, Linux
>> 2.6.32-042stab092.3, i686)
>
> This seems to be an OpenVZ virtual machine, hence the 2.6 kernel and
> 12.04 Ubuntu (which should use 3.2 kernel).
>
> [ cut ]
>
>> 00[KNL] unable to set IPSEC_POLICY on socket: Operation not permitted
>> 00[NET] installing IKE bypass policy failed
>> 00[KNL] unable to set IPSEC_POLICY on socket: Operation not permitted
>> 00[NET] installing IKE bypass policy failed
>> 00[KNL] unable to set IPSEC_POLICY on socket: Invalid argument
>> 00[NET] installing IKE bypass policy failed
>> 00[KNL] unable to set IPSEC_POLICY on socket: Invalid argument
>> 00[NET] installing IKE bypass policy failed
>
> [ cut ]
>
> I suspect that the virtual machine has some capabilities disabled.
>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQIcBAEBCAAGBQJUQ5/aAAoJEDg5KY9j7GZYgAAP/jUyhS8pddQofqkEXQ9vbhVw
WDu/oga5WR3jA6Mqz7KJzSvMrlwlcewym7sVR54ZX9vsp7JNuYW/tj6wKp6ZDIBJ
wUlTS9xuY939hVyZWGRbmUbF6UVZ3Zp2nnFDMXKRd/aIb30Pzu0lRqVS9jSQIBIl
xHXsexPw78p59TdjBnggv3rDplJsq6cW5ZZ6bVLe+jRYSGvLUv+O2Ee10/9onVLM
MoU/qNLQuzyR0WHS8sZPac2vAkr8uGy6SM0N5FEyljJA5H/9F5RRMUdhXuSN4oRI
PFZ5WFLYLc0F+Ncu7mdOmffm2hHB6MKJNCYDaNnA9H8bdpBjzPNrlviRiqw/wn7H
r+GGZJZin4og6pw1Q8E2q9aoES1J/HXDHEK13Wy8VU8GLrXJetE35QEG6QIM3gTH
MAag7R3+TkmTIZKj11oSn14k2H3X338HCBh0fWu1RBtFYSp9xNtgQLYs8SIQO3Vj
u8Ut9VlUryMHmRP37/02ph6Mm4GLORS3nlHbsx65LeDRhRNRFNY45ABbCjzR3W9Y
Ykl5LDkKts5Q74QZx9/o9TQOhWJzLhnPFhIxWnXPXbHu3xMFV7tANluZkAAIbnXZ
59O6E+/Jwlg+uOc6em/OvxI3Tu610CHgf3dSuLAyy4KbX0+CmpFJKSSaNb6yca+V
VYR6Gi45G/I3s/irbyAa
=JKa7
-----END PGP SIGNATURE-----