[strongSwan] strongSwan, swanctl and systemd

Noel Kuntze noel at familie-kuntze.de
Fri Sep 12 20:13:44 CEST 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hello Romain,

Quote: "ipsec.conf <https://wiki.strongswan.org/projects/strongswan/wiki/IpsecConf> based configurations are not supported with that daemon, as that would require the starter <https://wiki.strongswan.org/projects/strongswan/wiki/IpsecStarter> process."

As with every sytemd service, you define it using service files and manage it using systemctl.

Mit freundlichen Grüßen/Regards,
Noel Kuntze

GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658
Am 12.09.2014 um 14:41 schrieb Romain Francoise:
> Hi Martin,
>
> On Fri, Sep 12, 2014 at 01:20:54PM +0200, Martin Willi wrote:
>> I've done some initial work for a native systemd based strongSwan IKE
>> daemon. It directly uses the systemd libraries, and currently features
>> notifications and native journal logging. swanctl has been slightly
>> improved for that kind of setup.
>
> Does that still allow starting charon via the systemd service file, and
> thus use the old-style ipsec.conf configuration?
>
> Thanks.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=tbas
-----END PGP SIGNATURE-----



More information about the Users mailing list