[strongSwan] Creation of VICI socket fails (strongswan-5.2.2)

[Noel Kuntze]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hello Chinmaya,

Do you start charon as non-root user? Does /var/run exist?
How did you compile it?
What distro is it?
Do you have a security framework enabled? (Selinux, apparmor, ...)

Mit freundlichen Grüßen/Kind Regards,
Noel Kuntze

GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658

Am 20.03.2015 um 08:30 schrieb Chinmaya Dwibedy:
>  
> Hi ,
> I am trying to use the swanctl utility (i.e., a command line application to configure and control charon) (strongswan: 5.2.2) . I configured the /etc/swanctl/swanctl.conf file (On IKE Initiator end) and then upon trying to initiate the connection  thru #swanctl --load-conns, it gives the following errors
> connecting to 'unix:///var/run/charon.vici' failed: Connection refused
> Error: connecting to 'default' URI failed: Connection refused
> strongSwan 5.2.2 swanctl
> 
> I run the #ipsec start command to get the startup log and found that, creation of VICI socket is getting failed.  Can anyone suggest how to resolve this ?
> 
> [root at sefpdev-1 strongswan-5.2.2]# cat /var/log/charon.log | grep vici
> Mar 20 00:00:15 00[LIB] plugin 'vici': loaded successfully
> Mar 20 00:00:15 00[LIB] loading feature CUSTOM:vici in plugin 'vici'
> Mar 20 00:00:15 00[CFG] creating vici socket failed
> Mar 20 00:00:15 00[LIB] feature CUSTOM:vici in plugin 'vici' failed to load
> Mar 20 00:00:15 00[LIB] unloading plugin 'vici' without loaded features
> [root at sefpdev-1 strongswan-5.2.2]#
>
> Regards,
> Chinmaya
>
>
> _______________________________________________
> Users mailing list
> Users at lists.strongswan.org
> https://lists.strongswan.org/mailman/listinfo/users

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=UzM7
-----END PGP SIGNATURE-----