[strongSwan] 02[KNL] error installing route with policy after upgrading strongswan 5.1.3->5.3.5

[Tobias Brunner]

Hi Marc,

> after upgrading from Ubuntu 14.04 to 16.04 I ran into the problem that seems
> to be related to bug 824 (https://wiki.strongswan.org/issues/824).

Doesn't look like it's related as you only have one interface and the
route installation fails.  Since you are using the kernel-libipsec
plugin (why?), routes are required to force traffic via TUN device.  But
you don't seem to have a local IP address in the subnet of your local
traffic selector (<Private IP 2>/24), which the code currently requires
to install the route.  How are you connected to that subnet?  Or should
the traffic selector rather be for <Private IP 3>/24?  This behavior
should have been the same in 5.1.3.  Or didn't you use kernel-libipsec
before the upgrade?

Regards,
Tobias