[strongSwan] Charon constantly crashing/restarting

[Austin Chamberlain]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256


Hi all,

I've just installed Strongswan on a vanilla RHEL 6.8 system, using
EPEL and trying Strongswan 5.3.2 and 5.4.0. The VPN server is intended
to allow access to a restricted subnet; it has two NICs, both with
static IPs.

When starting Strongswan, charon dies almost immediately and dies on
restart. Below are the relevant extracts from /var/log/secure and
/var/log/messages.

I've configured Strongswan according to the following (making changes
for Centos 7 vs RHEL 6).
https://raymii.org/s/tutorials/IPSEC_vpn_with_CentOS_7.html

Have I missed anything obvious?

Thanks in advance,
Austin



Jul 21 15:17:03 server ipsec_starter[15277]: Starting strongSwan 5.3.2
IPsec [starter]...
Jul 21 15:17:03 server ipsec_starter[15286]: charon (15288) started
after 40 ms
Jul 21 15:17:04 server ipsec_starter[15286]: charon has died --
restart scheduled (5sec)
Jul 21 15:17:09 server ipsec_starter[15286]: charon (15545) started
after 40 ms
Jul 21 15:17:09 server ipsec_starter[15286]: charon has died --
restart scheduled (5sec)
Jul 21 15:17:14 server ipsec_starter[15286]: charon (15626) started
after 60 ms
Jul 21 15:17:15 server ipsec_starter[15286]: charon has died --
restart scheduled (5sec)
Jul 21 15:17:20 server ipsec_starter[15286]: charon (15716) started
after 40 ms
Jul 21 15:17:20 server ipsec_starter[15286]: charon has died --
restart scheduled (5sec)
Jul 21 15:17:23 server ipsec_starter[15286]: ipsec starter stopped



Jul 21 15:17:20 server charon: 03[CFG] added configuration 'CiscoIPSec'
Jul 21 15:17:20 server charon: 10[LIB]     -> ??:0
Jul 21 15:17:20 server charon: 10[LIB]
/usr/lib64/strongswan/libipsec.so.0 @ 0x7f70838ae000 [0x7f70838b27df]
Jul 21 15:17:20 server charon: 09[LIB]     -> ??:0
Jul 21 15:17:20 server charon: 09[LIB]
/usr/lib64/strongswan/libipsec.so.0 @ 0x7f70838ae000 [0x7f70838b220f]
Jul 21 15:17:20 server charon: 08[LIB]     -> ??:0
Jul 21 15:17:20 server charon: 08[LIB]
/usr/lib64/strongswan/libipsec.so.0 @ 0x7f70838ae000 [0x7f70838b170e]
Jul 21 15:17:20 server charon: 09[LIB]     -> ??:0
Jul 21 15:17:20 server charon: 09[LIB]
/usr/lib64/strongswan/libstrongswan.so.0 @ 0x7f7088235000 [0x7f708826414e]
Jul 21 15:17:20 server charon: 10[LIB]     -> ??:0
Jul 21 15:17:20 server charon: 10[LIB]
/usr/lib64/strongswan/libstrongswan.so.0 @ 0x7f7088235000 [0x7f708826414e]
Jul 21 15:17:20 server charon: 08[LIB]     -> ??:0
Jul 21 15:17:20 server charon: 08[LIB]
/usr/lib64/strongswan/libstrongswan.so.0 @ 0x7f7088235000 [0x7f708826414e]
Jul 21 15:17:20 server charon: 09[LIB]     -> ??:0
Jul 21 15:17:20 server charon: 09[LIB]
/usr/lib64/strongswan/libstrongswan.so.0 @ 0x7f7088235000 [0x7f7088264ba9]
Jul 21 15:17:20 server charon: 10[LIB]     -> ??:0
Jul 21 15:17:20 server charon: 10[LIB]
/usr/lib64/strongswan/libstrongswan.so.0 @ 0x7f7088235000 [0x7f7088264ba9]
Jul 21 15:17:20 server charon: 08[LIB]     -> ??:0
Jul 21 15:17:20 server charon: 08[LIB]
/usr/lib64/strongswan/libstrongswan.so.0 @ 0x7f7088235000 [0x7f7088264ba9]
Jul 21 15:17:20 server charon: 09[LIB]     -> ??:0
Jul 21 15:17:20 server charon: 09[LIB]
/usr/lib64/strongswan/libstrongswan.so.0 @ 0x7f7088235000 [0x7f7088275c95]
Jul 21 15:17:20 server charon: 10[LIB]     -> ??:0
Jul 21 15:17:20 server charon: 10[LIB]
/usr/lib64/strongswan/libstrongswan.so.0 @ 0x7f7088235000 [0x7f7088275c95]
Jul 21 15:17:20 server charon: 08[LIB]     -> ??:0
Jul 21 15:17:20 server charon: 08[LIB]
/usr/lib64/strongswan/libstrongswan.so.0 @ 0x7f7088235000 [0x7f7088275c95]
Jul 21 15:17:20 server charon: 09[LIB]     -> ??:0
Jul 21 15:17:20 server charon: 09[LIB]   /lib64/libpthread.so.0 @
0x3edc200000 [0x3edc207aa1]
Jul 21 15:17:20 server charon: 10[LIB]     -> ??:0
Jul 21 15:17:20 server charon: 10[LIB]   /lib64/libpthread.so.0 @
0x3edc200000 [0x3edc207aa1]
Jul 21 15:17:20 server charon: 08[LIB]     -> ??:0
Jul 21 15:17:20 server charon: 08[LIB]   /lib64/libpthread.so.0 @
0x3edc200000 [0x3edc207aa1]
Jul 21 15:17:20 server charon: 10[LIB]     -> ??:0
Jul 21 15:17:20 server charon: 10[LIB]   /lib64/libc.so.6 @
0x3edbe00000 (clone+0x6d) [0x3edbee8aad]
Jul 21 15:17:20 server charon: 09[LIB]     -> ??:0
Jul 21 15:17:20 server charon: 09[LIB]   /lib64/libc.so.6 @
0x3edbe00000 (clone+0x6d) [0x3edbee8aad]
Jul 21 15:17:20 server charon: 08[LIB]     -> ??:0
Jul 21 15:17:20 server charon: 08[LIB]   /lib64/libc.so.6 @
0x3edbe00000 (clone+0x6d) [0x3edbee8aad]
Jul 21 15:17:20 server charon: 10[LIB]     -> ??:0
Jul 21 15:17:20 server charon: 09[LIB]     -> ??:0
Jul 21 15:17:20 server charon: 08[LIB]     -> ??:0
Jul 21 15:17:20 server charon: 09[DMN] killing ourself, received
critical signal
Jul 21 15:17:20 server abrt[15775]: Not saving repeating crash in
'/usr/libexec/strongswan/charon'




- -- 
Austin Chamberlain	Phone: (+44) 020 3108 9874
Senior Information Security Officer	Int phone: 59874
Information Systems
University College London, Gower Street, London WC1E 6BT
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQIcBAEBCAAGBQJXkNy2AAoJEAWy7dCVs5j8owMP/0+Ijqz4Q+N66aPd6UbpgN+b
nM0V7/FjGG+xAGVrRFeTsgrqV9zDpzcdOCxJukzMFYNKFwRzjtIlLMb/TI6+pjjP
FGrUlXlBF5G3hr60iJcrVEdOQhHZK8pVLQxHE8lYXGBkQABlHnJHo49aO0tlbNNi
OyxuVDzOQjJQG4eysCc2UmCm44ebHLy1X49c8p7pREetWkUwqmZGoJvHsfS6RTfK
kuimu32MtVWWpKeva3Zs6feysdcaBE/NovNVKcA2cx9IrXruxwhvKqfEjUmS0kBJ
8QnfKTUrdN1vW+5YTXftJV3TXMfcJGFd9c6Q4if21ihRYYCCsqanXhOCPI1RQw1K
a6zOSujelAI0xxZ9p8te51uI0WH+RevUBlvtIXYVs5yMpVCkmsn7G/I/y9HF0axj
qMsj5v0RypzuWtrAqITrl09vlDyyf8UTttMSiCxKkzYT6NQ2AOHJcPFdAOoeiGhr
RBwDoUQjr8qrE/Rb01nbUQ8nvYTCPwVdhic4itWna8m6sxWVDWA8p68piiELPu1L
9/k6D2As+utllCdMqfqnyj1STQIh8/oGacREx9UdZYAr7p83B4lwYoC0F1+4z++W
FeRUTlPHs9p3LudxiGr9ceT1TUxmYdeGQczBOhy3ww0iEYan83g7LZP34brWLULR
7T/NgopQ3+AZqLNAXntU
=AbxB
-----END PGP SIGNATURE-----