missing plugins (pkcs11, ctr, ccm)

I can confirm this issue! In Ubuntu 11.04, I can setup a vpn-connection within the NetworkManager. However, it is not possible to establish an ipsec network connection. It stops immediately after starting the vpn-connection, with the error message, "service doesn't start in time .."

In my opinion, in Ubuntu 11.04 the NetworkManager-Plugin "libstrongswan-nm.so" is missing in the package "strongswan-nm"

After building strongSwan NetworkManager-Plugin from source on a Ubuntu 11.04 box, I can again establish ipsec-connections without any errors!

Hi Peter,

danke fuer die Info, ich werde es gleich mal probieren.
Welche Sourcen hast Du verwendet? Mittels apt-get source oder clone aus
dem git?

Gruesse,
Florian
On 05/04/2011 01:38 PM, Peter Winterer wrote:
> I can confirm this issue! In Ubuntu 11.04, I can setup a vpn-connection
> within the NetworkManager. However, it is not possible to establish an
> ipsec network connection. It stops immediately after starting the vpn-
> connection, with the error message, "service doesn't start in time .."
>
> In my opinion, in Ubuntu 11.04 the NetworkManager-Plugin "libstrongswan-
> nm.so" is missing in the package "strongswan-nm"
>
> After building strongSwan NetworkManager-Plugin from source on a Ubuntu
> 11.04 box, I can again establish ipsec-connections without any errors!
>

I've the same issue here

This bug was fixed in the package strongswan - 4.5.0-1ubuntu2

---------------
strongswan (4.5.0-1ubuntu2) oneiric; urgency=low

  * Build and ship network-manager module (LP: #771778)
 -- Laurent Bigonville <email address hidden> Tue, 24 May 2011 15:24:15 +0200

libstrongswan-pkcs11.so is still missing.

"ipsec pki --gen" for instance still fails with mentioned error message.

Hi,

Here a patch for natty, this add the missing modules.

For now strongswan-nm (network-manager integration) is not working due to a missing module, so I guess this is quite a good idea to fix it in natty.

It looks like strongswan is still missing libstrongswan-pkcs11.so in oneiric. Please fix that first. After that the natty-proposed package looks good.

@Chris Well according to the oneiric buildlog, libstrongswan-pkcs11.so is present in libstrongswan package

Hm. Quite true. There it is! I clearly need better tools.

Sorry for the noise.

Accepted strongswan into natty-proposed, the package will build now and be available in a few hours. Please test and give feedback here. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you in advance!

on a fresh installed ubuntu natty. I upgraded the strongswan-nm package to proposed as described in documentation. however it is still broken. I can(!) setup a strongswan vpn-connection with the network-manager plugin and I can(!) establish a vpn-connection. one step more than before. however, it seems to me that the client doesn't answer to dpd-packets from the vpn-gateway, therefore the gateway deletes the vpn-connection after 5 unacknowledged dpd-packets. building strongswan network-manager-plugin from source works flawlessly.

@Peter I guess you should open a new bug for this issue.

But can you confirm that the original problem described in this bug is fixed?

With the proposed strongswan packages installed, the missing strongswan libs are available. That means, I'm able to setup and start a strongswan vpn-connection. So, the bug described here, is fixed. Thanks for solving that issue!

This bug was fixed in the package strongswan - 4.5.0-1ubuntu1.1

---------------
strongswan (4.5.0-1ubuntu1.1) natty-proposed; urgency=low

  * Add missing plugins (libstrongswan-addrblock.so, libstrongswan-led.so,
    libstrongswan-gcm.so, libstrongswan-ccm.so, libstrongswan-ctr.so,
    libstrongswan-pkcs11.so and libstrongswan-nm.so) LP: #771778
 -- Laurent Bigonville <email address hidden> Tue, 19 Jul 2011 10:55:14 +0200