Hi,
there seems to be a bug with strongswan 5.1.3. Commit 39377. You have to compile the package manually.
As nbd in a mail replied:
"strongswan is part of the old unmaintained packages repository, which
will at some point no longer be included in the builds. Before further changes can be made to that package, it needs to have a maintainer."
The following patch seems to resolve it (should be placed under feeds/packages/net/strongswan/patches/201-kmodloader.patch:
--- a/src/starter/netkey.c
+++ b/src/starter/netkey.c
@@ -31,7 +31,7 @@ bool starter_netkey_init(void)
/* af_key module makes the netkey proc interface visible */
if (stat(PROC_MODULES, &stb) == 0)
{
- ignore_result(system("modprobe -qv af_key"));
+ ignore_result(system("insmod af_key 2>&1 >/dev/null"));
}
/* now test again */
@@ -45,11 +45,11 @@ bool starter_netkey_init(void)
/* make sure that all required IPsec modules are loaded */
if (stat(PROC_MODULES, &stb) == 0)
{
- ignore_result(system("modprobe -qv ah4"));
- ignore_result(system("modprobe -qv esp4"));
- ignore_result(system("modprobe -qv ipcomp"));
- ignore_result(system("modprobe -qv xfrm4_tunnel"));
- ignore_result(system("modprobe -qv xfrm_user"));
+ ignore_result(system("insmod ah4 2>&1 >/dev/null"));
+ ignore_result(system("insmod esp4 2>&1 >/dev/null"));
+ ignore_result(system("insmod ipcomp 2>&1 >/dev/null"));
+ ignore_result(system("insmod xfrm4_tunnel 2>&1 >/dev/null"));
+ ignore_result(system("insmod xfrm_user 2>&1 >/dev/null"));
}
DBG2(DBG_APP, "found netkey IPsec stack");
Furthermore, the conf files of the modules are not installed. The following resolves this:
--- feeds/packages/net/strongswan/Makefile.org 2014-07-25 10:22:29.215768842 +0200
+++ feeds/packages/net/strongswan/Makefile 2014-07-25 11:45:54.107786458 +0200
@@ -319,11 +319,7 @@ define BuildPlugin
strongswan_mod_conf=$(wildcard $(PKG_INSTALL_DIR)/etc/strongswan.d/charon/$(1).conf)
define Package/strongswan-mod-$(1)/install
$(INSTALL_DIR) $$(1)/etc/strongswan.d/charon
- $(if $(call strongswan_mod_conf,$(1)), \
- $(INSTALL_DATA) \
- $(call strongswan_mod_conf,$(1)) \
- $$(1)/etc/strongswan.d/charon/ \
- )
+ $(CP) $(PKG_INSTALL_DIR)/etc/strongswan.d/charon/$(1).conf $$(1)/etc/strongswan.d/charon/
$(INSTALL_DIR) $$(1)/usr/lib/ipsec/plugins
$(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-$(1).so \
$$(1)/usr/lib/ipsec/plugins/
In case you need the *ipk files I could provide them.
(Last edited by scitech on 25 Jul 2014, 11:15)