Bug#941972: strongswan: eap-mschapv2 plugin not loaded

2019-10-08 Thread Tobias Brunner 
Hi Richard,

You either need the md4 plugin, or one of the openssl or gcrypt plugins
(which also provide the MD4 algorithm) to use EAP-MSCHAPv2 (there should
be error in the log during startup regarding the missing dependency).

The openssl plugin is shipped with libstrongswan-standard-plugins, the
gcrypt plugin with libstrongswan-extra-plugins, the md4 plugin is not
built/packaged by Debian.  If you already have the plugins installed,
make sure they are loaded [1].

Regards,
Tobias

[1] https://wiki.strongswan.org/projects/strongswan/wiki/PluginLoad

Bug#941972: strongswan: eap-mschapv2 plugin not loaded

2019-10-08 Thread Richard Kung 
Package: libcharon-extra-plugins
Version: 5.5.1-4+deb9u4
Severity: important

Dear Maintainer,


I installed libcharon-extra-plugins, restarted strongswan.
  $ sudo systemctl restart strongswan
  $ sudo swanctl --reload-settings
  $ sudo swanctl --load-all

But eap-mschapv2 was not loaded.
  $ sudo swanctl --stats
  uptime: 10 seconds, since Oct 08 17:25:09 2019
  worker threads: 16 total, 11 idle, working: 4/0/1/0
  job queues: 0/0/0/0
  jobs scheduled: 0
  IKE_SAs: 0 total, 0 half-open
  mallinfo: sbrk 1216512, mmap 0, used 207408, free 1009104
  loaded plugins: charon aes rc2 sha2 sha1 md5 random nonce x509 revocation 
constraints pubkey pkcs1 pkcs7 pkcs8 pkcs12 pgp dnskey sshkey pem fips-prf gmp 
xcbc hmac attr kernel-netlink resolve socket-default farp stroke vici updown 
eap-identity eap-aka eap-md5 eap-gtc eap-radius eap-tls eap-ttls eap-tnc 
xauth-generic xauth-eap xauth-pam tnc-tnccs dhcp lookip error-notify certexpire 
led addrblock unity

All the other plugins seem to be listed.


-- System Information:
Debian Release: 9.9
  APT prefers oldstable-updates
  APT policy: (500, 'oldstable-updates'), (500, 'oldstable')
Architecture: armhf (armv7l)

Kernel: Linux 4.14.78-4-osmc (SMP w/4 CPU cores; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL 
set to en_US.UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set 
to en_US.UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libcharon-extra-plugins depends on:
ii  libc6  2.24-11+deb9u4
ii  libpam0g   1.1.8-3.6
ii  libstrongswan  5.5.1-4+deb9u4

libcharon-extra-plugins recommends no packages.

libcharon-extra-plugins suggests no packages.

-- no debconf information