Re: [Swan] Issue with networkmanager and l2tp

2020-10-23 Thread Douglas Kosovic
Hi Brian, With Libreswan >= 4.0, the default NSS database files (*.db) have moved from /etc/ipsec.d to /var/lib/ipsec/nss Try the following Libreswan command to see if you get an error : $ sudo ipsec initnss ERROR: destination directory "/var/lib/ipsec/nss" is missing or

Re: [Swan] Issue with networkmanager and l2tp

2020-10-23 Thread Brian McKee
Thanks Doug! I'll open a ticket with the gentoo devs! On Fri, Oct 23, 2020 at 5:04 AM Douglas Kosovic wrote: > Hi Brian, > > > > With Libreswan >= 4.0, the default NSS database files (*.db) have moved > from /etc/ipsec.d to /var/lib/ipsec/nss > > > > Try the following Libreswan command to see

Re: [Swan] Issue with networkmanager and l2tp

2020-10-23 Thread Paul Wouters
On Fri, 23 Oct 2020, Brian McKee wrote: Thanks Doug!I'll open a ticket with the gentoo devs! They can compile with FINALNSSDIR=/etc/ipsec.d to keep the nss files at the same location if they prefer that. Note that libreswan-4.x also no longer builds support for DH2, and some NM-libreswan

[Swan] Issue with networkmanager and l2tp

2020-10-23 Thread Brian McKee
Hello everyone, I'm a Gentoo linux user. My work uses a linux based VPN server (Centos 7) that is probably pretty out of date. It uses l2tp protocol. My Gentoo box is running Networkmanager 1.26.0 and until a recent update I was running libreswan-3.32-r1 which contains a patch to fix an NSS

Re: [Swan] Issue with networkmanager and l2tp

2020-10-23 Thread Brian McKee
Hi Paul and Doug, So I got libreswan 4.1 to install with the new folder by modifying the ebuild, but I'm still having problems. Here is the output of networkmanager: Oct 23 20:19:40 threads NetworkManager[4579]: [1603509580.7688] audit: op="statistics" arg="refresh-rate-ms" pid=5647 uid=1000

[Swan-commit] Changes to ref refs/heads/main

2020-10-23 Thread Paul Wouters
New commits: commit 116a4a5b3c2f4086e0dcad1fed95c81d1c6b9345 Author: Paul Wouters Date: Fri Oct 23 14:10:20 2020 -0400 pluto: rename xauth.[ch] to pam_auth.[ch] The actual xauth code lives in ikev1_xauth.[ch] ___ Swan-commit mailing

[Swan-commit] Changes to ref refs/heads/main

2020-10-23 Thread Antony Antony
New commits: commit a38c0c0028781257cacdabfc67806b0048d99688 Author: Antony Antony Date: Fri Oct 23 20:16:06 2020 + testing: nsrun write >>cut>> done < Date: Fri Oct 23 19:22:59 2020 + testing: use sudo --preserve-env SWAN_PLUTOTEST=YES to signal