Re: [strongSwan] starting strongswan without starter

[Marco Berizzi]

Hi Andreas, Hi everyone,

thanks but there is no 'start-stop-daemon' on Slackware.
I will keep building strongswan without the 'disable-stroke'
as suggested by Tobias.

As a suggestion, it would be beautiful to get starter
working also without the presence of the /etc/ipsec.conf :-)

Re: [strongSwan] starting strongswan without starter

[Tobias Brunner]

Hi Marco,

> Which is the correct way to start strongswan
> without 'ipsec start' ?

You could start charon directly (see e.g. the script from our testing
environment that Andreas referenced).  On the other hand, you could also
just continue to use starter (i.e. build with --enable-stroke) and just
leave the ipsec.conf/ipsec.secrets files empty and don't load the stroke
plugin (i.e. define charon.plugins.stroke.load = no in strongswan.conf
or the config snipped in /etc/strongswan.d/charon).

Regards,
Tobias

Re: [strongSwan] starting strongswan without starter

[Andreas Steffen]

Hi Marco,

you can put the following script

https://github.com/strongswan/strongswan/blob/master/testing/hosts/default/etc/init.d/charon

into /etc/init.d/ and either start and stop the charon daemon
manually with

  service charon start|stop

or put the a link to the script into the appropriate runlevel
directories.

Regards

Andreas

On 08.05.2018 11:33, Marco Berizzi wrote:

Hello everyone,

I have compiled strongswan on slackware linux with:

--disable-stroke

and the starter is not builded anymore.

Slackware is one the the few distro which is
not (yet) systemd based.

Which is the correct way to start strongswan
without 'ipsec start' ?



--
==
Andreas Steffen andreas.stef...@strongswan.org
strongSwan - the Open Source VPN Solution!  www.strongswan.org
Institute for Networked Solutions
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
===[INS-HSR]==



smime.p7s
Description: S/MIME Cryptographic Signature

Re: [strongSwan] starting strongswan without starter

[Christian Salway]

or completely ignore that because you just said no systemd :(  Sorry!

 

> On 8 May 2018, at 10:34, Christian Salway  
> wrote:
> 
> and dont forget to enable the service 
> 
> systemctl enable strongswan-swanctl.service
> 
> 
> 
>> On 8 May 2018, at 10:33, Marco Berizzi > > wrote:
>> 
>> Hello everyone,
>> 
>> I have compiled strongswan on slackware linux with:
>> 
>> --disable-stroke
>> 
>> and the starter is not builded anymore.
>> 
>> Slackware is one the the few distro which is
>> not (yet) systemd based.
>> 
>> Which is the correct way to start strongswan
>> without 'ipsec start' ?
>> 
> 

Re: [strongSwan] starting strongswan without starter

[Christian Salway]

and dont forget to enable the service 

systemctl enable strongswan-swanctl.service



> On 8 May 2018, at 10:33, Marco Berizzi  wrote:
> 
> Hello everyone,
> 
> I have compiled strongswan on slackware linux with:
> 
> --disable-stroke
> 
> and the starter is not builded anymore.
> 
> Slackware is one the the few distro which is
> not (yet) systemd based.
> 
> Which is the correct way to start strongswan
> without 'ipsec start' ?
> 

Re: [strongSwan] starting strongswan without starter

[Christian Salway]

To manually build StrongSwan, I use the following

wget http://download.strongswan.org/strongswan.tar.bz2
tar xjvf strongswan.tar.bz2; cd strongswan*
./configure --prefix=/usr --sysconfdir=/etc \
  --enable-systemd --enable-swanctl \
  --disable-charon --disable-stroke --disable-scepclient \
  --enable-eap-identity --enable-eap-mschapv2 --enable-md4 \
  --enable-eap-tls --enable-eap-dynamic \
  --enable-curl --enable-gcm --enable-openssl
make
make install

 

> On 8 May 2018, at 10:33, Marco Berizzi  wrote:
> 
> Hello everyone,
> 
> I have compiled strongswan on slackware linux with:
> 
> --disable-stroke
> 
> and the starter is not builded anymore.
> 
> Slackware is one the the few distro which is
> not (yet) systemd based.
> 
> Which is the correct way to start strongswan
> without 'ipsec start' ?
> 

[strongSwan] starting strongswan without starter

[Marco Berizzi]

Hello everyone,

I have compiled strongswan on slackware linux with:

--disable-stroke

and the starter is not builded anymore.

Slackware is one the the few distro which is
not (yet) systemd based.

Which is the correct way to start strongswan
without 'ipsec start' ?