Hello Amysu, go into the strongswan source directory and execute
make clean ./configure --sysconfdir=/etc <any other options> make make install and the path pointing to the configuration files is changed from /usr/local/etc to /etc. If you want you to clean up you can remove the old configuration files: cd /usr/local/etc rm -r ipsec.d swanctl ipsec.secrets ipsec.conf strongswan.conf Best regards Andreas On 08/19/2014 07:02 AM, [email protected] wrote: > Hello Andreas, > > I have installed strongswan, how can change the sysconfdir, should I > uninstall it first? I don't know how to uninstall strongswan? > > Thanks for your help > > > 2014-08-19 12:36 GMT+08:00 Andreas Steffen > <[email protected] <mailto:[email protected]>>: > > Hello Amysue, > > you have to build strongSwan with > > ./configure --sysconfdir=/etc > > Regards > > Andreas > > On 08/19/2014 05:18 AM, [email protected] > <mailto:[email protected]> wrote: > > Hi Noel, > > > > I have checked the strongswan logs at /var/log/messages, and I found > > that it load the conf directory /usr/loca/etc, while I put all my > conf > > files at /etc, which I think cause my problem. > > Is there any way that I can change the conf directory to /etc. > > > > Thanks, > > > > > > 2014-08-18 21:16 GMT+08:00 Noel Kuntze <[email protected] > <mailto:[email protected]> > > <mailto:[email protected] <mailto:[email protected]>>>: > > > > Hello Amysue > > > > Please refer to [2] for a how-to for installing strongSwan. > > Please note that some modules that could be necessary for your setup > > need to be compiled by giving the corresponding parameters to > > ./configure. > > > > Regards, > > Noel Kuntze > > > > GPG Key id: 0x63EC6658 > > Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658 > > > > Am 18.08.2014 um 15:12 schrieb [email protected] > <mailto:[email protected]> > > <mailto:[email protected] <mailto:[email protected]>>: > >> I also want to know are there any special configurations to > > install strongswan for ikev2 mobike? > > > >> For install strongswan to my pc, I just > >> /./configure/ > >> /make/ > >> /make install/ > >> / > >> / > >> Thanks, > > > > > >> 2014-08-18 21:08 GMT+08:00 <[email protected] > <mailto:[email protected]> > > <mailto:[email protected] <mailto:[email protected]>> > <mailto:[email protected] <mailto:[email protected]> > > <mailto:[email protected] <mailto:[email protected]>>>>: > > > >> Hi Noel, > >> The output of "ipsec statusall" is > >> /Status of IKE charon daemon (strongSwan 5.0.2, Linux > > 2.6.18-348.1.1.el5, i686):/ > >> / uptime: 14 minutes, since Aug 18 18:21:46 2014/ > >> / malloc: sbrk 135168, mmap 0, used 86616, free 48552/ > >> / worker threads: 8 of 16 idle, 7/1/0/0 working, job queue: > > 0/0/0/0, scheduled: 0/ > >> / loaded plugins: charon aes des sha1 sha2 md5 random nonce > > x509 revocation constraints pubkey pkcs1 pkcs8 pgp dnskey pem > > fips-prf gmp xcbc cmac hmac attr kernel-netlink resolve > > socket-default stroke updown eap-md5 eap-radius xauth-generic/ > >> /Listening IP addresses:/ > >> / 192.168.2.6/ <http://192.168.2.6/> <http://192.168.2.6/> > >> / 12.12.1.203/ <http://12.12.1.203/> <http://12.12.1.203/> > >> /Connections:/ > >> /Security Associations (0 up, 0 connecting):/ > >> / none/ > > > >> And， how do I enable logging[1] ? I don't use strongswan > > much, So it feel difficult for me. > >> Thank you again for your help > > > > > > > >> 2014-08-18 21:02 GMT+08:00 Noel Kuntze > <[email protected] <mailto:[email protected]> > > <mailto:[email protected] <mailto:[email protected]>> > <mailto:[email protected] <mailto:[email protected]> > > <mailto:[email protected] <mailto:[email protected]>>>>: > > > >> Hello, > > > >> Check your system log for errors and show us the output of "ipsec > > statusall". > >> Sometimes, it takes a couple of seconds for the daemon to load the > > configuration. Waiting a bit can help in this case. > >> The reason for this is, that all the ipsec commands are asynchronous. > >> If the configuration isn't loaded for a couple of seconds, please > > enable logging[1]. > >> StrongSwan can handle Mobike. It's a daemon thing, not a kernel > thing. > > > >> [1] > > > https://wiki.strongswan.org/projects/strongswan/wiki/LoggerConfiguration > > > >> Regards, > >> Noel Kuntze > > > >> GPG Key id: 0x63EC6658 > >> Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658 > > > >> Am 18.08.2014 um 14:56 schrieb [email protected] > <mailto:[email protected]> > > <mailto:[email protected] <mailto:[email protected]>> > <mailto:[email protected] <mailto:[email protected]> > > <mailto:[email protected] <mailto:[email protected]>>>: > >>> Hello, > > > >>> My OS is centos 5.9 and i have installed Linux strongSwan > > U5.0.2/K2.6.18-348.1.1.el5. > >>> After installation,i start strongswan: > >>> ipsec start > >>> then i up an connection: > >>> ipsec up client > >>> then I get an error:*no config named 'client'* > >>> Actually, I define an connection in /etc/ipsec.conf. > > > >>> Below is my /etc/ipsec.conf > > > >>> /config setup/ > >>> / strictcrlpolicy=no/ > >>> / charonstart=yes/ > >>> / > >>> / > >>> /conn %default/ > >>> / ikelifetime=28800s/ > >>> / keylife=28800s/ > >>> / rekeymargin=3m/ > >>> / keyingtries=3/ > >>> / keyexchange=ikev2/ > >>> / ike=3des-sha1-modp1024/ > >>> / esp=3des-sha1/ > >>> / > >>> / > >>> /conn client/ > >>> / left=12.12.1.203/ <http://12.12.1.203/> > <http://12.12.1.203/> <http://12.12.1.203/> > >>> / leftsourceip=%config/ > >>> / leftcert=client1_cert.pem/ > >>> / leftid="/C=CN/ST=SH/O=CS/CN=IKEv2_Client1"/ > >>> / right=11.11.11.200/ <http://11.11.11.200/> > <http://11.11.11.200/> > > <http://11.11.11.200/> > >>> / rightid="/C=CN/ST=SH/O=CS/CN=11.11.11.200"/ > >>> / rightsubnet=192.168.168.0/24 <http://192.168.168.0/24> > <http://192.168.168.0/24> > > <http://192.168.168.0/24> <http://192.168.168.0/24>/ > >>> / auto=add/ > >>> / > >>> / > >>> I have no idea what to do now, I really need your help, any one > > could help me? > >>> Thank you very much > > > > ====================================================================== > Andreas Steffen > [email protected] <mailto:[email protected]> > strongSwan - the Open Source VPN Solution! > www.strongswan.org <http://www.strongswan.org> > Institute for Internet Technologies and Applications > University of Applied Sciences Rapperswil > CH-8640 Rapperswil (Switzerland) > ===========================================================[ITA-HSR]== > > -- ====================================================================== Andreas Steffen [email protected] strongSwan - the Open Source VPN Solution! www.strongswan.org Institute for Internet Technologies and Applications University of Applied Sciences Rapperswil CH-8640 Rapperswil (Switzerland) ===========================================================[ITA-HSR]==
smime.p7s
Description: S/MIME Cryptographic Signature
_______________________________________________ Users mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/users
