-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hello Nickola,
You need to either have your own kernel on the host or use userspace processing of IPsec traffic. So either switch from a container VM to a paravirtual VM or hardware virtualized VM, like KVM or XEN based or use libipsec. See [1]. [1] https://wiki.strongswan.org/projects/strongswan/wiki/Kernel-libipsec Mit freundlichen Grüßen/Regards, Noel Kuntze GPG Key ID: 0x63EC6658 Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658 Am 19.10.2014 um 13:23 schrieb Nickola Kolev: > On Sat, 18 Oct 2014 22:56:53 +0200 > "raceface" <[email protected]> wrote: > > > [ cut ] >> 00[DMN] Starting IKE charon daemon (strongSwan 5.2.0, Linux >> 2.6.32-042stab092.3, i686) > > This seems to be an OpenVZ virtual machine, hence the 2.6 kernel and > 12.04 Ubuntu (which should use 3.2 kernel). > > [ cut ] > >> 00[KNL] unable to set IPSEC_POLICY on socket: Operation not permitted >> 00[NET] installing IKE bypass policy failed >> 00[KNL] unable to set IPSEC_POLICY on socket: Operation not permitted >> 00[NET] installing IKE bypass policy failed >> 00[KNL] unable to set IPSEC_POLICY on socket: Invalid argument >> 00[NET] installing IKE bypass policy failed >> 00[KNL] unable to set IPSEC_POLICY on socket: Invalid argument >> 00[NET] installing IKE bypass policy failed > > [ cut ] > > I suspect that the virtual machine has some capabilities disabled. > -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJUQ5/aAAoJEDg5KY9j7GZYgAAP/jUyhS8pddQofqkEXQ9vbhVw WDu/oga5WR3jA6Mqz7KJzSvMrlwlcewym7sVR54ZX9vsp7JNuYW/tj6wKp6ZDIBJ wUlTS9xuY939hVyZWGRbmUbF6UVZ3Zp2nnFDMXKRd/aIb30Pzu0lRqVS9jSQIBIl xHXsexPw78p59TdjBnggv3rDplJsq6cW5ZZ6bVLe+jRYSGvLUv+O2Ee10/9onVLM MoU/qNLQuzyR0WHS8sZPac2vAkr8uGy6SM0N5FEyljJA5H/9F5RRMUdhXuSN4oRI PFZ5WFLYLc0F+Ncu7mdOmffm2hHB6MKJNCYDaNnA9H8bdpBjzPNrlviRiqw/wn7H r+GGZJZin4og6pw1Q8E2q9aoES1J/HXDHEK13Wy8VU8GLrXJetE35QEG6QIM3gTH MAag7R3+TkmTIZKj11oSn14k2H3X338HCBh0fWu1RBtFYSp9xNtgQLYs8SIQO3Vj u8Ut9VlUryMHmRP37/02ph6Mm4GLORS3nlHbsx65LeDRhRNRFNY45ABbCjzR3W9Y Ykl5LDkKts5Q74QZx9/o9TQOhWJzLhnPFhIxWnXPXbHu3xMFV7tANluZkAAIbnXZ 59O6E+/Jwlg+uOc6em/OvxI3Tu610CHgf3dSuLAyy4KbX0+CmpFJKSSaNb6yca+V VYR6Gi45G/I3s/irbyAa =JKa7 -----END PGP SIGNATURE----- _______________________________________________ Users mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/users
