Hi,

Disable kernel-libipsec and the first warning should be gone. Then warnings 
about DSA aren't relevant, because you don't
use DSA certificates, do you? Btw, you don't need about 75% of the plugins you 
have loaded right now.

Kind regards

Noel

On 02.03.2018 14:51, Volodymyr Litovka wrote:
> Hi colleagues,
>
> I'm installing and configuring Strongswan inside VM (KVM on Intel Xeon CPU 
> D-1521) with Ubuntu 17.10.
>
> With all plugins enabled, when I start strongswan service, I see the 
> following messages in the log:
>
> 1) The first question is how this impact performace, whether it need to be 
> loaded and how? -
> Mar  2 15:32:44 vpn strongswan: 00[LIB] feature CUSTOM:kernel-ipsec in plugin 
> 'kernel-netlink' failed to load
>
> 2) plugin "pem" has unmet dependencies - not sure it's important, just ask in 
> case - should it be?
>
> Mar  2 15:32:44 vpn strongswan: 00[LIB] feature PUBKEY:DSA in plugin 'pem' 
> has unmet dependency: PUBKEY:DSA
> Mar  2 15:32:44 vpn strongswan: 00[LIB] feature PRIVKEY:DSA in plugin 'pem' 
> has unmet dependency: PRIVKEY:DSA
> Mar  2 15:32:44 vpn strongswan: 00[LIB] feature CERT_DECODE:OCSP_REQUEST in 
> plugin 'pem' has unmet dependency: CERT_DECODE:OCSP_REQUEST
>
> Loaded modules list -
>
> Mar  2 15:32:44 vpn strongswan: 00[LIB] loaded plugins: charon test-vectors 
> unbound ldap pkcs11 aesni aes rc2 sha2 sha1 md4 md5 mgf1 rdrand random nonce 
> x509 revocation constraints acert pubkey pkcs1 pkcs7 pkcs8 pkcs12 pgp dnskey 
> sshkey dnscert ipseckey pem openssl gcrypt af-alg fips-prf gmp agent chapoly 
> xcbc cmac hmac ctr ccm gcm ntru bliss curl soup mysql sqlite attr 
> kernel-libipsec kernel-netlink resolve socket-default connmark farp stroke 
> vici updown eap-identity eap-sim eap-sim-pcsc eap-aka eap-aka-3gpp2 
> eap-simaka-pseudonym eap-simaka-reauth eap-md5 eap-gtc eap-mschapv2 
> eap-dynamic eap-radius eap-tls eap-ttls eap-peap eap-tnc xauth-generic 
> xauth-eap xauth-pam xauth-noauth tnc-tnccs tnccs-20 tnccs-11 tnccs-dynamic 
> dhcp whitelist lookip error-notify certexpire led radattr addrblock unity
>
> Thank you.
>

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to