Hi, Disable kernel-libipsec and the first warning should be gone. Then warnings about DSA aren't relevant, because you don't use DSA certificates, do you? Btw, you don't need about 75% of the plugins you have loaded right now.
Kind regards Noel On 02.03.2018 14:51, Volodymyr Litovka wrote: > Hi colleagues, > > I'm installing and configuring Strongswan inside VM (KVM on Intel Xeon CPU > D-1521) with Ubuntu 17.10. > > With all plugins enabled, when I start strongswan service, I see the > following messages in the log: > > 1) The first question is how this impact performace, whether it need to be > loaded and how? - > Mar 2 15:32:44 vpn strongswan: 00[LIB] feature CUSTOM:kernel-ipsec in plugin > 'kernel-netlink' failed to load > > 2) plugin "pem" has unmet dependencies - not sure it's important, just ask in > case - should it be? > > Mar 2 15:32:44 vpn strongswan: 00[LIB] feature PUBKEY:DSA in plugin 'pem' > has unmet dependency: PUBKEY:DSA > Mar 2 15:32:44 vpn strongswan: 00[LIB] feature PRIVKEY:DSA in plugin 'pem' > has unmet dependency: PRIVKEY:DSA > Mar 2 15:32:44 vpn strongswan: 00[LIB] feature CERT_DECODE:OCSP_REQUEST in > plugin 'pem' has unmet dependency: CERT_DECODE:OCSP_REQUEST > > Loaded modules list - > > Mar 2 15:32:44 vpn strongswan: 00[LIB] loaded plugins: charon test-vectors > unbound ldap pkcs11 aesni aes rc2 sha2 sha1 md4 md5 mgf1 rdrand random nonce > x509 revocation constraints acert pubkey pkcs1 pkcs7 pkcs8 pkcs12 pgp dnskey > sshkey dnscert ipseckey pem openssl gcrypt af-alg fips-prf gmp agent chapoly > xcbc cmac hmac ctr ccm gcm ntru bliss curl soup mysql sqlite attr > kernel-libipsec kernel-netlink resolve socket-default connmark farp stroke > vici updown eap-identity eap-sim eap-sim-pcsc eap-aka eap-aka-3gpp2 > eap-simaka-pseudonym eap-simaka-reauth eap-md5 eap-gtc eap-mschapv2 > eap-dynamic eap-radius eap-tls eap-ttls eap-peap eap-tnc xauth-generic > xauth-eap xauth-pam xauth-noauth tnc-tnccs tnccs-20 tnccs-11 tnccs-dynamic > dhcp whitelist lookip error-notify certexpire led radattr addrblock unity > > Thank you. >
signature.asc
Description: OpenPGP digital signature
