[Bug 266947] security/strongswan does not kldload the ipsec modules on 13.x
- Reply: bugzilla-noreply_a_freebsd.org: "[Bug 266947] security/strongswan: does not kldload the ipsec modules on 13.x"
- Reply: bugzilla-noreply_a_freebsd.org: "[Bug 266947] security/strongswan: does not kldload the ipsec modules on 13.x"
- Reply: bugzilla-noreply_a_freebsd.org: "[Bug 266947] security/strongswan: does not kldload the ipsec modules on 13.x"
- Reply: bugzilla-noreply_a_freebsd.org: "[Bug 266947] security/strongswan: does not kldload the ipsec modules on 13.x"
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Mon, 10 Oct 2022 17:57:26 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=266947 Bug ID: 266947 Summary: security/strongswan does not kldload the ipsec modules on 13.x Product: Ports & Packages Version: Latest Hardware: Any OS: Any Status: New Severity: Affects Many People Priority: --- Component: Individual Port(s) Assignee: ports-bugs@FreeBSD.org Reporter: karl@denninger.net CC: strongswan@Nanoteq.com Flags: maintainer-feedback?(strongswan@Nanoteq.com) CC: strongswan@Nanoteq.com On 13.x the IPSEC kernel module is loadable and a stub is in the GENERIC declaration. Strongswan's RC file does not kldload the module, and thus while it comes up and runs attempting to connect will fail with a rather cryptic message on the client claiming authentication was unsuccessful when in fact it succeeded but the kernel on the server end could not insert the SPI entries. kldload ipsec fixes it; ergo that should be in the startup script so the ipsec module is present before the software starts. -- You are receiving this mail because: You are the assignee for the bug.