I am trying to get a very basic IPsec tunnel running. Rosa offers Strongswan or Openswan, but both have the following problems.
Strongswan is missing the ipsec binary:
Код: Выделить всё
# urpmq -l strongswan |grep ipsec |grep bin
/usr/sbin/ipsec
# rpm -ql strongswan |grep ipsec |grep bin
#
Openswan does have ipsec but seems to hang randomly:
Код: Выделить всё
# ipsec newhostkey --output /etc/ipsec.secrets
...(many minutes long wait or forever even)...
When it does create the secrets file it gives error:
Код: Выделить всё
ipsec showhostkey: wrong kind of key PPK_XAUTH in show_confkey. Expected PPK_RSA.
Openswan seems on its way out: all the original developers dropped out, sued the company and forked the new Libreswan. No new maintenance in a couple of years. Debian and Redhat both dropped it and adopted Libreswan. Libreswan not in Rosa.
How can I get Ipsec on Rosa?