[Swan] ipsec won't stay running

[Paul Wouters]

On Mon, 9 Jun 2014, Mike Johnston wrote:

> I used to have openswan installed on my ubuntu 12.04 server and I ran apt-get 
> remove openswan to remove it.  I then installed libreswan-3.8 from source and 
> rebooted the server.  After the reboot, I found that the ipsec service was 
> not running.
>
> Running service ipsec start gives me something like this:
> ipsec start/running, process 4933
>
> Then if I immediately run service ipsec status I get this:
> ipsec stop/waiting
>
> So the ipsec service never really gets going...it must fail almost right 
> away.
>
> What can I do to troubleshoot this situation and get libreswan going on this 
> server?

can you run:

 	ipsec addconn --checkconfig

the return code for that should be 0, otherwise the scripts might refuse
to (re)start ipsec.

Paul