[Swan] ipsec won't stay running

[Paul Wouters]

On Wed, 11 Jun 2014, Mike Johnston wrote:

> Anyways, I had a co-worker sanity check what I am doing and he suggested that 
> I try installing by doing this instead:
>
> tar -xvf libreswan-3.8.tar.gz
> mv libreswan-3.8.tar.gz libreswan-3.8.orig.tar.gz
> cd libreswan-3.8
> debuild -uc -us
> cd ../
> sudo dpkg --install *.deb
>
> I still had the same problem where ipsec wouldn't stay running, but at least 
> "ipsec initnss" worked this time.  Once I ran through "ipsec initnss" I 
> started ipsec and found that it stayed running this time.  My VPN is working 
> again.

Yes, the debian packaging needs a little work. In the rpm spec file we
check for the nss and if it doesnt exist create a clean one.

> So I don't know if it was simply that a dependency was resolved by using the 
> dpkg method or what...but the problem is solved now.  And I have been 
> enlightened that this method plays much nicer with the package manager and 
> future updates, including those that may one day come from apt-get and 
> including kernel updates.  So I am a lot happier with this solution.

We have been looking for someone with debian commit access to package
libreswan up, but did not find anyone yet. If you know of someone who
is interested, please let me know!

Paul