<div dir="ltr"><div style>Thanks Tuomo,</div><div style><br></div><div style>Have you push your .spec change yet ? I can't see the changes here</div><a href="https://github.com/libreswan/libreswan/commits/master">https://github.com/libreswan/libreswan/commits/master</a><br>
<div><br></div><div><br></div><div style>tj</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Sun, Mar 3, 2013 at 11:42 PM, Tuomo Soini <span dir="ltr"><<a href="mailto:tis@foobar.fi" target="_blank">tis@foobar.fi</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="HOEnZb"><div class="h5">On Sun, 3 Mar 2013 20:14:37 -0600<br>
"T.J. Yang" <<a href="mailto:tjyang2001@gmail.com">tjyang2001@gmail.com</a>> wrote:<br>
<br>
> On Sun, Mar 3, 2013 at 12:29 PM, Tuomo Soini <<a href="mailto:tis@foobar.fi">tis@foobar.fi</a>> wrote:<br>
><br>
> > On Wed, 27 Feb 2013 12:51:54 -0500 (EST)<br>
> > Paul Wouters <<a href="mailto:pwouters@redhat.com">pwouters@redhat.com</a>> wrote:<br>
> ><br>
> > > On Wed, 27 Feb 2013, T.J. Yang wrote:<br>
> > ><br>
> > > > Anyway to silence the following errors ? For a basic PSK setup<br>
> > > > with certificate creation, following error messages in pluto<br>
> > > > log file.<br>
> > > ><br>
> > > > Could not change to directory '/etc/ipsec.d/cacerts': No such<br>
> > > > file or directory Could not change to directory<br>
> > > > '/etc/ipsec.d/aacerts': No such file or directory Could not<br>
> > > > change to directory '/etc/ipsec.d/crls': 2 No such file or<br>
> > > > directory<br>
> ><br>
> > > I think we do need the crls one because we _do_ real CRLs from<br>
> > > there. I don't think we read AAcerts at all. I am not sure if we<br>
> > > still take CAcerts outside of the NSS db?<br>
> ><br>
> > Directory crls is used and needed.<br>
> ><br>
> > So is cacerts - that's where from we load 3rd party cacerts for<br>
> > veryfying remote certificates. That all works. Our own cacert is in<br>
> > nss db when imported from pkcs12 bundle.<br>
> ><br>
> > I don't know any use for aacerts currently.<br>
> ><br>
> > Make install does generates all these directories.<br>
> ><br>
> > I'd like to know how was libreswan installed because make programs<br>
> > install does generate these dirs.<br>
> ><br>
> ><br>
> It was installed using yum command from<br>
> baseurl=<a href="http://download.libreswan.org/binaries/rhel/$releasever/$basearch/" target="_blank">http://download.libreswan.org/binaries/rhel/$releasever/$basearch/</a>.<br>
<br>
</div></div>This has been fixed in git. Problem wasn't about creating those<br>
dirs, installer does that, dirs just weren't packaged.<br>
<div class="im HOEnZb"><br>
--<br>
Tuomo Soini <<a href="mailto:tis@foobar.fi">tis@foobar.fi</a>><br>
Foobar Linux services<br>
</div><div class="HOEnZb"><div class="h5"><a href="tel:%2B358%2040%205240030" value="+358405240030">+358 40 5240030</a><br>
Foobar Oy <<a href="http://foobar.fi/" target="_blank">http://foobar.fi/</a>><br>
_______________________________________________<br>
Swan mailing list<br>
<a href="mailto:Swan@lists.libreswan.org">Swan@lists.libreswan.org</a><br>
<a href="https://lists.libreswan.org/mailman/listinfo/swan" target="_blank">https://lists.libreswan.org/mailman/listinfo/swan</a><br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br>T.J. Yang
</div>