☰

最新的 strongswan 更新在 18.10 中出现故障

tag-icon • tag-icon 18.10 ipsec
最新的 strongswan 更新在 18.10 中出现故障

今天早上更新了很多strongswan文件。它破坏了 strongswan，因为它找不到/etc/ipsec.conf。果然，它不见了。包文件表明它在那里，但没有安装。

我去了 packages.ubuntu.com 并下载strongswan-starter_5.6.3-1ubuntu4.1_amd64.deb并手动重新安装它，但它也没有安装 /etc/ipsec.conf！

我手动从 .deb 文件中提取了 ipsec.conf，将其复制到 /etc/ipsec.conf，chmod 644 /etc/ipsec.conf，并确保它是 root:root，然后sudo systemctl restart ipsec。

sudo systemctl status ipsec现在显示正确。

/etc/ipsec.conf 文件如下所示...

# ipsec.conf - strongSwan IPsec configuration file

# basic configuration

config setup
    # strictcrlpolicy=yes
    # uniqueids = no

# Add connections here.

# Sample VPN connections

#conn sample-self-signed
#      leftsubnet=10.1.0.0/16
#      leftcert=selfCert.der
#      leftsendcert=never
#      right=192.168.0.2
#      rightsubnet=10.2.0.0/16
#      rightcert=peerCert.der
#      auto=start

#conn sample-with-ca-cert
#      leftsubnet=10.1.0.0/16
#      leftcert=myCert.pem
#      right=192.168.0.2
#      rightsubnet=10.2.0.0/16
#      rightid="C=CH, O=Linux strongSwan CN=peer name"
#      auto=start

更新＃1：

报道于https://bugs.launchpad.net/ubuntu/+source/strongswan/+bug/1811610

答案1

我去了 packages.ubuntu.com 并下载strongswan-starter_5.6.3-1ubuntu4.1_amd64.deb并手动重新安装它，但它也没有安装 /etc/ipsec.conf！

我手动从 .deb 文件中提取了 ipsec.conf，将其复制到 /etc/ipsec.conf，chmod 644 /etc/ipsec.conf，并确保它是 root:root，然后sudo systemctl restart ipsec。

sudo systemctl status ipsec现在显示正确。

/etc/ipsec.conf 文件如下所示...

# ipsec.conf - strongSwan IPsec configuration file

# basic configuration

config setup
    # strictcrlpolicy=yes
    # uniqueids = no

# Add connections here.

# Sample VPN connections

#conn sample-self-signed
#      leftsubnet=10.1.0.0/16
#      leftcert=selfCert.der
#      leftsendcert=never
#      right=192.168.0.2
#      rightsubnet=10.2.0.0/16
#      rightcert=peerCert.der
#      auto=start

#conn sample-with-ca-cert
#      leftsubnet=10.1.0.0/16
#      leftcert=myCert.pem
#      right=192.168.0.2
#      rightsubnet=10.2.0.0/16
#      rightid="C=CH, O=Linux strongSwan CN=peer name"
#      auto=start

相关内容