Bug 517654

Summary:	net-misc/networkmanager-openswan-0.9.8.4 broken due to libreswan usage
Product:	Gentoo Linux	Reporter:	Tiziano Müller (RETIRED) <dev-zero>
Component:	Current packages	Assignee:	Steev Klimaszewski (RETIRED) <steev>
Status:	RESOLVED FIXED
Severity:	normal	CC:	gnome
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Tiziano Müller (RETIRED) gentoo-dev

2014-07-21 07:17:01 UTC

Unfortunately it seems that libreswan and openswan are not exactly compatible.
When trying to use networkmanager-openswan I get the following (after hacking the dbus-config to call a wrapper for nm-openswan-service which redirects stdout/stderr to syslog as well):

Jul 21 08:55:34 storm nm-openswan-service[13238]: ** Message: openswan: ipsec started with pid 13241
Jul 21 08:55:34 storm nm-openswan-service[13238]: systemd: ipsec service is already running
Jul 21 08:55:36 storm nm-openswan-service[13238]: ** Message: openswan: ipsec auto started with pid 13426
Jul 21 08:55:36 storm nm-openswan-service[13238]: can not load config '-': -:17: syntax error, unexpected EOL, expecting $end []
Jul 21 08:55:36 storm nm-openswan-service[13238]: 
Jul 21 08:55:36 storm nm-openswan-service[13238]: (nm-openswan-service:13237): GLib-WARNING **: GChildWatchSource: Exit status of a child process was requested but ECHILD was received by waitpid(). Most likely the process is ignoring SIGCHLD, or some other thread is invoking waitpid() with a nonpositive first argument; either behavior can break applications that use g_child_watch_add()/g_spawn_sync() either directly or indirectly.
Jul 21 08:55:36 storm pluto[12693]: initiating all conns with alias='nm-conn1'
Jul 21 08:55:36 storm nm-openswan-service[13238]: 000 initiating all conns with alias='nm-conn1'
Jul 21 08:55:36 storm nm-openswan-service[13238]: 021 no connection named "nm-conn1"
Jul 21 08:55:36 storm nm-openswan-service[13238]: ** Message: openswan: ipsec auto connection started with pid 13438
Jul 21 08:55:36 storm NetworkManager[19094]: <info> VPN service 'openswan' disappeared
Jul 21 08:55:36 storm NetworkManager[19094]: <warn> error disconnecting VPN: The name org.freedesktop.NetworkManager.openswan was not provided by any .service files

I rev-bumped the ebuild and pulled all patches from http://pkgs.fedoraproject.org/cgit/NetworkManager-openswan.git/, after that it started working (at least the service came up, now I have to fiddle with the IPsec settings).

Comment 1 Pacho Ramos gentoo-dev

2014-09-23 12:54:05 UTC

+*networkmanager-openswan-0.9.8.4-r1 (23 Sep 2014)
+
+  23 Sep 2014; Pacho Ramos <pacho@gentoo.org>
+  +networkmanager-openswan-0.9.8.4-r1.ebuild:
+  Apply Fedora patches to keep this working (#517654 by Tiziano Müller)
+