main/strongswan: ipsec not starting anymore due to openssl plugin: i2d_re_X509_CRL_tbs: symbol not found
Hi Alpinisti (thanks for all of your work on AlpineLinux),
after an upgrade from 3.7(.1, I think) (all patches ever installed asap)
to 3.8
ipsec/strongswan refuses to start.
The logfile gives:
Jul 10 17:25:42 service daemon.info : 00[DMN] Starting IKE charon
daemon (strongSwan 5.6.3, Linux 4.9.65-1-virthardened, x86_64)
Jul 10 17:25:42 service daemon.info : 00[LIB] plugin ‘openssl’ failed
to load: Error relocating /usr/lib/ipsec/plugins/libstrongswan-op
enssl.so: i2d_re_X509_CRL_tbs: symbol not found
Jul 10 17:25:42 service daemon.info : 00[LIB] feature
CUSTOM:libcharon-sa-managers in critical plugin ‘charon’ has unmet
dependency: HASHER:HASH_SHA1
Jul 10 17:25:42 service daemon.info : 00[LIB] feature CUSTOM:libcharon
in critical plugin ‘charon’ has unmet dependency:
CUSTOM:libcharon-sa-managers
Jul 10 17:25:42 service daemon.info : 00[LIB] feature
CUSTOM:libcharon-receiver in critical plugin ‘charon’ has unmet
dependency: HASHER:HASH_SHA1
… and later on:
Jul 10 17:25:42 service daemon.info : 00[CFG] opening triplet file
/etc/ipsec.d/triplets.dat failed: No such file or directory
Jul 10 17:25:42 service daemon.info : 00[CFG] HA config misses
local/remote address
Jul 10 17:25:42 service daemon.info : 00[LIB] failed to load 3
critical plugin features
Jul 10 17:25:42 service daemon.info : 00[DMN] initialization failed -
aborting charon
Jul 10 17:25:42 service authpriv.info ipsec_starter[2770]: charon has
quit: initialization failed
Jul 10 17:25:42 service authpriv.info ipsec_starter[2770]: charon
refused to be started
Jul 10 17:25:42 service authpriv.info ipsec_starter[2770]: ipsec
starter stopped
The config remained untouched … no idea what to do …
Thanks.
Joe
(from redmine: issue id 9070, created on 2018-07-10, closed on 2019-05-04)
- Changesets:
- Revision 886516bd by Kaarle Ritvanen on 2018-07-11T09:50:12Z:
main/strongswan: fix libressl compatibility
fixes #8919
fixes #9070
- Revision 47a233ee by Kaarle Ritvanen on 2018-07-11T09:53:53Z:
main/strongswan: fix libressl compatibility
fixes #8919
fixes #9070