RE: 31 days of Raspberry PI 400 | #11 | Day 16

feiticeir0 — Fri, 23 Apr 2021 11:11:40 GMT

Hi !

Following your advice, I've removed everything strongswan and installed freeswan.

Using your configuration parameters, I've recompiled network-manager-l2tp and after a reboot, the L2TP plugin appeared on the VPN options.

unfortunately, it didn't connect. No more complains about modp1024, I guess thats that.

It did complain about GatewayID not being resolvable, but I was expecting something like that..

will need to dig a bit further. Still, thank you so much for your help

RE: 31 days of Raspberry PI 400 | #11 | Day 16

luigi2600 — Wed, 21 Apr 2021 11:41:00 GMT

--with-nm-ipsec-nss-dir=/usr/include/nss doesn't look right. It is supposed to be the location of libreswan's NSS directory where the machine certificates are stored. The default location of /var/lib/ipsec/nss should be fine. The following command confirms /var/lib/ipsec/nss is part of the libreswan package.

[embed:dc8ab71f-3b98-42d9-b0f6-e21e02a0f8e2:3ef06e6b-9b7d-4651-b12d-db8be7f5e991:type=text&text=%24+dpkg+-S+%2Fvar%2Flib%2Fipsec%2Fnss%0Alibreswan%3A+%2Fvar%2Flib%2Fipsec%2Fnss]

I think you also need to use --libdir=/usr/lib/arm-linux-gnueabihf