Arch Linux User Repository

I took ownership of this package and fixed the build issue with the parser_class_name as figue suggests.

Ok, shrew-vpn-client updated. Please install that package to have QT GUI.

I can't test new ike package, because IT guys gave me a new laptop with W10, and on a virtual machine I can't make ike work... Maybe next week I'll take a closer look. Anyway, QT GUI works and I can edit my profiles.

For the people that already have a profile, you can bring it up in commandline:

ikec -r profile -u user -p password -a

or use the GUI :P

ike updated to 2.2.1-5

• Migrated to OpenSSL 1.1.x.
• Removed Qt GUI from this package. The idea behind this decision is to have an as minimalistic base package as possible, with separate packages provide GUI.
• Tested locally with OpenSSL 1.1.1.a-1.

Any feedback would be appreciated, thanks!

@figue I started that effort (porting to OpenSSL 1.1.1), so far it doesn't seem to hard to port, but because of my work, I didn't manage to complete it yet. Yeah, this is good idea to merge them. Probably it also makes sense to provide client without any GUI?

@timsat I've adpoted shrew-vpn-client package which, I think, it's a duplicate of ike. Are you OK if we request a merge?

FYI, I'm using this VPN client because my company use an old Checkpoint which I'm not able to make work without any other client... So if I can help porting Openssl somehow, let me know.

Cheers

Does anyone know how to fix this?

double free or corruption (out) Aborted (core dumped)

I got this error after launching $ ikec -r <config> -u <user></user></config>

Before this, ikec was running fine, and from one moment to another got the error, I searched in Google but I can't find the solution, and uninstall/install don't solve the problem. I use this for work, any help would be much appreciate. :)

P.S.: Sorry for use the comments like a forum.

@timsat: Cool. Thanks for your efforts! I'm interested in it, too.

Hi guys. Going to update it to use openssl-1.1.0 even though 1.0 version is still available. I'm interested in it since our company uses this client. Not sure what will be after that, but at least for now going to provide the update.

This hangs for me on the cmake step. cmake just sits there holding onto my terminal with no output until I ctrl-c. I enabled the --debug-output flag and it just printed "Running with debug output on." to stdout and otherwise had the same behavior.

I did fix the build, but the build will fail again in the near future when openssl-1.0 is going to be removed from the repository. Furthermore the development of IKE looks dead (The last version is 4 years old). I am no longer using ike since my company switched over openvpn, and I will not fix the build against openssl-1.1.0

It would appear that the package no longer builds, Any suggestions? /home/nulldivision/Downloads/ike/src/ike/source/libike/manager.file.cpp: In member function ‘bool _CONFIG_MANAGER::file_pcf_load(CONFIG&, const char*, bool&)’: /home/nulldivision/Downloads/ike/src/ike/source/libike/manager.file.cpp:682:19: error: aggregate ‘EVP_CIPHER_CTX ctx_cipher’ has incomplete type and cannot be defined EVP_CIPHER_CTX ctx_cipher; ^~~~~~~~~~ make[2]: *** [source/libike/CMakeFiles/ss_ike.dir/build.make:135: source/libike/CMakeFiles/ss_ike.dir/manager.file.o] Error 1 make[1]: *** [CMakeFiles/Makefile2:239: source/libike/CMakeFiles/ss_ike.dir/all] Error 2 make: *** [Makefile:130: all] Error 2 ==> ERROR: A failure occurred in build(). Aborting...

knotty66: THANKS! I had the same error and finally solved it with your help. And I spend more then 2 hours... :/ Before your post, without finding a solution (My former workaround was using the https://github.com/Stono/ike Docker Image and manually setting the DNS...) After installing the latest Microcode update (Package is outdated, so I used the one from the Intel website), nothing changed for me (dmesg | grep microcode shows a update, but ike still fails) Seems that your solution only works for Haswell, with the 5600U (Broadwell) it didn't work. So I kept digging, with the information that HLE may be the cause and the info from this thread: https://bbs.archlinux.org/viewtopic.php?id=202545 I build glibc without the flag "enable-lock-elision" ========== sudo abs core cp -r /var/abs/core/glibc /tmp cd /tmp/glibc # PKGBUILD: remove the line containing --enable-lock-elision with sed: sed -i '/--enable-lock-elision/d' PKGBUILD makepkg sudo pacman -U /tmp/glibc/glibc-whatever.pkg.tar.xz ========== Then reinstalled the package and it works!

Phate666,Hidi: I've just resolved this after about 2 hours of digging. This error: iked: pthread_mutex_unlock.c:87: __pthread_mutex_unlock_usercnt: Assertion `type == PTHREAD_MUTEX_ERRORCHECK_NP' failed. Is I believe related to Intel TSX extensions and HLE (Hardware Lock Elision). Broadwell and Haswell processors (My CPU is a 4790K) had faulty implementations of these and were later disabled by Intel. Installing 'intel-ucode' (https://wiki.archlinux.org/index.php/Microcode) which disables these features, and reinstalling this package fixed this issue for me.