Package Details: strongswan 5.5.3-1

Git Clone URL: https://aur.archlinux.org/strongswan.git (read-only)
Package Base: strongswan
Description: open source IPsec implementation
Upstream URL: http://www.strongswan.org
Keywords: IPsec strongswan
Licenses: GPL
Conflicts: openswan
Submitter: jayray
Maintainer: Thermi
Last Packager: Thermi
Votes: 113
Popularity: 3.877346
First Submitted: 2007-04-22 16:41
Last Updated: 2017-05-30 23:06

Pinned Comments

Thermi commented on 2017-01-08 15:20

@ltcmdrdata
Please only paste output with LANG=C.
The error appears because you don't have the necessary GPG key to authenticate the signature in your GPG keyring. The necessary GPG key's ID is specified in the PKGBUILD. It is "948F158A4E76A27BF3D07532DF42C170B34DBA77" (Andreas Steffen's public key). You need to download it from a GPG keyserver and import it in your gpg keyring. Use `gpg --recv-keys 948F158A4E76A27BF3D07532DF42C170B34DBA77` (assuming your version of gpg works, you have a keyserver defined and your gpg version can interact with gpg keyservers[1].

NO, YOU DO NOT AND *MUST NOT* IMPORT THE KEY INTO YOUR PACMAN KEYRING!

[1] https://bugs.archlinux.org/task/52354

Latest Comments

djagoo commented on 2017-06-03 06:33

I just reported a bug regarding tcp traffic not working after kernel update.

https://bugzilla.kernel.org/show_bug.cgi?id=195969

Thermi commented on 2017-05-30 13:19

I'd say it's because I care more about it than any TU or dev.

kbabioch commented on 2017-05-30 13:15

Why isn't this package moved to community? There are many votes and it kind of essential for IPSec ...

Thermi commented on 2017-05-25 19:59

@MartinDiehl

That has nothing to do with strongSwan and only to do with the kernel. It looks like the kernel devs broke XFRM again.

MartinDiehl commented on 2017-05-25 19:57

After the latest linux upgrade, I have no network connection after starting strongswan.
strongswan starts as expected, ping works but neither ssh or http connections work (independently if the server is in the vpn network or not).

Downgrading solves the problem.

The affected packages are:
linux-firmware (20170309.695f2d6-1 -> 20170422.ade8332-1)
linux (4.10.13-1 -> 4.11.2-1)

Thermi commented on 2017-05-06 11:55

@NullDivision:
I can not reproduce the error.

pkg-config is part of the base-devel group.
You need to have the group "base-devel" installed to build packages from the AUR. This is documented in many places.

NullDivision commented on 2017-05-06 09:18

Tried doing a build today only to end up with this error:

patching file configure.ac
Hunk #1 succeeded at 975 (offset 29 lines).
configure.ac:37: error: possibly undefined macro: AC_DEFINE
If this token and others are legitimate, please use m4_pattern_allow.
See the Autoconf documentation.
configure.ac:76: error: possibly undefined macro: AC_SUBST
autoreconf: /usr/bin/autoconf failed with exit status: 1
==> ERROR: A failure occurred in prepare().
Aborting...


For anyone with a similar error you need to install `pkg-config`. Wondering if this could be a good candidate for a build dependency maybe?

jabbas commented on 2017-04-15 11:57

Tested my patched PKGCONFIG on armv7 - works.

jabbas commented on 2017-04-11 19:06

I've created a version which compiles on different arch's than x86 and x86_64.

https://gist.github.com/jabbas/28e6c37e38032c0fc45e4c3b0be936c3

You can't do --enable-aesni on those, since it needs SSE3.

Tested on Odroid C2 but should work on rPi (and other ARM's) as well.

GitHub repository with changes: https://github.com/jabbas/archlinux-strongswan

amuri-de commented on 2017-04-03 04:28

if you get error like this:
==> Verifying source file signatures with gpg...
strongswan-5.5.2.tar.bz2 ... FAILED (unknown public key DF42C170B34DBA77)
==> ERROR: One or more PGP signatures could not be verified!
==> ERROR: Makepkg was unable to build strongswan.

you can try to add pgp key with:
gpg --keyserver pool.sks-keyservers.net --recv-keys DF42C170B34DBA77

I hope it will fix the problem

All comments