On Sun, 23 Feb 2025 17:01:57 +0900 Jongmin Kim <jm...@debian.org> wrote: > Although I do not have full context of this package, I suggest fixing > the issue by trying one of these: > > 1. Explicitly depends on "strongswan-starter" instead of "strongswan"
I tried to test this, by manually installing "strongswan-starter".
The result shows (log snippet below), it explicitly needs
/usr/lib/ipsec/charon which is in "strongswan-charon"[7].
[7] (filelist of "strongswan-charon")
https://packages.debian.org/sid/amd64/strongswan-charon/filelist
I found "strongswan-charon" is not listed in "Depends:" of "strongswan-starter",
but listed in "Recommends:"[7].
[8] (strongswan d/control line 219)
https://salsa.debian.org/debian/strongswan/-/blob/debian/master/debian/control#L219
I reported this to the package maintainer of strongswan[8]:
[9] (strongswan #1098714) https://bugs.debian.org/1098714
Log snippet of failing VPN connection:
2025-02-23T17:06:23.967702+09:00 debian-20250203 NetworkManager[1234]: <info>
[1740297983.9675]
vpn[0x5639ffb3a130,17d987d5-3bf5-4e44-9eb7-52acbb4ac4d6,"vpn.doubleo.co.kr"]:
starting l2tp
2025-02-23T17:06:23.967786+09:00 debian-20250203 NetworkManager[1234]: <info>
[1740297983.9676] audit: op="connection-activate"
uuid="17d987d5-3bf5-4e44-9eb7-52acbb4ac4d6" name="vpn.doubleo.co.kr" pid=2308
uid=1000 result="success"
2025-02-23T17:06:23.973746+09:00 debian-20250203 nm-l2tp-service[3370]:
nm-l2tp-service (version 1.20.20) starting...
2025-02-23T17:06:24.025132+09:00 debian-20250203 nm-l2tp-service[3370]: Check
port 1701
2025-02-23T17:06:24.025210+09:00 debian-20250203 nm-l2tp-service[3370]: Can't
bind to port 1701
2025-02-23T17:06:24.025237+09:00 debian-20250203 nm-l2tp-service[3370]:
/sbin/ipsec status > /dev/null 2>&1
2025-02-23T17:06:24.027991+09:00 debian-20250203 nm-l2tp-service[3370]:
/sbin/ipsec start --conf
/run/nm-l2tp-17d987d5-3bf5-4e44-9eb7-52acbb4ac4d6/ipsec.conf --debug
2025-02-23T17:06:24.031910+09:00 debian-20250203 NetworkManager[3387]: IKE
daemon '/usr/lib/ipsec/charon' not found
2025-02-23T17:06:24.032576+09:00 debian-20250203 NetworkManager[1234]: <warn>
[1740297984.0324]
vpn[0x5639ffb3a130,17d987d5-3bf5-4e44-9eb7-52acbb4ac4d6,"vpn.doubleo.co.kr"]:
failed to connect: 'Could not start the ipsec service.'
--
Jongmin Kim
D3D7 A235 22B6 41FB 78AC C775 0000 01EF CF1A 50FA
signature.asc
Description: PGP signature
