Attachment 16558 Details for Bug 51064 – journalctl -u strongswan с хоста moon

journalctl -u strongswan с хоста moon

moon.log (text/x-log), 8.03 KB, created by Osmolovskaya Anastasia on 2024-08-05 16:18:36 MSK

(hide)

Description:

Filename:

MIME Type:

Creator: Osmolovskaya Anastasia

Created: 2024-08-05 16:18:36 MSK

Size: 8.03 KB

patch

obsolete

>Ð°Ð²Ð³ 05 15:45:03 moon systemd[1]: Starting strongswan.service - strongSwan IPsec IKEv1/IKEv2 daemon using swanctl...
>Ð°Ð²Ð³ 05 15:45:04 moon charon-systemd[12343]: Starting charon-systemd IKE daemon (strongSwan 5.9.14, Linux 6.6.41-un-def-alt0.p11.1, x86_64)
>Ð°Ð²Ð³ 05 15:45:04 moon charon-systemd[12343]: PKCS11 module '<name>' lacks library path
>Ð°Ð²Ð³ 05 15:45:04 moon charon-systemd[12343]: providers loaded by OpenSSL: legacy default
>Ð°Ð²Ð³ 05 15:45:04 moon charon-systemd[12343]: using '/sbin/resolvconf' to install DNS servers
>Ð°Ð²Ð³ 05 15:45:04 moon charon-systemd[12343]: plugin 'eap-tnc': failed to load - eap_tnc_plugin_create not found and no plugin file available
>Ð°Ð²Ð³ 05 15:45:04 moon charon-systemd[12343]: plugin 'tnc-ifmap': failed to load - tnc_ifmap_plugin_create not found and no plugin file available
>Ð°Ð²Ð³ 05 15:45:04 moon charon-systemd[12343]: plugin 'tnc-pdp': failed to load - tnc_pdp_plugin_create not found and no plugin file available
>Ð°Ð²Ð³ 05 15:45:04 moon charon-systemd[12343]: plugin 'tnc-imc': failed to load - tnc_imc_plugin_create not found and no plugin file available
>Ð°Ð²Ð³ 05 15:45:04 moon charon-systemd[12343]: plugin 'tnc-imv': failed to load - tnc_imv_plugin_create not found and no plugin file available
>Ð°Ð²Ð³ 05 15:45:04 moon charon-systemd[12343]: plugin 'tnc-tnccs': failed to load - tnc_tnccs_plugin_create not found and no plugin file available
>Ð°Ð²Ð³ 05 15:45:04 moon charon-systemd[12343]: plugin 'tnccs-20': failed to load - tnccs_20_plugin_create not found and no plugin file available
>Ð°Ð²Ð³ 05 15:45:04 moon charon-systemd[12343]: plugin 'tnccs-11': failed to load - tnccs_11_plugin_create not found and no plugin file available
>Ð°Ð²Ð³ 05 15:45:04 moon charon-systemd[12343]: plugin 'tnccs-dynamic': failed to load - tnccs_dynamic_plugin_create not found and no plugin file available
>Ð°Ð²Ð³ 05 15:45:04 moon charon-systemd[12343]: loading ca certificates from '/etc/strongswan/ipsec.d/cacerts'
>Ð°Ð²Ð³ 05 15:45:04 moon charon-systemd[12343]: loading aa certificates from '/etc/strongswan/ipsec.d/aacerts'
>Ð°Ð²Ð³ 05 15:45:04 moon charon-systemd[12343]: loading ocsp signer certificates from '/etc/strongswan/ipsec.d/ocspcerts'
>Ð°Ð²Ð³ 05 15:45:04 moon charon-systemd[12343]: loading attribute certificates from '/etc/strongswan/ipsec.d/acerts'
>Ð°Ð²Ð³ 05 15:45:04 moon charon-systemd[12343]: loading crls from '/etc/strongswan/ipsec.d/crls'
>Ð°Ð²Ð³ 05 15:45:04 moon charon-systemd[12343]: loading secrets from '/etc/strongswan/ipsec.secrets'
>Ð°Ð²Ð³ 05 15:45:04 moon charon-systemd[12343]: sql plugin: database URI not set
>Ð°Ð²Ð³ 05 15:45:04 moon charon-systemd[12343]: opening triplet file /etc/strongswan/ipsec.d/triplets.dat failed: No such file or directory
>Ð°Ð²Ð³ 05 15:45:04 moon charon-systemd[12343]: loaded 0 RADIUS server configurations
>Ð°Ð²Ð³ 05 15:45:04 moon charon-systemd[12343]: mediation client database URI not defined, skipped
>Ð°Ð²Ð³ 05 15:45:04 moon charon-systemd[12343]: HA config misses local/remote address
>Ð°Ð²Ð³ 05 15:45:04 moon charon-systemd[12343]: no script for ext-auth script defined, disabled
>Ð°Ð²Ð³ 05 15:45:04 moon charon-systemd[12343]: loaded plugins: charon-systemd ldap pkcs11 tpm aes des rc2 sha2 sha1 md5 mgf1 random nonce x509 revocation constraints acert p>
>Ð°Ð²Ð³ 05 15:45:04 moon charon-systemd[12343]: dropped capabilities, running as uid 0, gid 0
>Ð°Ð²Ð³ 05 15:45:04 moon charon-systemd[12343]: spawning 16 worker threads
>Ð°Ð²Ð³ 05 15:45:04 moon charon-systemd[12343]: loaded certificate 'C=CH, O=strongswan, CN=moon.strongswan.org'
>Ð°Ð²Ð³ 05 15:45:04 moon charon-systemd[12343]: loaded certificate 'C=CH, O=strongSwan, CN=strongSwan Root CA'
>Ð°Ð²Ð³ 05 15:45:04 moon charon-systemd[12343]: loaded ANY private key
>Ð°Ð²Ð³ 05 15:45:04 moon charon-systemd[12343]: loaded ANY private key
>Ð°Ð²Ð³ 05 15:45:04 moon charon-systemd[12343]:   id not specified, defaulting to cert subject 'C=CH, O=strongswan, CN=moon.strongswan.org'
>Ð°Ð²Ð³ 05 15:45:04 moon charon-systemd[12343]: added vici connection: host-host
>Ð°Ð²Ð³ 05 15:45:04 moon charon-systemd[12343]: installing 'net-net'
>Ð°Ð²Ð³ 05 16:05:35 moon charon-systemd[12536]: initiating IKE_SA host-host[1] to y.y.y.y
>Ð°Ð²Ð³ 05 16:05:35 moon charon-systemd[12536]: generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) N(HASH_ALG) N(REDIR_SUP) ]
>Ð°Ð²Ð³ 05 16:05:35 moon charon-systemd[12536]: sending packet: from x.x.x.x[500] to y.y.y.y[500] (1144 bytes)
>Ð°Ð²Ð³ 05 16:05:35 moon charon-systemd[12536]: received packet: from y.y.y.y[500] to x.x.x.x[500] (305 bytes)
>Ð°Ð²Ð³ 05 16:05:35 moon charon-systemd[12536]: parsed IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) CERTREQ N(FRAG_SUP) N(HASH_ALG) N(CHDLESS_SUP) N(MULT_AUTH)>
>Ð°Ð²Ð³ 05 16:05:35 moon charon-systemd[12536]: selected proposal: IKE:AES_CBC_128/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/ECP_256
>Ð°Ð²Ð³ 05 16:05:35 moon charon-systemd[12536]: received cert request for "C=CH, O=strongSwan, CN=strongSwan Root CA"
>Ð°Ð²Ð³ 05 16:05:35 moon swanctl[12558]: loaded certificate from '/etc/strongswan/swanctl/x509/moonCert.pem'
>Ð°Ð²Ð³ 05 16:05:35 moon swanctl[12558]: loaded certificate from '/etc/strongswan/swanctl/x509ca/strongswanCert.pem'
>Ð°Ð²Ð³ 05 16:05:35 moon swanctl[12558]: loaded private key from '/etc/strongswan/swanctl/private/moonKey.pem'
>Ð°Ð²Ð³ 05 16:05:35 moon swanctl[12558]: loaded private key from '/etc/strongswan/swanctl/private/strongswanKey.pem'
>Ð°Ð²Ð³ 05 16:05:35 moon swanctl[12558]: no authorities found, 0 unloaded
>Ð°Ð²Ð³ 05 16:05:35 moon swanctl[12558]: no pools found, 0 unloaded
>Ð°Ð²Ð³ 05 16:05:35 moon swanctl[12558]: loaded connection 'host-host'
>Ð°Ð²Ð³ 05 16:05:35 moon swanctl[12558]: successfully loaded 1 connections, 0 unloaded
>Ð°Ð²Ð³ 05 16:05:35 moon charon-systemd[12536]: sending cert request for "C=CH, O=strongSwan, CN=strongSwan Root CA"
>Ð°Ð²Ð³ 05 16:05:35 moon charon-systemd[12536]: authentication of 'C=CH, O=strongswan, CN=moon.strongswan.org' (myself) with ED25519 successful
>Ð°Ð²Ð³ 05 16:05:35 moon charon-systemd[12536]: sending end entity cert "C=CH, O=strongswan, CN=moon.strongswan.org"
>Ð°Ð²Ð³ 05 16:05:35 moon charon-systemd[12536]: establishing CHILD_SA net-net{1}
>Ð°Ð²Ð³ 05 16:05:35 moon charon-systemd[12536]: generating IKE_AUTH request 1 [ IDi CERT N(INIT_CONTACT) CERTREQ IDr AUTH SA TSi TSr N(MOBIKE_SUP) N(ADD_6_ADDR) N(ADD_6_ADDR)>
>Ð°Ð²Ð³ 05 16:05:35 moon charon-systemd[12536]: sending packet: from x.x.x.x[4500] to y.y.y.y[4500] (992 bytes)
>Ð°Ð²Ð³ 05 16:05:35 moon systemd[1]: Started strongswan.service - strongSwan IPsec IKEv1/IKEv2 daemon using swanctl.
>Ð°Ð²Ð³ 05 16:05:35 moon charon-systemd[12536]: received packet: from y.y.y.y[4500] to x.x.x.x[4500] (720 bytes)
>Ð°Ð²Ð³ 05 16:05:35 moon charon-systemd[12536]: parsed IKE_AUTH response 1 [ IDr CERT AUTH SA TSi TSr N(MOBIKE_SUP) N(ADD_6_ADDR) ]
>Ð°Ð²Ð³ 05 16:05:35 moon charon-systemd[12536]: received end entity cert "C=CH, O=strongswan, CN=sun.strongswan.org"
>Ð°Ð²Ð³ 05 16:05:35 moon charon-systemd[12536]:   using certificate "C=CH, O=strongswan, CN=sun.strongswan.org"
>Ð°Ð²Ð³ 05 16:05:35 moon charon-systemd[12536]:   using trusted ca certificate "C=CH, O=strongSwan, CN=strongSwan Root CA"
>Ð°Ð²Ð³ 05 16:05:35 moon charon-systemd[12536]:   reached self-signed root ca with a path length of 0
>Ð°Ð²Ð³ 05 16:05:35 moon charon-systemd[12536]: checking certificate status of "C=CH, O=strongswan, CN=sun.strongswan.org"
>Ð°Ð²Ð³ 05 16:05:35 moon charon-systemd[12536]: certificate status is not available
>Ð°Ð²Ð³ 05 16:05:35 moon charon-systemd[12536]: authentication of 'C=CH, O=strongSwan, CN=sun.strongswan.org' with ED25519 successful
>Ð°Ð²Ð³ 05 16:05:35 moon charon-systemd[12536]: peer supports MOBIKE
>Ð°Ð²Ð³ 05 16:05:35 moon charon-systemd[12536]: IKE_SA host-host[1] established between x.x.x.x[C=CH, O=strongswan, CN=moon.strongswan.org]...y.y.y.y[C=CH, O=strongSw>
>Ð°Ð²Ð³ 05 16:05:35 moon charon-systemd[12536]: scheduling rekeying in 13007s
>Ð°Ð²Ð³ 05 16:05:35 moon charon-systemd[12536]: maximum IKE_SA lifetime 14447s
>Ð°Ð²Ð³ 05 16:05:35 moon charon-systemd[12536]: selected proposal: ESP:AES_GCM_16_128/NO_EXT_SEQ
>Ð°Ð²Ð³ 05 16:05:35 moon charon-systemd[12536]: CHILD_SA net-net{1} established with SPIs c97f75bc_i cbb5812b_o and TS x.x.x.x/32 === y.y.y.y/32

Actions: View

Attachments on bug 51064: 16558