Re: [Openstack-operators] Juno's VPNaaS does not work on Centos 7 with libreswan

2015-02-04 Thread Matias R. Cuenca del Rey
Hi Erik, I had the same issue. I think is because there aren't nss db files. You could try executing the following commands: 1.- On network node add certutil command to rootwarp 2.1.- Root user # echo "libreswan: CommandFilter, certutil, root" >> /usr/share/neutron/rootwrap/vpnaas.filters # system

Re: [Openstack-operators] Juno's VPNaaS does not work on Centos 7 with libreswan

2015-02-04 Thread Erik McCormick
Matias, This is great stuff! Thanks for sharing. I came up with something similar this past weekend, but I then ran into the issue where the PID file was left behind whenever Pluto gets restarted (which happens constantly). Did you run into that issue? Thanks, Erik On Feb 3, 2015 11:37 PM, "Matia

[Openstack-operators] Juno's VPNaaS does not work on Centos 7 with libreswan

2015-02-03 Thread Matias R. Cuenca del Rey
Packages: * openstack-neutron-vpn-agent-2014.2.1-1.el7.centos.noarch * libreswan-3.8-6.el7_0.x86_64 Yesterday I modified some openstack-neutron-vpn-agent's script to make VPN work :). I don't know much about python. I'm sure it can be improved. These are all the steps I did to enable VPNaaS on Ope