I had similar type of error and it was kernel-libipsec plugin was conflicting 
with selinux. I disabled the kernel-libipsec and issue has been resolved.

Anvar Kuchkartaev 
an...@anvartay.com
  Original Message  
From: Hoggins!
Sent: miércoles, 17 de enero de 2018 21:21
To: users@lists.strongswan.org
Subject: [strongSwan] "signal of type SIGINT received. Shutting down" ?

Hello list,

I don't understand why one of my StrongSwan clients disconnects from its
server.
When it happens, it begins with this entry in the logs :

Jan 17 21:12:59 yomama charon: 00[DMN] signal of type SIGINT
received. Shutting down


Then :

Jan 17 21:16:14 yomama charon: 00[IKE] sending DELETE for IKE_SA
net-net[1]
Jan 17 21:16:14 yomama charon: 00[ENC] generating INFORMATIONAL
request 2 [ D ]
Jan 17 21:16:14 yomama charon: 00[NET] sending packet: from
192.168.1.72[4500] to 51.254.26.13[4500] (80 bytes)
Jan 17 21:16:14 yomama charon: 01[KNL] creating acquire job for
policy 192.168.22.10/32[tcp/ssh] === 192.168.55.3/32[tcp/47700] with
reqid {1}
Jan 17 21:16:16 yomama charon: 00[DMN] Starting IKE charon daemon
(strongSwan 5.6.1, Linux 4.9.2, x86_64)
Jan 17 21:16:16 yomama charon: 00[CFG] loading ca certificates from
'/usr/local/etc/ipsec.d/cacerts'
Jan 17 21:16:16 yomama charon: 00[CFG] loading aa certificates from
'/usr/local/etc/ipsec.d/aacerts'
Jan 17 21:16:16 yomama charon: 00[CFG] loading ocsp signer
certificates from '/usr/local/etc/ipsec.d/ocspcerts'
Jan 17 21:16:16 yomama charon: 00[CFG] loading attribute
certificates from '/usr/local/etc/ipsec.d/acerts'
Jan 17 21:16:16 yomama charon: 00[CFG] loading crls from
'/usr/local/etc/ipsec.d/crls'
Jan 17 21:16:16 yomama charon: 00[CFG] loading secrets from
'/usr/local/etc/ipsec.secrets'
Jan 17 21:16:16 yomama charon: 00[CFG]   loaded IKE secret for %any
92.222.188.77
Jan 17 21:16:16 yomama charon: 00[CFG]   loaded IKE secret for
yomamaRADIOM
Jan 17 21:16:16 yomama charon: 00[CFG]   loaded IKE secret for
netnetYomama
[...]


So basically StrongSwan restarts, I can't figure out why, and I lose
packets.

Where should I look ?

Thanks !

    Hoggins!



Reply via email to