Forums

×

Warning

JUser: :_load: Unable to load user with ID: 125371
Subscribe via email Subscribe via email
Subscribe via rss
Guest
or Ask a Question
Add a reply View Replies (1) →
Medium
Offline
Issue

Getting error when I add this VPN, I'm not sure what I means.

Resolved
0 votes
I get this error when after I clicked Add to add this VPN to my system, Can anyone elebrate what this means.

exception 'clearos\apps\base\Engine_Exception' with message '002 loading secrets from "/etc/ipsec.secrets"' in /usr/clearos/apps/base/libraries/Shell.php:227 Stack trace: #0 /usr/clearos/apps/static_vpn_basic/libraries/Openswan.php(368): clearos\apps\base\Shell->execute('/usr/sbin/ipsec', 'auto --rereadse...', true, Array) #1 /usr/clearos/apps/static_vpn_basic/controllers/static_vpn_basic.php(272): clearos\apps\static_vpn_basic\Openswan->reload('Kacie', false) #2 /usr/clearos/apps/static_vpn_basic/controllers/static_vpn_basic.php(89): Static_Vpn_Basic->_common('Kacie', 'edit') #3 [internal function]: Static_Vpn_Basic->edit('Kacie') #4 /usr/clearos/framework/system/core/CodeIgniter.php(535): call_user_func_array(Array, Array) #5 /usr/clearos/framework/htdocs/app/index.php(224): require_once('/usr/clearos/fr...') #6 {main}
In Static IPsec VPN for Home
Wednesday, May 02 2018, 01:05 AM
Subscribe via email
Share this post:
Responses (1)

  • Accepted Answer

    Nick Howitt
    Nick Howitt
    Offline
    Wednesday, May 02 2018, 06:59 AM - #Permalink
    Resolved
    0 votes
    Unfortunately the interface is a bit sensitive to changes and could do with a developer review. Under certain conditions it can write an invalid configuration file which causes libreswan to fail and refuse to start. The webconfig needs libreswan to run to work.

    The simple fix is quite easy. Go into /etc/ipsec.d/ and delete the relevant ipsec.unmanaged.XXX.conf and .secrets files and start define the VPN again.

    Before doing this you can try the following:
    In the .conf file there only the first line should start "conn". Delete other lines starting "conn". Also delete any blank lines. The second line onwards should all be indented.
    In the .secrets file, if the first character is a blank, remove it.
    Then see if ipsec will start with a "systemctl start ipsec.service"
    The reply is currently minimized Show
Your Reply