neutron

  1. Bug #1444017
  2. Comment #1

Comment 1 for bug 1444017

Revision history for this message
venkata anil (anil-venkata) wrote : Re: [VPNaas] NSS init failing for libreswan

Libreswan will be compiled with NSS by default.
when 'ipsec pluto' is called, it checks for NSS db. If NSS db is not initialised, it fails.
So VPNaaS should create NSS db before calling ipsec pluto(for Libreswan implementation) .

ipsec initnss /opt/stack/data/neutron/ipsec/250faac2-167b-4861-9d0c-b5710bf02ee2/etc/pki/nssdb/

then run pluto by specifying this etc/pki/nssdb/ as --ipsecdir
ipsec pluto --ipsecdir /opt/stack/data/neutron/ipsec/250faac2-167b-4861-9d0c-b5710bf02ee2/etc/pki/nssdb