J'ai effectué les commandes comme indiqué. Malheureusement, cela ne fonctionne toujours pas.
systemctl status ipsec
● ipsec.service - Internet Key Exchange (IKE) Protocol Daemon for IPsec
Loaded: loaded (/usr/lib/systemd/system/ipsec.service; disabled; vendor preset: disabled)
Active: inactive (dead)
systemctl start ipsec
systemctl status ipsec
● ipsec.service - Internet Key Exchange (IKE) Protocol Daemon for IPsec
Loaded: loaded (/usr/lib/systemd/system/ipsec.service; disabled; vendor preset: disabled)
Active: active (running) since mar 2016-04-12 19:50:49 CEST; 52s ago
Process: 5365 ExecStartPre=/usr/sbin/ipsec --checknflog (code=exited, status=0/SUCCESS)
Process: 5361 ExecStartPre=/usr/sbin/ipsec --checknss (code=exited, status=0/SUCCESS)
Process: 4799 ExecStartPre=/usr/libexec/ipsec/_stackmanager start (code=exited, status=0/SUCCESS)
Process: 4788 ExecStartPre=/usr/libexec/ipsec/addconn --config /etc/ipsec.conf --checkconfig (code=exited, status=0/SUCCESS)
Main PID: 5378 (pluto)
CGroup: /system.slice/ipsec.service
└─5378 /usr/libexec/ipsec/pluto --config /etc/ipsec.conf --nofork
avr 12 19:50:50 backspace.home pluto[5378]: | setup callback for interface enp7s0f1:500 fd 27
avr 12 19:50:50 backspace.home pluto[5378]: | setup callback for interface lo:4500 fd 26
avr 12 19:50:50 backspace.home pluto[5378]: | setup callback for interface lo:500 fd 25
avr 12 19:50:50 backspace.home pluto[5378]: | setup callback for interface enp7s0f1:4500 fd 24
avr 12 19:50:50 backspace.home pluto[5378]: | setup callback for interface enp7s0f1:500 fd 23
avr 12 19:50:50 backspace.home pluto[5378]: | setup callback for interface virbr0:4500 fd 22
avr 12 19:50:50 backspace.home pluto[5378]: | setup callback for interface virbr0:500 fd 21
avr 12 19:50:50 backspace.home pluto[5378]: loading secrets from "/etc/ipsec.secrets"
avr 12 19:50:50 backspace.home pluto[5378]: loading secrets from "/etc/ipsec.d/maison.secrets"
avr 12 19:50:50 backspace.home pluto[5378]: reapchild failed with errno=10 No child processes
J'ai de nouveau executé ipsec verify :
ipsec verify
Verifying installed system and configuration files
Version check and ipsec on-path [OK]
Libreswan 3.16 (netkey) on 4.4.6-301.fc23.x86_64
Checking for IPsec support in kernel [OK]
NETKEY: Testing XFRM related proc values
ICMP default/send_redirects [OK]
ICMP default/accept_redirects [OK]
XFRM larval drop [OK]
Pluto ipsec.conf syntax [OK]
Hardware random device [N/A]
Two or more interfaces found, checking IP forwarding [OK]
Checking rp_filter [ENABLED]
/proc/sys/net/ipv4/conf/all/rp_filter [ENABLED]
/proc/sys/net/ipv4/conf/default/rp_filter [ENABLED]
/proc/sys/net/ipv4/conf/enp7s0f1/rp_filter [ENABLED]
/proc/sys/net/ipv4/conf/ip_vti0/rp_filter [ENABLED]
/proc/sys/net/ipv4/conf/virbr0/rp_filter [ENABLED]
/proc/sys/net/ipv4/conf/virbr0-nic/rp_filter [ENABLED]
/proc/sys/net/ipv4/conf/wlp6s0/rp_filter [ENABLED]
rp_filter is not fully aware of IPsec and should be disabled
Checking that pluto is running [OK]
Pluto listening for IKE on udp 500 [OK]
Pluto listening for IKE/NAT-T on udp 4500 [OK]
Pluto ipsec.secret syntax [UNKNOWN]
(run ipsec verify as root to test ipsec.secrets)
Checking 'ip' command [OK]
Checking 'iptables' command [OK]
Checking 'prelink' command does not interfere with FIPSChecking for obsolete ipsec.conf options [OBSOLETE KEYWORD]
warning: could not open include filename: '/etc/ipsec.d/*.conf'
Opportunistic Encryption [DISABLED]
ipsec verify: encountered 15 errors - see 'man ipsec_verify' for help
