{"id":272,"date":"2015-03-18T17:04:02","date_gmt":"2015-03-18T08:04:02","guid":{"rendered":"http:\/\/fsck.jp\/?p=272"},"modified":"2018-05-31T09:03:38","modified_gmt":"2018-05-31T00:03:38","slug":"raspbian%e3%81%abstrongswan-5-x%e3%82%92%e3%82%a4%e3%83%b3%e3%82%b9%e3%83%88%e3%83%bc%e3%83%ab","status":"publish","type":"post","link":"https:\/\/fsck.jp\/?p=272","title":{"rendered":"Raspbian\u306bstrongswan 5.x\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb"},"content":{"rendered":"

Raspberry Pi model B+ \u3092\u8cfc\u5165\u3057\u3066 VPN \u7bb1\u306b\u3057\u3088\u3046\u3068\u3057\u305f\u304c\u3001Raspbian OS\u6a19\u6e96\u306estrongswan \u30d1\u30c3\u30b1\u30fc\u30b8 (=debian wheezy\u306e\u30d1\u30c3\u30b1\u30fc\u30b8) \u304c\u3042\u307e\u308a\u306b\u53e4\u3044 (4.5.2) \u306e\u3067\u3001\u30bd\u30fc\u30b9\u304b\u3089 5.x \u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3059\u308b\u3053\u3068\u306b\u3059\u308b\u3002<\/p>\n

1. \u6a19\u6e96\u30d1\u30c3\u30b1\u30fc\u30b8\u306estrongswan\u3092\u30a2\u30f3\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb<\/h3>\n

\u30a2\u30f3\u30a4\u30f3\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3059\u308b\u524d\u306b\u3001\u8d77\u52d5\u30b9\u30af\u30ea\u30d7\u30c8\u3092\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3057\u3066\u304a\u304f\u3002
\n
\n$ sudo cp \/etc\/init.d\/ipsec \/tmp<\/code><\/p>\n

\u305d\u306e\u4e0a\u3067\u3001\u6a19\u6e96\u306estrongswan\u3092\u30a2\u30f3\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3059\u308b\u3002
\n
\n$ sudo apt-get purge libstrongswan strongswan \\
\nstrongswan-ikev1 strongswan-ikev2 strongswan-starter<\/code><\/p>\n

2. \u30d3\u30eb\u30c9\u306b\u5fc5\u8981\u306a\u30d1\u30c3\u30b1\u30fc\u30b8\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb<\/h3>\n

$ sudo apt-get install build-essential<\/code><\/p>\n

3. \u5fc5\u8981\u305d\u3046\u306a\u30e9\u30a4\u30d6\u30e9\u30ea\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb<\/h3>\n

$ sudo apt-get install libgmp-dev libldap2-dev \\
\nlibcurl4-openssl-dev libpam0g-dev libkrb5-dev \\
\nlibfcgi-dev libgcrypt11-dev libxml2-dev libsqlite3-dev \\
\nlibcap-dev libldns-dev libunbound-dev libsoup2.4-dev \\
\nlibtspi-dev libjson0-dev libmysqlclient-dev libpcsclite-dev<\/code><\/p>\n

4. \u30d3\u30eb\u30c9\u30fb\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb<\/h3>\n

wheezy-backports\u30d1\u30c3\u30b1\u30fc\u30b8<\/a>\u306erules\u30d5\u30a1\u30a4\u30eb\u3092\u53c2\u8003\u306b\u3057\u3066configure\u30aa\u30d7\u30b7\u30e7\u30f3\u3092\u6c7a\u5b9a\u3059\u308b\u3002\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u5148\u304c\/usr\/local\u3067\u306f\u306a\u304f\u306a\u308b\u3051\u3069\u3001\u307e\u3042\u3044\u3044\u3067\u3057\u3087\u3046\u2026
\n$ wget https:\/\/download.strongswan.org\/strongswan-5.2.2.tar.bz2
\n$ tar xjf strongswan-5.2.2.tar.bz2
\n$ cd strongswan-5.2.2
\n$ .\/configure \\
\n--disable-static \\
\n--prefix=\/usr \\
\n--exec-prefix=\/usr \\
\n--sysconfdir=\/etc \\
\n--localstatedir=\/var \\
\n--libdir=\/usr\/lib \\
\n--libexecdir=\/usr\/lib \\
\n--with-tss=trousers \\
\n--enable-addrblock \\
\n--enable-agent \\
\n--enable-attr-sql \\
\n--enable-ccm \\
\n--enable-certexpire \\
\n--enable-cmd \\
\n--enable-coupling \\
\n--enable-ctr \\
\n--enable-curl \\
\n--enable-dhcp \\
\n--enable-dnscert \\
\n--enable-duplicheck \\
\n--enable-eap-aka \\
\n--enable-eap-aka-3gpp2 \\
\n--enable-eap-dynamic \\
\n--enable-eap-gtc \\
\n--enable-eap-identity \\
\n--enable-eap-md5 \\
\n--enable-eap-mschapv2 \\
\n--enable-eap-peap \\
\n--enable-eap-radius \\
\n--enable-eap-sim \\
\n--enable-eap-sim-file \\
\n--enable-eap-sim-pcsc \\
\n--enable-eap-simaka-pseudonym \\
\n--enable-eap-simaka-reauth \\
\n--enable-eap-simaka-sql \\
\n--enable-eap-tls \\
\n--enable-eap-tnc \\
\n--enable-eap-ttls \\
\n--enable-error-notify \\
\n--enable-farp \\
\n--enable-gcm \\
\n--enable-gcrypt \\
\n--enable-imc-attestation \\
\n--enable-imc-os \\
\n--enable-imc-scanner \\
\n--enable-imc-swid \\
\n--enable-imc-test \\
\n--enable-imv-attestation \\
\n--enable-imv-os \\
\n--enable-imv-scanner \\
\n--enable-imv-swid \\
\n--enable-imv-test \\
\n--enable-integrity-test \\
\n--enable-ipseckey \\
\n--enable-ldap \\
\n--enable-led \\
\n--enable-load-tester \\
\n--enable-lookip \\
\n--enable-md4 \\
\n--enable-mysql \\
\n--enable-ntru \\
\n--enable-openssl \\
\n--enable-pkcs11 \\
\n--enable-radattr \\
\n--enable-soup \\
\n--enable-sql \\
\n--enable-sqlite \\
\n--enable-systime-fix \\
\n--enable-test-vectors \\
\n--enable-tnccs-11 \\
\n--enable-tnccs-20 \\
\n--enable-tnccs-dynamic \\
\n--enable-tnc-ifmap \\
\n--enable-tnc-imc \\
\n--enable-tnc-imv \\
\n--enable-tnc-pdp \\
\n--enable-unbound \\
\n--enable-unity \\
\n--enable-whitelist \\
\n--enable-xauth-eap \\
\n--enable-xauth-generic \\
\n--enable-xauth-noauth \\
\n--enable-xauth-pam \\
\n--disable-blowfish \\
\n--disable-des \\
\n--with-capabilities=libcap
\n$ make
\n$ sudo make install<\/code><\/p>\n

\u3055\u3059\u304c\u306bCPU\u306e\u80fd\u529b\u304c\u4f4e\u3044\u306e\u3067\u3001\u30d3\u30eb\u30c9\u306b\u306f\u6642\u9593\u304c\u304b\u304b\u308b\u3002<\/p>\n

\u6700\u521d\u306b\u30b3\u30d4\u30fc\u3057\u3066\u304a\u3044\u305f\u8d77\u52d5\u30b9\u30af\u30ea\u30d7\u30c8\u3092\u623b\u3059\u3002
\n$ sudo mv \/tmp\/ipsec \/etc\/init.d\/
\n$ sudo update-rc.d ipsec defaults<\/code><\/p>\n","protected":false},"excerpt":{"rendered":"

Raspberry Pi model B+ \u3092\u8cfc\u5165\u3057\u3066 VPN \u7bb1\u306b\u3057\u3088\u3046\u3068\u3057\u305f\u304c\u3001Raspbian OS\u6a19\u6e96\u306estrongswan \u30d1\u30c3\u30b1\u30fc\u30b8 (=debian wheezy\u306e\u30d1\u30c3\u30b1\u30fc\u30b8) \u304c\u3042\u307e\u308a\u306b\u53e4\u3044 (4.5.2 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[22,13,23,15],"tags":[],"_links":{"self":[{"href":"https:\/\/fsck.jp\/index.php?rest_route=\/wp\/v2\/posts\/272"}],"collection":[{"href":"https:\/\/fsck.jp\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fsck.jp\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fsck.jp\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fsck.jp\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=272"}],"version-history":[{"count":0,"href":"https:\/\/fsck.jp\/index.php?rest_route=\/wp\/v2\/posts\/272\/revisions"}],"wp:attachment":[{"href":"https:\/\/fsck.jp\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=272"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fsck.jp\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=272"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fsck.jp\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=272"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}