Hi,

When starting pluto, it shows:

failed to load pkcs11 module '/usr/lib/opensc-pkcs11.so'

This is because opensc package is not pulled when installing
strongswan-ikev1.

opensc-pkcs11.so is dynamically loaded at runtime this is why the
dependency is not added automatically.

Please Depends or Recommends against opensc package.

Cheers

Laurent Bigonville


PS: I guess we should check if other part of the software (plugins)
doesn't require it too, but doesn't seem the case at first sight.

Hello,

If using PKCS#11 it should not Depend on OpenSC, only Recommend as it
allows to add smart card support (but an alternative PKCS#11 could be
used instead, maybe a softhsm or a proprietary one)

I further suggest to remove any references to opensc-pkcs11.so in
configuration files that might get installed/enabled by default, as
enabling OpenSC support should be a conscious decision by the user to
enable a specific hardware key device in a configuration.

Maybe using p11-kit should be considered, which proxy module might make
more sense as a by default enabled module.