Dear Maintainer,

On a fresh installation of Debian testing/sid with strongswan 5.5.3-2,
all connections which are not configured to use IKEv1 fail with the
following error message:

initiating IKE_SA example[6] to x.x.x.x
configured DH group CURVE_25519 not supported
tried to checkin and delete nonexisting IKE_SA
establishing connection 'example' failed

This can be reproduced with the following connection in ipsec.conf:

conn example
	right=127.0.0.2

(No server at the right IP is required as the error happens before a
connection is attempted.)

The error can be avoided by installing libstrongswan-extra-plugins.
Presumably either strongswan should recommend
libstrongswan-extra-plugins or avoid requiring CURVE_25519 by default.

Thanks,
Kevin

I believe this is fixed since 5.6.1. Quoting from the upstream changelog
https://wiki.strongswan.org/projects/strongswan/wiki/Changelog56

"No hard-coded default proposals are passed from starter to the stroke
plugin anymore (the IKE proposal used curve25519 since 5.5.2, which is
an optional plugin)."

Version: 5.6.1-1

Hi Carl-Daniel, thanks for that, I somehow missed it (for a long time). I'm
marking as closed with that version then.

Regards,