Dear Maintainer,


I installed libcharon-extra-plugins, restarted strongswan.
  $ sudo systemctl restart strongswan
  $ sudo swanctl --reload-settings
  $ sudo swanctl --load-all

But eap-mschapv2 was not loaded.
  $ sudo swanctl --stats
  uptime: 10 seconds, since Oct 08 17:25:09 2019
  worker threads: 16 total, 11 idle, working: 4/0/1/0
  job queues: 0/0/0/0
  jobs scheduled: 0
  IKE_SAs: 0 total, 0 half-open
  mallinfo: sbrk 1216512, mmap 0, used 207408, free 1009104
  loaded plugins: charon aes rc2 sha2 sha1 md5 random nonce x509 revocation constraints pubkey pkcs1 pkcs7 pkcs8 pkcs12 pgp dnskey sshkey pem fips-prf gmp xcbc hmac attr kernel-netlink resolve socket-default farp stroke vici updown eap-identity eap-aka eap-md5 eap-gtc eap-radius eap-tls eap-ttls eap-tnc xauth-generic xauth-eap xauth-pam tnc-tnccs dhcp lookip error-notify certexpire led addrblock unity

All the other plugins seem to be listed.

Hi Richard,

You either need the md4 plugin, or one of the openssl or gcrypt plugins
(which also provide the MD4 algorithm) to use EAP-MSCHAPv2 (there should
be error in the log during startup regarding the missing dependency).

The openssl plugin is shipped with libstrongswan-standard-plugins, the
gcrypt plugin with libstrongswan-extra-plugins, the md4 plugin is not
built/packaged by Debian.  If you already have the plugins installed,
make sure they are loaded [1].

Regards,
Tobias

[1] https://wiki.strongswan.org/projects/strongswan/wiki/PluginLoad

Hi Richard,

You either need the md4 plugin, or one of the openssl or gcrypt plugins
(which also provide the MD4 algorithm) to use EAP-MSCHAPv2 (there should
be error in the log during startup regarding the missing dependency).

The openssl plugin is shipped with libstrongswan-standard-plugins, the
gcrypt plugin with libstrongswan-extra-plugins, the md4 plugin is not
built/packaged by Debian.  If you already have the plugins installed,
make sure they are loaded [1].

Regards,
Tobias

[1] https://wiki.strongswan.org/projects/strongswan/wiki/PluginLoad