| What | Removed | Added |
|---|---|---|
| CC | bojan+suse@bnikolic.co.uk |
I came across this bug using MircoOS. The issue is that strongswan has a configure option --with-nm-ca-dir (see documentation https://docs.strongswan.org/docs/5.9/features/networkManager.html) which, if not otherwise set, defaults to /usr/share-ca-certificates which seems not to be the right place for SUSE. Should be fixable by adding --with-nm-ca-dir=/var/lib/ca-certificates/pem to the configure section of strongswan.spec , e.g. somewhere around line 306 of https://build.opensuse.org/projects/openSUSE:Leap:15.5:Update/packages/strongswan/files/strongswan.spec?expand=1. I hope that helps, I don't have a test server or anything to try this but analysis of source code suggests this is the root cause.