Hi, I installed Libreswan 3.20 to OpenSUSE Leap 42.1(systemd v210). It has a following "ipsec.service" file: # cat /usr/lib/systemd/system/ipsec.service [Unit] Description=Internet Key Exchange (IKE) Protocol Daemon for IPsec Wants=network-online.target After=network-online.target Documentation=man:ipsec(8) man:pluto(8) man:ipsec.conf(5) [Service] Type=notify Restart=always # backwards compatible with plutorestartoncrash=no #RestartPreventExitStatus=137 143 SIGTERM SIGKILL # Set WatchdogSec to the amount of time (in seconds) that systemd will wait # before restarting an unresponsive pluto. # EVENT_SD_WATCHDOG updates the heartbeat every 15 seconds, recommended values # are 60, 90, 120. WatchdogSec=0 disables the action NotifyAccess=all WatchdogSec=200 # Check configuration file ExecStartPre=/usr/lib/ipsec/addconn --config /etc/ipsec.conf --checkconfig # Check for kernel modules ExecStartPre=/usr/lib/ipsec/_stackmanager start # Check for nss database status and migration ExecStartPre=/usr/sbin/ipsec --checknss # Check for nflog setup ExecStartPre=/usr/sbin/ipsec --checknflog # Start the actual IKE daemon ExecStart=/usr/lib/ipsec/pluto --leak-detective --config /etc/ipsec.conf --nofork ExecStop=/usr/lib/ipsec/whack --shutdown ExecStopPost=/sbin/ip xfrm policy flush ExecStopPost=/sbin/ip xfrm state flush ExecStopPost=/usr/sbin/ipsec --stopnflog ExecReload=/usr/lib/ipsec/whack --listen [Install] WantedBy=multi-user.target # There are no issues when I enable and start ipsec.service. However, when I stop("systemctl stop ipsec.service") the service, it hangs: May 17 16:41:54 host systemd[1]: Stopping Internet Key Exchange (IKE) Protocol Daemon for IPsec... May 17 16:41:54 host pluto[14064]: shutting down May 17 16:41:54 host pluto[14064]: "v6neighbor-hole-out": deleting non-instance connection May 17 16:41:54 host whack[14105]: 002 shutting down May 17 16:41:54 host pluto[14064]: "v6neighbor-hole-in": deleting non-instance connection May 17 16:41:54 host pluto[14064]: shutting down interface eth0/eth0 2001:db8:1400:1:ec4b:109b:437:bd64:500 May 17 16:41:54 host pluto[14064]: shutting down interface lo/lo ::1:500 May 17 16:41:54 host pluto[14064]: shutting down interface eth0/eth0 2001:db8:1400:1:216:3eff:fe76:5b3c:500 May 17 16:41:54 host pluto[14064]: shutting down interface eth0/eth0 2001:db8:1400:1:555b:2439:e729:2ce7:500 May 17 16:41:54 host pluto[14064]: shutting down interface eth0/eth0 2001:db8:1400:1:d42e:5ae2:a7c2:be3:500 May 17 16:41:54 host pluto[14064]: shutting down interface eth0/eth0 2001:db8:1400:1:f84b:815b:e99d:9419:500 May 17 16:41:54 host pluto[14064]: shutting down interface eth0/eth0 2001:db8:1400:1:fdc0:2ad0:c5b9:7a9c:500 May 17 16:41:54 host pluto[14064]: shutting down interface eth0/eth0 2001:db8:1400:1:ec05:426a:e0f6:5a92:500 May 17 16:41:54 host pluto[14064]: shutting down interface eth0/eth0 2001:db8:1400:1:a81f:c62e:663c:a1ee:500 May 17 16:41:54 host pluto[14064]: shutting down interface lo/lo 127.0.0.1:4500 May 17 16:41:54 host pluto[14064]: shutting down interface lo/lo 127.0.0.1:500 May 17 16:41:54 host pluto[14064]: shutting down interface eth0/eth0 10.10.10.246:4500 May 17 16:41:54 host pluto[14064]: shutting down interface eth0/eth0 10.10.10.246:500 May 17 16:43:24 host systemd[1]: ipsec.service stopping timed out. Terminating. May 17 16:44:54 host systemd[1]: ipsec.service stop-sigterm timed out. Killing. May 17 16:44:54 host systemd[1]: ipsec.service: main process exited, code=killed, status=9/KILL May 17 16:44:54 host systemd[1]: Stopped Internet Key Exchange (IKE) Protocol Daemon for IPsec. May 17 16:44:54 host systemd[1]: Unit ipsec.service entered failed state. As seen above, "systemctl stop ipsec.service" command hang from 16:41:54 to 16:43:24. When I run "systemctl stop ipsec.service" using "strace -f", then I see following messages until systemd kills the process: [pid 16306] recvmsg(3, {msg_name(0)=NULL, msg_iov(1)=[{"l\4\1\1S\0\0\0\f\0\0\0p\0\0\0\1\1o\0\31\0\0\0", 24}], msg_controllen=32, [{cmsg_len=28, cmsg_level=SOL_SOCKET, cmsg_type=SCM_CREDENTIALS, {pid=1, uid=0, gid=0}}], msg_flags=MSG_CMSG_CLOEXEC}, MSG_DONTWAIT|MSG_NOSIGNAL|MSG_CMSG_CLOEXEC) = 24 [pid 16306] recvmsg(3, {msg_name(0)=NULL, msg_iov(1)=[{"/org/freedesktop/systemd1\0\0\0\0\0\0\0"..., 187}], msg_controllen=32, [{cmsg_len=28, cmsg_level=SOL_SOCKET, cmsg_type=SCM_CREDENTIALS, {pid=1, uid=0, gid=0}}], msg_flags=MSG_CMSG_CLOEXEC}, MSG_DONTWAIT|MSG_NOSIGNAL|MSG_CMSG_CLOEXEC) = 187 What might cause such behavior? Can I provide any additional information which helps to troubleshoot this issue? thanks, Martin -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org