Use DNSSEC resolver (requires net-dns/unbound) Enable the IKEv1 protocol cpe:/a:libreswan:libreswan srcux