Strongswan merge for Xenial

Simon Deziel simon at
Mon Jan 25 18:55:15 UTC 2016

On 2016-01-25 09:49 AM, Ryan Harper wrote:
> On Sun, Jan 24, 2016 at 9:38 PM, Simon Deziel <simon at
> <mailto:simon at>> wrote:
>     > The remaining work items are:
>     >   - Adding in transitional virtual Packages for upgrade from 5.1.2-0ubuntu8
>     >   - Testing package upgrade
>     I upgraded one system so far and it went well.
> OK.  Do you have any of the plugins installed?

Only strongswan-plugin-openssl which was replaced by
libstrongswan-standard-plugins as it should.

I have another system using strongswan-plugin-xauth-generic that I could
upgrade if you like.

>     >     - Other Removals from Debian
>     >         *logcheck* files (not relevant to StrongSwan per jpds)
>     The logcheck files are really dated (see debian #787156) and I've
>     accumulated a few rules on my own. Even at the default log level charon
>     is very verbose so I think it makes sense to have the package shipping
>     logcheck rules. I'd be happy to provided those.
> Yes please.

Will do.

>     >     - dropped Debian's enabling IKEv1 and v2 by default?

As discussed on IRC, this was related to adding charonstart=yes to
/etc/ipsec.conf. Since this has been the default since version 5.0.0,
it's OK to drop it IMHO.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 949 bytes
Desc: OpenPGP digital signature
URL: <>

More information about the ubuntu-devel mailing list