Strongswan merge for Xenial

Simon Deziel simon at sdeziel.info
Mon Jan 25 18:55:15 UTC 2016


On 2016-01-25 09:49 AM, Ryan Harper wrote:
> On Sun, Jan 24, 2016 at 9:38 PM, Simon Deziel <simon at sdeziel.info
> <mailto:simon at sdeziel.info>> wrote:
>     > The remaining work items are:
>     >   - Adding in transitional virtual Packages for upgrade from 5.1.2-0ubuntu8
>     >   - Testing package upgrade
> 
>     I upgraded one system so far and it went well.
> 
> 
> OK.  Do you have any of the plugins installed?

Only strongswan-plugin-openssl which was replaced by
libstrongswan-standard-plugins as it should.

I have another system using strongswan-plugin-xauth-generic that I could
upgrade if you like.

>     >     - Other Removals from Debian
>     >         *logcheck* files (not relevant to StrongSwan per jpds)
> 
>     The logcheck files are really dated (see debian #787156) and I've
>     accumulated a few rules on my own. Even at the default log level charon
>     is very verbose so I think it makes sense to have the package shipping
>     logcheck rules. I'd be happy to provided those.
> 
> 
> Yes please.

Will do.

>     >     - dropped Debian's enabling IKEv1 and v2 by default?

As discussed on IRC, this was related to adding charonstart=yes to
/etc/ipsec.conf. Since this has been the default since version 5.0.0,
it's OK to drop it IMHO.


Regards,
Simon

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 949 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/ubuntu-devel/attachments/20160125/61a3fc7e/attachment-0001.pgp>


More information about the ubuntu-devel mailing list