[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

strongswan still uses outdated ``ipsec(8)`` command by default



Hello.

Before sending the issue to maintainers I want to ask people who use strongswan.

StrongSWAN migrated from ``ipsec(8)`` to ``swanctl(8)`` and from ``strongswan-starter`` (ipsec-based) to ``strongswan`` (special version of charon that could be used with systemd).
https://wiki.strongswan.org/projects/strongswan/wiki/Charon-systemd

In Debian you have the legacy "strongswan-starter" package and modern "charon-systemd".

Metapackage "strongswan" depends on former and its ``README.Debian.gz`` still mention ``ipsec`` command

So after installing strongswan I had to manually disable "strongswan-starter" and install "charon-systemd" and enable "strongswan" service (which starts charon and loads data using swanctl)
It is covered briefly in NEWS file for "charon-systemd" (but not in a wiki unfortunately)

Do you use ipsec(8) or swanctl(8)?  Why not make swanctl/charon-systemd Debian default?

Ilya.



Reply to: