Your message dated Sat, 8 Mar 2014 19:37:47 +0100
with message-id <[email protected]>
and subject line Re: Bug#736754: plugin 'rdrand' does not provide features,
deprecated
has caused the Debian Bug report #736754,
regarding plugin 'rdrand' does not provide features, deprecated
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
736754: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=736754
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: strongswan-starter
Version: 5.1.0-3~bpo70+1
Severity: normal
Every time when I invoke `ipsec pki' utility or run other strongswan
commands, the same message is printed to stderr or logged to syslog:
no RDRAND support on GenuineIntel CPU, disabled
plugin 'rdrand' does not provide features, deprecated
This becomes really annoying.
So I tried to disable rdrand plugin, but it isn't really simple.
First, it looks like the plugin should be disabled in many places.
I found how to disable it for charon, but it is still loaded by
`ipsec pki'.
And second, once I specify ...load=(list-of-plugins) in strongswan.conf,
additional message starts to appear, -- a huge warning telling me that
I should not disable plugins, referring to
http://wiki.strongswan.org/projects/strongswan/wiki/PluginList
Please either stop providing the rdrand plugin (especially since it
is deprecated anyway, according to the message strongswan emits),
or make it less noizy when it doesn't work, or let it to be disabled
in the config file without hitting the traps mentioned in the
PluginList wiki page.
Please do not lower the bug severity, -- this message is _really_
very annoying, due to its high level of annoity it is not a wishlist
or a minor issue anymore.
Thanks,
/mjt
-- System Information:
Debian Release: 7.3
APT prefers stable
APT policy: (990, 'stable'), (500, 'oldstable'), (199, 'testing'), (50,
'unstable'), (40, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
powerpc
Kernel: Linux 3.10-amd64 (SMP w/2 CPU cores)
Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages strongswan-starter depends on:
ii adduser 3.113+nmu3
ii debconf [debconf-2.0] 1.5.49
ii libc6 2.13-38
ii libstrongswan 5.1.0-3~bpo70+1
ii strongswan-ike 5.1.0-3~bpo70+1
strongswan-starter recommends no packages.
strongswan-starter suggests no packages.
-- Configuration Files:
/etc/ipsec.secrets [Errno 13] Permission denied: u'/etc/ipsec.secrets'
-- debconf information excluded
--- End Message ---
--- Begin Message ---
Version: 5.1.1-2+splitplugins
On Sun, Jan 26, 2014 at 06:45:51PM +0400, Michael Tokarev wrote:
> Package: strongswan-starter
> Version: 5.1.0-3~bpo70+1
> Severity: normal
>
> Every time when I invoke `ipsec pki' utility or run other strongswan
> commands, the same message is printed to stderr or logged to syslog:
>
> no RDRAND support on GenuineIntel CPU, disabled
> plugin 'rdrand' does not provide features, deprecated
>
> This becomes really annoying.
>
> So I tried to disable rdrand plugin, but it isn't really simple.
>
> First, it looks like the plugin should be disabled in many places.
> I found how to disable it for charon, but it is still loaded by
> `ipsec pki'.
>
> And second, once I specify ...load=(list-of-plugins) in strongswan.conf,
> additional message starts to appear, -- a huge warning telling me that
> I should not disable plugins, referring to
>
> http://wiki.strongswan.org/projects/strongswan/wiki/PluginList
>
> Please either stop providing the rdrand plugin (especially since it
> is deprecated anyway, according to the message strongswan emits),
> or make it less noizy when it doesn't work, or let it to be disabled
> in the config file without hitting the traps mentioned in the
> PluginList wiki page.
>
> Please do not lower the bug severity, -- this message is _really_
> very annoying, due to its high level of annoity it is not a wishlist
> or a minor issue anymore.
This is actually fixed with the 5.1.1-2+splitplugins version (and the
5.1.1-3 uploaded to unstable), where the plugins are split to separate
package, so you can only install the rdrand plugin if you have rdrand
hardware.
Regards,
--
Yves-Alexis Perez
signature.asc
Description: Digital signature
--- End Message ---
