Your message dated Mon, 17 Mar 2025 12:50:04 +0000
with message-id <[email protected]>
and subject line Bug#1098710: fixed in network-manager-l2tp 1.20.20-2
has caused the Debian Bug report #1098710,
regarding IPsec doesn't work from new strongswan 6.0.0-1 (worked with 5.9.13-2)
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1098710: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1098710
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: network-manager-l2tp
Version: 1.20.20-1+b1
Severity: important
When using network-manager-l2tp in combination with strongswan,
since strongswan 6.0.0-1, network-manager-l2tp cannot locate ipsec binary
(/usr/sbin/ipsec) anymore by its current dependencies.
Note the following changes and issues:
Since strongswan 6.0.0-1 [1], "strongswan" metapackage now depends on
"strongswan-swanctl" instead of "strongswan-starter".
[1] (6.0.0-1 accepted in unstable)
https://tracker.debian.org/news/1619835/accepted-strongswan-600-1-source-into-unstable/
/usr/sbin/ipsec is in "strongswan-starter"[2], not in "strongswan-swanctl"[3].
[2] (filelist of "strongswan-starter")
https://packages.debian.org/sid/amd64/strongswan-starter/filelist
[3] (filelist of "strongswan-swanctl")
https://packages.debian.org/sid/amd64/strongswan-swanctl/filelist
network-manager-l2tp attempts to locate /usr/sbin/ipsec [4,5], while depending
on "strongswan" metapackage[6], not depending on "strongswan-starter"
explicitly.
[4] (src/nm-l2tp-service.c line 1982)
https://github.com/nm-l2tp/debian/blob/760b93ea56653e1cf801ce498a855e4e6601a125/src/nm-l2tp-service.c#L1982
[5] (shared/utils.c line 65 )
https://github.com/nm-l2tp/debian/blob/760b93ea56653e1cf801ce498a855e4e6601a125/shared/utils.c#L65
[6] (debian/control line 31 )
https://github.com/nm-l2tp/debian/blob/760b93ea56653e1cf801ce498a855e4e6601a125/debian/control#L31
Although I do not have full context of this package, I suggest fixing
the issue by trying one of these:
1. Explicitly depends on "strongswan-starter" instead of "strongswan"
2. Switch to use "strongswan-swanctl" (although I am not entirely know how
this package does)
Many thanks!
Log snippet of failing VPN connection:
2025-02-23T16:12:50.111027+09:00 debian-20250203 NetworkManager[1237]: <info>
[1740294770.1106]
vpn[0x561c8ecc5690,17d987d5-3bf5-4e44-9eb7-52acbb4ac4d6,"vpn.doubleo.co.kr"]:
starting l2tp
2025-02-23T16:12:50.111141+09:00 debian-20250203 NetworkManager[1237]: <info>
[1740294770.1108] audit: op="connection-activate"
uuid="17d987d5-3bf5-4e44-9eb7-52acbb4ac4d6" name="vpn.doubleo.co.kr" pid=2272
uid=1000 result="success"
2025-02-23T16:12:50.127393+09:00 debian-20250203 nm-l2tp-service[3586]:
nm-l2tp-service (version 1.20.20) starting...
2025-02-23T16:12:50.164248+09:00 debian-20250203 NetworkManager[1237]: <warn>
[1740294770.1640]
vpn[0x561c8ecc5690,17d987d5-3bf5-4e44-9eb7-52acbb4ac4d6,"vpn.doubleo.co.kr"]:
failed to connect: 'Could not find the ipsec binary. Is Libreswan or strongSwan
installed?'
-- System Information:
Debian Release: trixie/sid
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Kernel: Linux 6.12.15-amd64 (SMP w/22 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL
set to en_US.UTF-8), LANGUAGE=en_US.UTF-8
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages network-manager-l2tp depends on:
ii libc6 2.40-7
ii libglib2.0-0t64 2.83.4-1
ii libnm0 1.50.2-1+b1
ii libnspr4 2:4.36-1
ii libnss3 2:3.108-1
ii libssl3t64 3.4.1-1
ii network-manager 1.50.2-1+b1
ii ppp 2.5.2-1+1
ii strongswan 6.0.0-2
ii xl2tpd 1.3.18-1+b1
network-manager-l2tp recommends no packages.
network-manager-l2tp suggests no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: network-manager-l2tp
Source-Version: 1.20.20-2
Done: Douglas Kosovic <[email protected]>
We believe that the bug you reported is fixed in the latest version of
network-manager-l2tp, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Douglas Kosovic <[email protected]> (supplier of updated network-manager-l2tp
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 17 Feb 2025 22:03:00 +1000
Source: network-manager-l2tp
Architecture: source
Version: 1.20.20-2
Distribution: unstable
Urgency: medium
Maintainer: Douglas Kosovic <[email protected]>
Changed-By: Douglas Kosovic <[email protected]>
Closes: 1091384 1098710
Changes:
network-manager-l2tp (1.20.20-2) unstable; urgency=medium
.
* Bump Standards-Version to 4.7.2
* Update d/copyright to correct licenses (Closes: #1091384)
* Change dependency from strongswan to strongswan-charon.
As of strongswan 6.0.0-1, the strongswan meta package now depends
on strongswan-swanctl instead of strongswan-starter which has the
required /usr/sbin/ipsec script. (Closes: #1098710)
Checksums-Sha1:
93946cc212477f3d94ed5b1d65deab2897674d7b 2557
network-manager-l2tp_1.20.20-2.dsc
fa69bbd3c860d57938d32379ac9395c7a50a8103 501316
network-manager-l2tp_1.20.20.orig.tar.xz
2c01626ab0346f0bcab2956a02c1c85bb98e36bb 833
network-manager-l2tp_1.20.20.orig.tar.xz.asc
78735dd3a1aba02eb8c5247c6e1a100cc776c99e 10400
network-manager-l2tp_1.20.20-2.debian.tar.xz
3e57019b88731f69388e89097771338ced88e9e0 16519
network-manager-l2tp_1.20.20-2_source.buildinfo
Checksums-Sha256:
f0bcbe6641b5830b0da3292d2d75ea2addcb5fff7e162513bc215e5f30c2d1f0 2557
network-manager-l2tp_1.20.20-2.dsc
0859a35148fb0e1a1b6eef7beafd7c7211e87748af67879f1ecc40a4d01c008c 501316
network-manager-l2tp_1.20.20.orig.tar.xz
809a58f5f9cc4ca961f9d8634c97fe0ce7cf09d49b824910597ae2f000367dbf 833
network-manager-l2tp_1.20.20.orig.tar.xz.asc
3ed017e7d135e3ec19adfcef0720672bc3d95d71bcb44b8e370db0dc5115bd50 10400
network-manager-l2tp_1.20.20-2.debian.tar.xz
70d85c2d90940603c8880a4b17d6998ef6478aad035d55073d985b9594197792 16519
network-manager-l2tp_1.20.20-2_source.buildinfo
Files:
8b9b47c190ee006485fdf9dd71b79a3d 2557 net optional
network-manager-l2tp_1.20.20-2.dsc
86ff1880376d0d8ecd10088cc4f88032 501316 net optional
network-manager-l2tp_1.20.20.orig.tar.xz
2335298b01aa9f670d30e61d197fe003 833 net optional
network-manager-l2tp_1.20.20.orig.tar.xz.asc
42209991ec68f3b2ba3f52f665043f8f 10400 net optional
network-manager-l2tp_1.20.20-2.debian.tar.xz
7580a33269399682a0d9af7befb0688a 16519 net optional
network-manager-l2tp_1.20.20-2_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEK0+e3K4A3uTQ16bliJU+bwEc3JYFAmfYEokACgkQiJU+bwEc
3Jbv4RAA1RMuU6S79zIPuLZTGDxbG+X8r04ZeRLg9KlqCoztLUU0yPUKimJNxuRh
I+VhZ8JgyZwU5JxQCmeKqYIFnG5gF4dLGENiVciEqhHjulNznxCXAugHRTMW2kUQ
6DuFrjtOajnSFSmF6pTRxtEw55J8zqrpxB7tVQscaqu/dyHsc0bBCnhXaAFwyZQB
fgnf4b/LaODbDH0e5QIeXPh7dgJ6NwmeEVlWaS+LOrhBkiPkPzQaXC9b8Gqa0Z5s
jny+5Z8CZ3ZGRFqMME9XjlyjZ/puUzTrnMOBc42/6991Qg5AUHu8pHLWp1v79gWS
4ApAYKHJrxZoQfFui7fqOO1o0qCZK0ATpoJijPFe7jmbFq/QUaKfk5WZTcgegq/4
phEfu3WYIu3JLvE0h8kV+xSV388C/sud18pe1V8aJJobmnPoj60jM/kq3jHMXktl
bit18AIO5JDcfrrizttGB183W9jYp024VuLMxrjqxFzi0xtKk1/AaDNZNrBBpYmQ
NjzqNnKHJp6QmJ+uiecOAPfvoaX6c0+pwe8u8FpnSRRbHFtexxDC5+vp2o3ODJht
UM+pjFyZkkwGGVC29mBdCEPCdqtlSMWQcZrJYSRXU33uXTUo5P6M+Lc0HGNVG2yK
qzWWN58kK50/inCiqEL33VeaY5qpIjRHmv+IGno3xo2nJEHu0gQ=
=gppa
-----END PGP SIGNATURE-----
pgp2bEzQZ6vlm.pgp
Description: PGP signature
--- End Message ---
