Interestingly, when I tried to compile the source code of wheezy-backports branch, the strongswan daemon is NOT reading my settings in /etc/strongswan.conf, even when I specified --prefix=/usr and --sysconfdir=/etc in configure...

On 2/21/2014 2:12 PM, C.J. Adams-Collier KF7BMP wrote:
I've confirmed that the package builds with these two changes:

cjac@foxtrot:/usr/src/deb$ diff -u 
strongswan-5.1.1/debian/libstrongswan.install 
strongswan-5.1.1-cjac/debian/libstrongswan.install
--- strongswan-5.1.1/debian/libstrongswan.install       2014-02-04 
05:04:50.000000000 -0800
+++ strongswan-5.1.1-cjac/debian/libstrongswan.install  2014-02-21 
10:56:41.680283978 -0800
@@ -6,6 +6,7 @@
  usr/lib/ipsec/libradius.so*
  usr/lib/ipsec/libtls.so*
  usr/lib/ipsec/libpttls.so*
+usr/lib/ipsec/libipsec.so*
  usr/lib/ipsec/plugins/libstrongswan-gmp.so
  usr/lib/ipsec/plugins/libstrongswan-openssl.so
  usr/lib/ipsec/plugins/libstrongswan-x509.so
cjac@foxtrot:/usr/src/deb$ diff -u strongswan-5.1.1/debian/rules 
strongswan-5.1.1-cjac/debian/rules
--- strongswan-5.1.1/debian/rules       2014-02-04 05:04:50.000000000 -0800
+++ strongswan-5.1.1-cjac/debian/rules  2014-02-21 10:46:11.152366245 -0800
@@ -21,6 +21,7 @@
                --enable-lookip \
                --enable-error-notify \
                --enable-unity \
+    --enable-kernel-libipsec \
                --disable-blowfish --disable-des # BSD-Young license
        #--with-user=strongswan --with-group=nogroup
        #       --enable-kernel-pfkey --enable-kernel-klips \


On Thu, 2014-02-20 at 15:41 -0500, Tony Zhou wrote:
Package: strongswan
Version: 5.1.1-1~bpo70+1
Severity: wishlist

Dear Maintainer,

Would you kindly please include the build option
'--enable-kernel-libipsec' for future strongswan packages? The
description to this
parameter could be found here on Strongswan wiki:
http://wiki.strongswan.org/projects/strongswan/wiki/Kernel-libipsec,
which says
this plugin provides a userland IPSec implementation using TUN devices.
It is particularly useful for virtualized servers like OpenVZ
which does not have kernel modules loaded for IPSec.

Thanks,
TZ

-- System Information:
Debian Release: 7.4
    APT prefers stable-updates
    APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 3.2.0-042stab084.3 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored:
LC_ALL set to en_US.UTF-8)
Shell: /bin/sh linked to /bin/dash

_______________________________________________
Pkg-swan-devel mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-swan-devel


--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to