Sheng Yang created CLOUDSTACK-7087:
--------------------------------------

             Summary: [VR] [VPN] Downgrade openswan to previous for VPN services
                 Key: CLOUDSTACK-7087
                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-7087
             Project: CloudStack
          Issue Type: Bug
      Security Level: Public (Anyone can view this level - this is the default.)
          Components: Virtual Router
    Affects Versions: 4.2.0, 4.3.0
            Reporter: Sheng Yang
            Assignee: Harikrishna Patnala
             Fix For: 4.2.1, 4.3.1


Latest OpenSwan fail to work with OSX/IOS after latest Debian security 
update(Mar 2014, https://www.debian.org/security/2014/dsa-2893 ).

And why Debian didn’t fix it officially, is because Debian decided to drop the 
support for OpenSwan(since nobody is maintaining it and it hasn’t been updated 
for 2 years before this security fix). We would need to move to other VPN 
software in the future.

Here is the Debian bugzilla for the issue. 
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=744717

So far, downgrade openswan is only an intermediate solution. We need to move to 
other VPN software(e.g. StrongSwan) which is still maintained by Debain in the 
near future.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Reply via email to