On 29 Jan 2026, at 15:09, Ilya Maximets wrote:
> Libreswan 5.3+ emits a warning every time ipsec add/start is called,
> because we have auto=route in the ipsec.conf, but when we run simple
> ipsec add <conn>, it is not taken into account. However, this is an
> expected behavior and the warning itself is a bit misleading,
> especially because it is also printed out on stderr for the
> ipsec start <conn>. Earlier versions of Libreswan had this message
> as well, but it was under the verbose logging, so it wasn't shown to
> users who didn't opt into it, but now it is elevated to the warning
> level.
>
> Ignore the warning to avoid polluting the logs:
>
> 2026-01-12T12:26:09Z | 294 | ovs-monitor-ipsec | WARN | stderr:
> b'ipsec addconn: /etc/ipsec.conf:7: warning:
> conn ovn-96a9c8-0-in-1: overriding auto=route with auto=add\n'
>
> Signed-off-by: Ilya Maximets <[email protected]>
Change looks good to me.
Acked-by: Eelco Chaudron <[email protected]>
_______________________________________________
dev mailing list
[email protected]
https://mail.openvswitch.org/mailman/listinfo/ovs-dev
