StrongSwan is moving from charon to swanctl for quite some time now.
Newer distributions like Ubuntu 26.04 install strongswan-swanctl from
the default strongswan meta-package instead of strongswan-starter that
translates standard ipsec.conf into charon commands.  Our IPsec
implementation doesn't support working with the swanctl, so let's add
a direct dependency for the starter instead.  It's still available,
but just not a default option anymore.

'strongswan-starter' package exists in Ubuntu starting with 16.04.
StrongSwan in general is available since 14.04, so that is the only
version where we'll not have a required dependency.  At the same time
our debian packaging will not build properly on 14.04 (and likely
even much newer versions as well) anyway, so we're not loosing any
compatibility with this change.  All supported versions of Debian
ship strongswan-starter.

In the future we'll need to either add support for swanctl or drop
support for strongswan for which we do not have any test coverage
anyway.

Signed-off-by: Ilya Maximets <[email protected]>
---
 debian/control.in | 1 +
 1 file changed, 1 insertion(+)

diff --git a/debian/control.in b/debian/control.in
index 19350c7bc..ae3f39e41 100644
--- a/debian/control.in
+++ b/debian/control.in
@@ -96,6 +96,7 @@ Depends:
  openvswitch-switch (= ${binary:Version}),
  python3-openvswitch (= ${source:Version}),
  strongswan,
+ strongswan-starter,
  ${misc:Depends},
 Suggests: python3:any
 Breaks:
-- 
2.55.0

_______________________________________________
dev mailing list
[email protected]
https://mail.openvswitch.org/mailman/listinfo/ovs-dev

Reply via email to