Re: [Swan] Please review: docuemntation of openswan to libreswan migration

2015-12-10 Thread Tony Whyman
Supplementing my original point - I've gone through the notes I made when converting from Ubuntu/Openswan to Libreswan and, apart from the NSS issue, it was generally very straightforward, especially for a "standard" VPN type configuration. The only other issue of note comes from building

Re: [Swan] Please review: docuemntation of openswan to libreswan migration

2015-12-09 Thread Tony Whyman
Some very quick feedback. I migrated our systems earlier this year from Openswan on Ubuntu to Libreswan. Coming from this background the big issue was NSS. All the Ubuntu systems were set up with X.509 certificates and private keys in separate files and suddenly there was a need for know

Re: [Swan] Please review: docuemntation of openswan to libreswan migration

2015-12-09 Thread Tom Robinson
On 10/12/15 02:03, Tony Whyman wrote: > Thus my feedback is that the removal of the X.509 file support and the need > to understand how to use > NSS should be right up front together with the link to the NSS page. I also found this to be the most challenging thing when migrating in the last few