Re: [Swan] [Swan-announce] Libreswan 3.21 released

2017-08-11 Thread Nick Howitt
Hi Paul, It is all looking good now and I can see the same files in libreswan downloads as yum installs. Thanks, Nick On 10/08/2017 22:51, Paul Wouters wrote: On Thu, 10 Aug 2017, Nick Howitt wrote:

Re: [Swan] [Swan-announce] Libreswan 3.21 released

2017-08-11 Thread Tony Whyman
There seems to be a compatibility problem when compiling under Ubuntu 14.04 (trusty). I can compile this release under Ubuntu 16.04 (xenial), abeit only after adding new dependencies: libsystemd-dev and libldns-dev (could be useful to add checks for these dependencies to the configure script

Re: [Swan] [Swan-announce] Libreswan 3.21 released

2017-08-10 Thread Paul Wouters
On Thu, 10 Aug 2017, Nick Howitt wrote: Sorry, but I did not build the files. Libreswan came down automatically from the Libreswan repo last night with a nightly "yum update". Looking in https://download.libreswan.org/binaries/rhel/7/x86_64/ there are no unbound/unbound-devel packages. Presuma

Re: [Swan] [Swan-announce] Libreswan 3.21 released

2017-08-10 Thread Nick Howitt
Thanks. Look forward to it. At least my VPN is not mission critical - just inter-family. On 10/08/2017 21:56, Paul Wouters wrote: On Thu, 10 Aug 2017, Nick Howitt wrote: I tell a slight lie. I have libreswan-3.21-1.el7

Re: [Swan] [Swan-announce] Libreswan 3.21 released

2017-08-10 Thread Paul Wouters
On Thu, 10 Aug 2017, Nick Howitt wrote: I tell a slight lie. I have libreswan-3.21-1.el7.centos.x86_64. I did not realise you'd separated the repos, but the same comments apply. rpm -qR libreswan-3.21-1.el7.centos.x86_64 does not appear to have any version requirements for libunbound.so.2 or l

Re: [Swan] [Swan-announce] Libreswan 3.21 released

2017-08-10 Thread Nick Howitt
I tell a slight lie. I have libreswan-3.21-1.el7.centos.x86_64. I did not realise you'd separated the repos, but the same comments apply. rpm -qR libreswan-3.21-1.el7.centos.x86_64 does not appear to have any version requirements for libunbound.so.2 or libevent-2.0.so.5.

Re: [Swan] [Swan-announce] Libreswan 3.21 released

2017-08-10 Thread Nick Howitt
Sorry, but I did not build the files. Libreswan came down automatically from the Libreswan repo last night with a nightly "yum update". Looking in https://download.libreswan.org/binaries/rhel/7/x86_64/ there are no unbound/unbound-devel packages. Presumably also there is

Re: [Swan] [Swan-announce] Libreswan 3.21 released

2017-08-10 Thread Paul Wouters
On Thu, 10 Aug 2017, Nick Howitt wrote: Presumably then this would be a non-standard centos7/el7 version of unbound? I normally just use their pre-compiled rpm packages and have never compiled any myself. I currently have v1.4.20-28.el7. I thought in the past when we needed non-standard versio

Re: [Swan] [Swan-announce] Libreswan 3.21 released

2017-08-10 Thread Nick Howitt
Hi Paul, Presumably then this would be a non-standard centos7/el7 version of unbound? I normally just use their pre-compiled rpm packages and have never compiled any myself. I currently have v1.4.20-28.el7. I thought in the past when we needed non-standard versions o

Re: [Swan] [Swan-announce] Libreswan 3.21 released

2017-08-10 Thread Paul Wouters
Recompile unbound with libevent support. Sent from my iPhone > On Aug 10, 2017, at 15:46, Nick Howitt wrote: > > Hi Paul, > > Libreswan updated last night and now fails to start: > > Aug 10 20:36:49 server addconn: /usr/libexec/ipsec/addconn: symbol lookup > error: /usr/libexec/ipsec/addconn

Re: [Swan] [Swan-announce] Libreswan 3.21 released

2017-08-10 Thread Nick Howitt
Hi Paul, Libreswan updated last night and now fails to start: Aug 10 20:36:49 server addconn: /usr/libexec/ipsec/addconn: symbol lookup error: /usr/libexec/ipsec/addconn: undefined symbol: ub_ctx_create_event Aug 10 20:36:49 server systemd: ipsec.service: control process exited, code=exited s

[Swan] [Swan-announce] Libreswan 3.21 released

2017-08-09 Thread The Libreswan Project
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 The Libreswan Project has released libreswan-3.21 This is a bugfix and feature release. New Features: This release features Opportunistic IPsec using DNSSEC lookups of IPSECKEY records. It also adds support for the DNSSEC root key rollover that