[Pkg-swan-devel] Bug#736754: plugin 'rdrand' does not provide features, deprecated

[Michael Tokarev]

Package: strongswan-starter
Version: 5.1.0-3~bpo70+1
Severity: normal

Every time when I invoke `ipsec pki' utility or run other strongswan
commands, the same message is printed to stderr or logged to syslog:

 no RDRAND support on GenuineIntel CPU, disabled
 plugin 'rdrand' does not provide features, deprecated

This becomes really annoying.

So I tried to disable rdrand plugin, but it isn't really simple.

First, it looks like the plugin should be disabled in many places.
I found how to disable it for charon, but it is still loaded by
`ipsec pki'.

And second, once I specify ...load=(list-of-plugins) in strongswan.conf,
additional message starts to appear, -- a huge warning telling me that
I should not disable plugins, referring to

 http://wiki.strongswan.org/projects/strongswan/wiki/PluginList

Please either stop providing the rdrand plugin (especially since it
is deprecated anyway, according to the message strongswan emits),
or make it less noizy when it doesn't work, or let it to be disabled
in the config file without hitting the traps mentioned in the
PluginList wiki page.

Please do not lower the bug severity, -- this message is _really_
very annoying, due to its high level of annoity it is not a wishlist
or a minor issue anymore.

Thanks,

/mjt

-- System Information:
Debian Release: 7.3
  APT prefers stable
  APT policy: (990, 'stable'), (500, 'oldstable'), (199, 'testing'), (50, 'unstable'), (40, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
powerpc

Kernel: Linux 3.10-amd64 (SMP w/2 CPU cores)
Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages strongswan-starter depends on:
ii  adduser                3.113+nmu3
ii  debconf [debconf-2.0]  1.5.49
ii  libc6                  2.13-38
ii  libstrongswan          5.1.0-3~bpo70+1
ii  strongswan-ike         5.1.0-3~bpo70+1

strongswan-starter recommends no packages.

strongswan-starter suggests no packages.

-- Configuration Files:
/etc/ipsec.secrets [Errno 13] Permission denied: u'/etc/ipsec.secrets'

-- debconf information excluded