[Pkg-swan-devel] Bug#736758: Bug#736758: strongswan is just too bloated

[Yves-Alexis Perez]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On Sun, Jan 26, 2014 at 11:12:18PM +0100, Yves-Alexis Perez wrote:
> On Sun, Jan 26, 2014 at 07:03:42PM +0400, Michael Tokarev wrote:
> > Source: strongswan
> > Version: 5.1.0-3~bpo70+1
> > Severity: normal
> > 
> > This is going to be not a trivial bugreport.
> > 
> > The subject says it: strongswan is just too bloated.
> > Default install does (or tries to do) so many things which aren't
> > necessary on most of setups, it is just insane.  For example, it
> > tries to iteract with dhcp, it opens raw sockets for ARP, it
> > explicitly loads 2 crypto libraries (openssl and gcrypt) using
> > plugins, and so on.
> 
> Actually, we're indeed considering splitting the strongswan package to
> have a small default install, fitting common setup, and a larger plugin
> package.

Also, it might help to report that directly upstream, since there's not
so much we can do here without upstream help.

Splitting the package is more or less like providing an hardcoded list
of plugins, so the complains will stay.

Regards,
- -- 
Yves-Alexis Perez
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBCgAGBQJS7k/BAAoJEG3bU/KmdcClHZwH/3xXJOZE11V9JGgqxz6iOMni
YwCBTA/RBCCGSlSmX0NDUP1n4CyycYVi/7jlUtFiHzMHdTf4LfMb47fYGmXXVh3s
r/o2Op0IORQkXVlw1BHn8/P6VU+45+9gZmM5oL6LlL2rLVgVhr8IabSsQiHsDHWl
J/9Ap/B1G7Sf/Ga5Sk4PB8xcsJxSiltdjIYhFEzoQLQ14aXnYU9sQkOG6LNfgTK+
HS8VKdcPnvE/HgkqIoLB4vLSooo0c8YMNFI8LvpqXeiwDMSLtCh+2BcjlbxqdKKP
o/BF1ARRP5kBUBLvOCElJ0vyTB1jIi1/rKy66kd5e3MFKUGIaM0hYW+KtBRBaLU=
=HZUB
-----END PGP SIGNATURE-----