[Pkg-swan-devel] Bug#836862: libreswan: /etc/ipsec.conf is already shipped by strongswan-starter

[Yves-Alexis Perez]

On Fri, 2017-02-03 at 12:34 -0500, Daniel Kahn Gillmor wrote:
> 
> I'm suprised to see that strongswan-charon is the package providing
> ike-server, if stronswan-starter is the package that contains the system
> integration.

src:strongswan actually provides multiple IKE daemon (charon) in different
binary packages:

- strongswan-charon (the historical one, with configuration from
/etc/ipsec.conf)
- strongswan-nm (integrated with network-manager)
- charon-cmd (standalone/commandline one)
- charon-systemd (configured through systemd)

All of them have a daemon binding to port 500/4500 and configure IPsec SA in
the kernel, so all of them could Provide: ike-server in my opinion.

ipsec-starter is only the tools used to start/stop strongswan-charon.

Regards.
-- 
Yves-Alexis
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: This is a digitally signed message part
URL: <http://lists.alioth.debian.org/pipermail/pkg-swan-devel/attachments/20170205/a0066e50/attachment.sig>