Page MenuHomeVyOS Platform

DMVPN/IPSec does not work with upstream Strongswan 5.9
Closed, ResolvedPublicBUG

Description

With Strongswan updated to 5.9, DMVPN support is broken due to missing patches. I think either a revert to patched 5.7 is needed, or updating the patches to support the 5.9 code.

There is an ongoing effort to get dmvpn natively supported in Strongswan: https://github.com/strongswan/strongswan/pull/345

Details

Version
-
Is it a breaking change?
Perfectly compatible
Issue type
Bug (incorrect behavior)

Event Timeline

I've managed to adapt Alpine Linux patches to build Debian 11 StrongSwan 5.9.1 package, feel free to use it

Viacheslav changed the task status from Open to Needs testing.Jan 20 2024, 1:38 AM
Viacheslav triaged this task as Normal priority.
dmbaturin set Issue type to Unspecified (please specify).
dmbaturin removed projects: Restricted Project, Restricted Project.
dmbaturin changed Is it a breaking change? from Unspecified (possibly destroys the router) to Perfectly compatible.
dmbaturin changed Issue type from Unspecified (please specify) to Bug (incorrect behavior).