Page MenuHomeVyOS Platform
Create Task
Maniphest T3598

DMVPN/IPSec does not work with upstream Strongswan 5.9
Closed, ResolvedPublicBUG
Actions

Description

With Strongswan updated to 5.9, DMVPN support is broken due to missing patches. I think either a revert to patched 5.7 is needed, or updating the patches to support the 5.9 code.

There is an ongoing effort to get dmvpn natively supported in Strongswan: https://github.com/strongswan/strongswan/pull/345

Details

Difficulty level
Unknown (require assessment)
Version
-
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Perfectly compatible
Issue type
Bug (incorrect behavior)

Event Timeline

sarthurdev created this task.Jun 3 2021, 2:32 PM
pasik subscribed.Jun 3 2021, 3:23 PM
c-po moved this task from Open to In Progress on the VyOS 1.4 Sagitta board.Jun 13 2021, 9:27 AM
CiscoNCS subscribed.Aug 1 2021, 6:10 AM
mborodin subscribed.May 16 2023, 11:24 AM

I've managed to adapt Alpine Linux patches to build Debian 11 StrongSwan 5.9.1 package, feel free to use it

0010-charon-add-optional-source-and-remote-overrides-for-.patch22 KBDownload

Viacheslav changed the task status from Open to Needs testing.Jan 20 2024, 1:38 AM
Viacheslav triaged this task as Normal priority.
dmbaturin added a project: Restricted Project.Feb 15 2024, 12:47 PM
dmbaturin set Issue type to Unspecified (please specify).
dmbaturin edited projects, added VyOS 1.4 Sagitta (1.4.0-epa1); removed VyOS 1.4 Sagitta.Feb 15 2024, 3:05 PM
syncer edited projects, added VyOS 1.4 Sagitta (1.4.0-GA); removed VyOS 1.4 Sagitta (1.4.0-epa1).May 15 2024, 9:30 AM
dmbaturin added a project: Restricted Project.Sep 16 2024, 4:16 PM
dmbaturin closed this task as Resolved.Mon, Oct 14, 9:32 AM
dmbaturin removed projects: Restricted Project, Restricted Project.
dmbaturin changed Is it a breaking change? from Unspecified (possibly destroys the router) to Perfectly compatible.
dmbaturin changed Issue type from Unspecified (please specify) to Bug (incorrect behavior).