Page MenuHomeVyOS Platform

incorrect strongswan package version in rolling
Closed, ResolvedPublicBUG

Description

vpn ipsec smoketests fail in latest rolling:

/usr/libexec/vyos/tests/smoke/cli/test_vpn_ipsec.py
DEBUG - test_dhcp_fail_handling (__main__.TestVPNIPsec.test_dhcp_fail_handling) ... ok
DEBUG - test_dmvpn (__main__.TestVPNIPsec.test_dmvpn) ... ok
DEBUG - test_flex_vpn_vips (__main__.TestVPNIPsec.test_flex_vpn_vips) ... ok
DEBUG - test_remote_access (__main__.TestVPNIPsec.test_remote_access) ... ok
DEBUG - test_remote_access_dhcp_fail_handling (__main__.TestVPNIPsec.test_remote_access_dhcp_fail_handling) ... ok
DEBUG - test_remote_access_eap_tls (__main__.TestVPNIPsec.test_remote_access_eap_tls) ... ok
DEBUG - test_remote_access_no_rekey (__main__.TestVPNIPsec.test_remote_access_no_rekey) ... ok
DEBUG - test_remote_access_pool_range (__main__.TestVPNIPsec.test_remote_access_pool_range) ... ok
DEBUG - test_remote_access_vti (__main__.TestVPNIPsec.test_remote_access_vti) ... ok
DEBUG - test_remote_access_x509 (__main__.TestVPNIPsec.test_remote_access_x509) ... ok
DEBUG - test_retransmission_default_settings (__main__.TestVPNIPsec.test_retransmission_default_settings) ... ok
DEBUG - test_retransmission_settings (__main__.TestVPNIPsec.test_retransmission_settings) ... ok
DEBUG - test_site_to_site (__main__.TestVPNIPsec.test_site_to_site) ... ok
DEBUG - test_site_to_site_gre_over_ipsec (__main__.TestVPNIPsec.test_site_to_site_gre_over_ipsec)
DEBUG - Test GRE over IPsec site‑to‑site configuration with transport mode ESP ... ok
DEBUG - test_site_to_site_ikev2_reauth (__main__.TestVPNIPsec.test_site_to_site_ikev2_reauth) ... ok
DEBUG - test_site_to_site_nist_800_77_cnsa_1_with_ppk (__main__.TestVPNIPsec.test_site_to_site_nist_800_77_cnsa_1_with_ppk) ... FAIL
DEBUG - test_site_to_site_ts_protocol_all (__main__.TestVPNIPsec.test_site_to_site_ts_protocol_all)
DEBUG - Test acceptance of 'all' protocol in site-to-site traffic selector. ... FAIL
DEBUG - test_site_to_site_ts_protocol_all (__main__.TestVPNIPsec.test_site_to_site_ts_protocol_all)
DEBUG - Test acceptance of 'all' protocol in site-to-site traffic selector. ... FAIL
DEBUG - test_site_to_site_vti (__main__.TestVPNIPsec.test_site_to_site_vti) ... FAIL
DEBUG - test_site_to_site_vti (__main__.TestVPNIPsec.test_site_to_site_vti) ... FAIL
DEBUG - test_site_to_site_vti_ts_afi (__main__.TestVPNIPsec.test_site_to_site_vti_ts_afi) ... FAIL
DEBUG - test_site_to_site_vti_ts_afi (__main__.TestVPNIPsec.test_site_to_site_vti_ts_afi) ... FAIL
DEBUG - test_site_to_site_with_default_ts (__main__.TestVPNIPsec.test_site_to_site_with_default_ts)
DEBUG - Test 'site to site' with default value of local and remote Traffic Selection ... FAIL
DEBUG - test_site_to_site_with_default_ts (__main__.TestVPNIPsec.test_site_to_site_with_default_ts)
DEBUG - Test 'site to site' with default value of local and remote Traffic Selection ... FAIL
DEBUG - test_site_to_site_x509 (__main__.TestVPNIPsec.test_site_to_site_x509) ... FAIL
DEBUG - test_site_to_site_x509 (__main__.TestVPNIPsec.test_site_to_site_x509) ... FAIL

Details

Version
2026.06.02-rolling
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Bug (incorrect behavior)