On 8 Oct 2026, at 1:18, Ilya Maximets via dev wrote:
> StrongSwan is moving from charon to swanctl for quite some time now.
> Newer distributions like Ubuntu 26.04 install strongswan-swanctl from
> the default strongswan meta-package instead of strongswan-starter that
> translates standard ipsec.conf into charon commands. Our IPsec
> implementation doesn't support working with the swanctl, so let's add
> a direct dependency for the starter instead. It's still available,
> but just not a default option anymore.
>
> 'strongswan-starter' package exists in Ubuntu starting with 16.04.
> StrongSwan in general is available since 14.04, so that is the only
> version where we'll not have a required dependency. At the same time
> our debian packaging will not build properly on 14.04 (and likely
> even much newer versions as well) anyway, so we're not loosing any
> compatibility with this change. All supported versions of Debian
> ship strongswan-starter.
>
> In the future we'll need to either add support for swanctl or drop
> support for strongswan for which we do not have any test coverage
> anyway.
Thanks Ilya for the patch. The changes look good to me.
Acked-by: Eelco Chaudron <[email protected]>
_______________________________________________
dev mailing list
[email protected]
https://mail.openvswitch.org/mailman/listinfo/ovs-dev
