On Friday 2010-09-03 10:41, Tobias Brunner wrote:

>>      #config setup
>>      #nothing here
>
>Just define
>
>config setup
>       plutostart=no
>
>and you should be fine.

Well, yes and no. In openSUSE 11.3, strongswan is split into
strongswan-ikev1, strongswan-ikev2, strongswan-ipsec (holds 
ipsec.conf) and strongswan (dummy package holding a requires for -ikev1, 
-ikev2, -ipsec). ipsec.conf has been tuned to read

 include /etc/ipsec.*.conf

So that our in-house VPN configuration package(s) that provide 
/etc/ipsec.company.conf can be easily installed on top. As 
/etc/ipsec.company.conf contains

 keyexchange=ikev2

company-vpn.noarch.rpm technically only needs a Require on ikev2.-- And 
placing plutostart=no anywhere may not work well with 
othervpn.noarch.rpm. :)


_______________________________________________
Users mailing list
Users@lists.strongswan.org
https://lists.strongswan.org/mailman/listinfo/users

Reply via email to