Page MenuHomeVyOS Platform
Create Task
Maniphest T3598

DMVPN/IPSec does not work with upstream Strongswan 5.9
Needs testing, NormalPublicBUG
Actions

Description

With Strongswan updated to 5.9, DMVPN support is broken due to missing patches. I think either a revert to patched 5.7 is needed, or updating the patches to support the 5.9 code.

There is an ongoing effort to get dmvpn natively supported in Strongswan: https://github.com/strongswan/strongswan/pull/345

Details

Difficulty level
Unknown (require assessment)
Version
-
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Unspecified (please specify)

Event Timeline

sarthurdev created this task.Jun 3 2021, 2:32 PM
pasik added a subscriber: pasik.Jun 3 2021, 3:23 PM
c-po moved this task from Need Triage to In Progress on the VyOS 1.4 Sagitta board.Jun 13 2021, 9:27 AM
CiscoNCS added a subscriber: CiscoNCS.Aug 1 2021, 6:10 AM
mborodin added a subscriber: mborodin.May 16 2023, 11:24 AM

I've managed to adapt Alpine Linux patches to build Debian 11 StrongSwan 5.9.1 package, feel free to use it

0010-charon-add-optional-source-and-remote-overrides-for-.patch22 KBDownload

Viacheslav changed the task status from Open to Needs testing.Jan 20 2024, 1:38 AM
Viacheslav triaged this task as Normal priority.
dmbaturin added a project: Restricted Project.Feb 15 2024, 12:47 PM
dmbaturin set Issue type to Unspecified (please specify).
dmbaturin edited projects, added VyOS 1.4 Sagitta (1.4.0-epa1); removed VyOS 1.4 Sagitta.Feb 15 2024, 3:05 PM