Strongswan 6.0 removing ipsec CLI
philipp_subx at redfish-solutions.com
Tue Apr 13 21:19:07 BST 2021
Word is that strongswan-6.0 will remove the ipsec interface. No idea how many 5.9.x releases will come out before that happens. Doing some prediction based on the past roadmap:
The cadence in the past has been every 3 months, and typically x.y.3 or x.y.4 is the maximum release until 'y' gets bumped. We're at 5.9.2 (2021/2/26) currently, so .3 or .4 could be out in 1 month and 4 months, respectively.
With this news, I'm disinclined (and I believe Noel concurs) to put a lot of effort into maintaining the ipsec UCI initd scripting.
I'd rather just focus on adding Wiki documentation on how to tweak your /etc/config/ipsec configuration to work with swanctl instead.
Anyone have an objection to this plan?
More information about the openwrt-devel