Strongswan 6.0 removing ipsec CLI

[Philip Prindeville]

Hi all,

Word is that strongswan-6.0 will remove the ipsec interface.  No idea how many 5.9.x releases will come out before that happens.  Doing some prediction based on the past roadmap:

The cadence in the past has been every 3 months, and typically x.y.3 or x.y.4 is the maximum release until 'y' gets bumped.  We're at 5.9.2 (2021/2/26) currently, so .3 or .4 could be out in 1 month and 4 months, respectively.

With this news, I'm disinclined (and I believe Noel concurs) to put a lot of effort into maintaining the ipsec UCI initd scripting.

I'd rather just focus on adding Wiki documentation on how to tweak your /etc/config/ipsec configuration to work with swanctl instead.

Anyone have an objection to this plan?

Thanks,

-Philip