From owner-svn-ports-head@freebsd.org Wed Mar 17 19:12:32 2021 Return-Path: Delivered-To: svn-ports-head@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id E2A45575784; Wed, 17 Mar 2021 19:12:32 +0000 (UTC) (envelope-from amdmi3@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4F10Ch60hhz4vZy; Wed, 17 Mar 2021 19:12:32 +0000 (UTC) (envelope-from amdmi3@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id B657014168; Wed, 17 Mar 2021 19:12:32 +0000 (UTC) (envelope-from amdmi3@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id 12HJCWop074202; Wed, 17 Mar 2021 19:12:32 GMT (envelope-from amdmi3@FreeBSD.org) Received: (from amdmi3@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id 12HJCWdO074199; Wed, 17 Mar 2021 19:12:32 GMT (envelope-from amdmi3@FreeBSD.org) Message-Id: <202103171912.12HJCWdO074199@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: amdmi3 set sender to amdmi3@FreeBSD.org using -f From: Dmitry Marakasov Date: Wed, 17 Mar 2021 19:12:32 +0000 (UTC) To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r568683 - in head: . security/strongswan security/strongswan/files X-SVN-Group: ports-head X-SVN-Commit-Author: amdmi3 X-SVN-Commit-Paths: in head: . security/strongswan security/strongswan/files X-SVN-Commit-Revision: 568683 X-SVN-Commit-Repository: ports MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-ports-head@freebsd.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: SVN commit messages for the ports tree for head List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Mar 2021 19:12:32 -0000 Author: amdmi3 Date: Wed Mar 17 19:12:31 2021 New Revision: 568683 URL: https://svnweb.freebsd.org/changeset/ports/568683 Log: security/strongswan: use "vici" interface instead of deprecated "stroke" by default Add UPDATING entry with migration instruction. PR: 249865 Submitted by: driesm.michiels@gmail.com Approved by: strongswan@nanoteq.com (maintainer) Modified: head/UPDATING head/security/strongswan/Makefile head/security/strongswan/files/strongswan.in Modified: head/UPDATING ============================================================================== --- head/UPDATING Wed Mar 17 18:45:07 2021 (r568682) +++ head/UPDATING Wed Mar 17 19:12:31 2021 (r568683) @@ -5,6 +5,22 @@ they are unavoidable. You should get into the habit of checking this file for changes each time you update your ports collection, before attempting any port upgrades. +20210317: + AFFECTS: users of security/strongswan + AUTHOR: driesm.michiels@gmail.com + + The stroke starter interface has been deprecated by upstream + for some time now. The default interface for controlling the charon + daemon has switched from stroke to vici. Users still using the + legacy config files such as ipsec.conf and ipsec.secret (stroke, starter) + can easily revert to the old behavior by: + + # sysrc strongswan_interface="stroke" + + It is recommended to use the vici interface which is configured by swanctl.conf. + Check : https://wiki.strongswan.org/projects/strongswan/wiki/Fromipsecconf + to ease the transition from ipsec.* to swanctl.conf + 20210313: AFFECTS: users of net-mgmt/phpipam AUTHOR: marko.cupac@mimar.rs Modified: head/security/strongswan/Makefile ============================================================================== --- head/security/strongswan/Makefile Wed Mar 17 18:45:07 2021 (r568682) +++ head/security/strongswan/Makefile Wed Mar 17 19:12:31 2021 (r568683) @@ -3,6 +3,7 @@ PORTNAME= strongswan DISTVERSION= 5.9.2 +PORTREVISION= 1 CATEGORIES= security net-vpn MASTER_SITES= http://download.strongswan.org/ \ http://download2.strongswan.org/ Modified: head/security/strongswan/files/strongswan.in ============================================================================== --- head/security/strongswan/files/strongswan.in Wed Mar 17 18:45:07 2021 (r568682) +++ head/security/strongswan/files/strongswan.in Wed Mar 17 19:12:31 2021 (r568683) @@ -27,7 +27,7 @@ rcvar=strongswan_enable load_rc_config $name : ${strongswan_enable:=NO} -: ${strongswan_interface:="stroke"} +: ${strongswan_interface:="vici"} extra_commands="reload statusall"