[Bug 236944] security/strongswan: strongswan.in improvements

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Mon Apr 1 17:56:03 UTC 2019


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=236944

            Bug ID: 236944
           Summary: security/strongswan: strongswan.in improvements
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: ports-bugs at FreeBSD.org
          Reporter: jlduran at gmail.com
                CC: strongswan at Nanoteq.com
             Flags: maintainer-feedback?(strongswan at Nanoteq.com)
                CC: strongswan at Nanoteq.com

Created attachment 203306
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=203306&action=edit
Patch for strongswan.in

This is a follow-up of bug #234648.

There are still a few missing details:

If the service is stopped, and "reload", "status" or "statusall" is issued, the
message displayed is rather cryptic.

Also, if there are established connections, and "restart" is issued, there is a
possibility for charon not having enough time to teardown.  In _ipsec.in they
hardcode a sleep of 2 seconds
(https://github.com/strongswan/strongswan/blob/5c38a5ea832accec3a8d3942d878ac5be5bb2a4b/src/ipsec/_ipsec.in#L183),
here I've decided to reuse the waiting stanza.

This is a proposed patch, again, far from elegant, but we're getting there.

Thank you!

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-ports-bugs mailing list