openwrt / openwrt/packages

strongswan: dependencies hell

Open
#21,989 11 comments 7 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

release/23.05
Dominant language
Makefile
Stars
4.6k
Forks
4k
Avg merge
3d 12h
Merged PRs (30d)
134

Description

Maintainer: @pprindeville
Environment: (OpenWrt 23.05.0-rc3)

Description:

1. I believe strongswan packages (both full and default) should depend on kmod-xfrm-interface package.
Without it I get error in logread:

daemon.info ipsec: 00[KNL] received netlink error: Unknown device type (95)
daemon.info ipsec: 00[KNL] failed to create XFRM interface 'xfrmi-test-6147'

2. Same can be said about strongswan-mod-drbg (results in non-functional setup if strongswan-default is installed)

3. strongswan-full should include strongswan-mod-gmpdh in its dependencies too or user will get:

plugin 'gmpdh': failed to load - gmpdh_plugin_create not found and no plugin file available

4. I believe strongswan-mod-wolfssl is broken because of wolfSSL version mismatch.
I get:

plugin 'wolfssl' failed to load: Error relocating /usr/lib/ipsec/plugins/libstrongswan-wolfssl.so: wolfssl_ec_diffie_hellman_create: symbol not found

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reviewing the strongswan, strongswan-default, strongswan-full, strongswan-mod-drbg, strongswan-mod-gmpdh, and strongswan-mod-wolfssl package definitions and their declared dependencies. Reproduce the reported XFRM, gmpdh, and wolfSSL errors on OpenWrt 23.05.0-rc3, then verify the dependency fixes and wolfSSL compatibility resolve them.

Written by the indexing model from the issue text.

Assessment

Domain
networking, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.