strongswan: dependencies hell
Nobody has claimed this yet.
- Dominant language
- Makefile
- Stars
- 4.6k
- Forks
- 4k
- Avg merge
- 3d 12h
- Merged PRs (30d)
- 134
Description
Maintainer: @pprindeville
Environment: (OpenWrt 23.05.0-rc3)
Description:
1. I believe strongswan packages (both full and default) should depend on kmod-xfrm-interface package.
Without it I get error in logread:
daemon.info ipsec: 00[KNL] received netlink error: Unknown device type (95)
daemon.info ipsec: 00[KNL] failed to create XFRM interface 'xfrmi-test-6147'
2. Same can be said about strongswan-mod-drbg (results in non-functional setup if strongswan-default is installed)
3. strongswan-full should include strongswan-mod-gmpdh in its dependencies too or user will get:
plugin 'gmpdh': failed to load - gmpdh_plugin_create not found and no plugin file available
4. I believe strongswan-mod-wolfssl is broken because of wolfSSL version mismatch.
I get:
plugin 'wolfssl' failed to load: Error relocating /usr/lib/ipsec/plugins/libstrongswan-wolfssl.so: wolfssl_ec_diffie_hellman_create: symbol not found
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing the strongswan, strongswan-default, strongswan-full, strongswan-mod-drbg, strongswan-mod-gmpdh, and strongswan-mod-wolfssl package definitions and their declared dependencies. Reproduce the reported XFRM, gmpdh, and wolfSSL errors on OpenWrt 23.05.0-rc3, then verify the dependency fixes and wolfSSL compatibility resolve them.
Written by the indexing model from the issue text.
Assessment
- Domain
- networking, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100