From ca2eb5c646fa7c1e7d22351554d1efe72bb4a40d Mon Sep 17 00:00:00 2001 From: Dmitry Marakasov Date: Wed, 17 Mar 2021 19:12:31 +0000 Subject: security/strongswan: use "vici" interface instead of deprecated "stroke" by default Add UPDATING entry with migration instruction. PR: 249865 Submitted by: driesm.michiels@gmail.com Approved by: strongswan@nanoteq.com (maintainer) --- UPDATING | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) (limited to 'UPDATING') diff --git a/UPDATING b/UPDATING index a5b898ec4ff0..ba258eb20802 100644 --- a/UPDATING +++ b/UPDATING @@ -5,6 +5,22 @@ they are unavoidable. You should get into the habit of checking this file for changes each time you update your ports collection, before attempting any port upgrades. +20210317: + AFFECTS: users of security/strongswan + AUTHOR: driesm.michiels@gmail.com + + The stroke starter interface has been deprecated by upstream + for some time now. The default interface for controlling the charon + daemon has switched from stroke to vici. Users still using the + legacy config files such as ipsec.conf and ipsec.secret (stroke, starter) + can easily revert to the old behavior by: + + # sysrc strongswan_interface="stroke" + + It is recommended to use the vici interface which is configured by swanctl.conf. + Check : https://wiki.strongswan.org/projects/strongswan/wiki/Fromipsecconf + to ease the transition from ipsec.* to swanctl.conf + 20210313: AFFECTS: users of net-mgmt/phpipam AUTHOR: marko.cupac@mimar.rs -- cgit v1.2.3