[Swan-dev] Regarding renaming ipsec.conf options

Paul Wouters paul at nohats.ca
Fri Apr 18 01:12:41 EEST 2014

On Fri, 18 Apr 2014, D. Hugh Redelmeier wrote:

>    - start a notional timer for the removal of the old spelling
>      (two releases?)

There is no way we can obsolete keywords in two releases. That would be
in the order of months!

While I'm less concerned about pluto options, as most people use our
scripting and most people start pluto without options (using only
--config /etc/ipsec.conf)

I'm very concerned with breaking keywords, especially for mostly esthetics
reasons. It would break compatibility with openswan, making migration
harder, make using the test harness with either openswan or libreswan
harder, would invalidate all the documentation people wrote that google
finds disfunctional, etc. If we really want to rename ipsec.conf
options, we need to carry over the old ones in a time period of years,
not months.


More information about the Swan-dev mailing list