[Swan-dev] testing: use newer strongswan packages

Paul Wouters paul at nohats.ca
Thu Dec 18 17:08:43 EET 2014


hi,

The stock fedora package and the one we have been using up to now did
not enable CTR and CCM. (--enable-ctr and --enable-ccm). I've created
a new set of rpms that have these enabled. You can find them at

ftp://ftp.nohats.ca/ssw/

Some dependancies seem to have changed, and so you do need to install
the core package as well as the strongswan-tnc-imcvs.

this build also completely disabled libipsec as that is causing many
algorithms to be disabled as it is a whole XFRM/netkey replacement
stack. Why fedora enables that I don't know. AFAIK, it is only useful
on the android phone.

Paul


More information about the Swan-dev mailing list