[Swan-dev] Strongswan version?

[Paul Wouters]

On Fri, 17 Aug 2018, Andrew Cagney wrote:

> I don't think simply installing the latest strongswan is right.  It
> should instead specify the version:
>    strongswan-5.6.3
> If this isn't done then the next time the strongswan packager pushes
> an update (hmm, wonder who that is), we'll get test result drift.

You won't get drift because all test cases check for an exact strongswan
version and refuse to start if the version is different. This is exactly
to prevent fighting over minor differences. Note that I'm the fedora
strongswan package maintainer, so I once I push an update, I will also
push an update to swan-prep insisting on the newer version.

That is, we already enforce the version strictly in swan-prep, so it
does not help to do this elsewhere as well.

> Even if this isn't the case then keeping the KVM_STRONGSWAN_PACKAGE
> variable around is a good idea - so it is easy to change that locally
> using Makefile.inc.local

It wouldn't work with swan-prep.

Paul