<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Supplementing my original point - I've gone through the notes I made
when converting from Ubuntu/Openswan to Libreswan and, apart from
the NSS issue, it was generally very straightforward, especially for
a "standard" VPN type configuration. The only other issue of note
comes from building Libreswan as deb packages and installing from
.deb files. <br>
<br>
In this case, Libreswan was installed (under Ubuntu) as an upstart
job while Openswan had been a System V Init script install. This
caused some initial confusion as /etc/init.d/ipsec had for some
reason not been removed when the Libreswan package was installed (I
used my own repository and apt-get). <br>
<br>
I was also used to controlling pluto by using commands such as
"/etc/init.d/ipsec restart" when the VPN needed to be kicked back
into life. With Libreswan, I need to use "ipsec restart" instead.<br>
<br>
It's these small differences that, in practice, affect the user much
more than the build time parameter changes.<br>
<br>
Tony<br>
<br>
<div class="moz-cite-prefix">On 09/12/15 23:07, Tom Robinson wrote:<br>
</div>
<blockquote cite="mid:5668B41B.7040904@motec.com.au" type="cite">
<pre wrap="">On 10/12/15 02:03, Tony Whyman wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Thus my feedback is that the removal of the X.509 file support and the need to understand how to use
NSS should be right up front together with the link to the NSS page.
</pre>
</blockquote>
<pre wrap="">
I also found this to be the most challenging thing when migrating in the last few months.
</pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Swan mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Swan@lists.libreswan.org">Swan@lists.libreswan.org</a>
<a class="moz-txt-link-freetext" href="https://lists.libreswan.org/mailman/listinfo/swan">https://lists.libreswan.org/mailman/listinfo/swan</a>
</pre>
</blockquote>
<br>
</body>
</html>