On Fri, 2017-02-03 at 12:34 -0500, Daniel Kahn Gillmor wrote:
> 
> I'm suprised to see that strongswan-charon is the package providing
> ike-server, if stronswan-starter is the package that contains the system
> integration.

src:strongswan actually provides multiple IKE daemon (charon) in different
binary packages:

- strongswan-charon (the historical one, with configuration from
/etc/ipsec.conf)
- strongswan-nm (integrated with network-manager)
- charon-cmd (standalone/commandline one)
- charon-systemd (configured through systemd)

All of them have a daemon binding to port 500/4500 and configure IPsec SA in
the kernel, so all of them could Provide: ike-server in my opinion.

ipsec-starter is only the tools used to start/stop strongswan-charon.

Regards.
-- 
Yves-Alexis

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to