On Fri, 2017-02-03 at 12:34 -0500, Daniel Kahn Gillmor wrote: > > I'm suprised to see that strongswan-charon is the package providing > ike-server, if stronswan-starter is the package that contains the system > integration.
src:strongswan actually provides multiple IKE daemon (charon) in different binary packages: - strongswan-charon (the historical one, with configuration from /etc/ipsec.conf) - strongswan-nm (integrated with network-manager) - charon-cmd (standalone/commandline one) - charon-systemd (configured through systemd) All of them have a daemon binding to port 500/4500 and configure IPsec SA in the kernel, so all of them could Provide: ike-server in my opinion. ipsec-starter is only the tools used to start/stop strongswan-charon. Regards. -- Yves-Alexis
signature.asc
Description: This is a digitally signed message part