denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

configure: Disable IKEv1 support by default

Browse Source 
The protocol has long been replaced by IKEv2 and is officially deprecated
since several years (RFC 9395).  As a first step to removing support for
it completely, this makes the configure option disabled by default and
warns users about its use.
This commit is contained in:
Tobias Brunner
2026-07-28 08:39:47 +02:00
parent 2f9b52bd1b
commit e0fd0f51ea
2 changed files with 9 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
configure.ac
+8 -1
View File
@@ -288,7 +288,7 @@ ARG_ENABL_SET([cert-enroll], [enable automatic certificate enrollment via EST
# optional features # optional features
ARG_ENABL_SET([bfd-backtraces], [use binutils libbfd to resolve backtraces for memory leaks and segfaults.]) ARG_ENABL_SET([bfd-backtraces], [use binutils libbfd to resolve backtraces for memory leaks and segfaults.])
ARG_ENABL_SET([dbghelp-backtraces],[use dbghlp.dll on Windows to create and print backtraces for memory leaks and segfaults.]) ARG_ENABL_SET([dbghelp-backtraces],[use dbghlp.dll on Windows to create and print backtraces for memory leaks and segfaults.])
ARG_DISBL_SET([ikev1], [disable IKEv1 protocol support in charon.]) ARG_ENABL_SET([ikev1], [enable deprecated IKEv1 protocol support in charon.])
ARG_DISBL_SET([ikev2], [disable IKEv2 protocol support in charon.]) ARG_DISBL_SET([ikev2], [disable IKEv2 protocol support in charon.])
ARG_ENABL_SET([integrity-test], [enable integrity testing of libstrongswan and plugins.]) ARG_ENABL_SET([integrity-test], [enable integrity testing of libstrongswan and plugins.])
ARG_DISBL_SET([load-warning], [disable the charon plugin load option warning in starter.]) ARG_DISBL_SET([load-warning], [disable the charon plugin load option warning in starter.])
@@ -2108,3 +2108,10 @@ AC_MSG_RESULT([libcharon: $c_plugins])
AC_MSG_RESULT([libtnccs: $t_plugins]) AC_MSG_RESULT([libtnccs: $t_plugins])
AC_MSG_RESULT([libtpmtss: $p_plugins]) AC_MSG_RESULT([libtpmtss: $p_plugins])
AC_MSG_RESULT([]) AC_MSG_RESULT([])
if test x$ikev1 = xtrue; then
AC_MSG_WARN(m4_normalize([
The IKEv1 protocol is deprecated. Support will be removed soon (disable
this warning with --disable-ikev1)]))
AC_MSG_RESULT([])
fi
testing/scripts/recipes/013_strongswan.mk
+1
View File
@@ -22,6 +22,7 @@ CONFIG_OPTS = \
--with-strongswan-conf=/etc/strongswan.conf.testing \ --with-strongswan-conf=/etc/strongswan.conf.testing \
--with-random-device=/dev/urandom \ --with-random-device=/dev/urandom \
--disable-load-warning \ --disable-load-warning \
--enable-ikev1 \
--enable-curl \ --enable-curl \
--enable-ldap \ --enable-ldap \
--enable-eap-aka \ --enable-eap-aka \