-
Bug
-
Resolution: Done
-
Major
-
None
-
None
-
None
-
False
-
-
False
-
None
-
-
-
Important
Major distributions are not shipping Libreswan v5 yet, but they will start soon, including Fedora and later, likely, RHEL 10.
Libreswan 5 deprecated ipsec auto command that ovs-monitor-ipsec is heavily relying on. In practice, however, ipsec auto is just broken for our use case in v5, see https://github.com/libreswan/libreswan/issues/1726 .
Need to migrate out of ipsec auto. Ideally, replacing with commands that work in both v4 and v5 to avoid version checking within ovs-monitor-ipsec.