Loading...

Linking RHIVOS CVEs to...

Migration: Automation ...

SWIFT: POC Conversion

Sync from "Extern...

XML

Word

Printable

Type: Story
Resolution: Unresolved
Priority: Major
Fix Version/s: rhel-10.2
Affects Version/s: None
Component/s: NetworkManager-libreswan
Labels:
None

Fixed in Build:
NetworkManager-libreswan-1.2.29-1.el10
Severity:
None
Keywords:

ZStream

AssignedTeam:
rhel-net-mgmt

Story Points:
2
Blocked:
False
Ready:
False
Blocked Reason:

Hide

None

Show
None
Product Documentation Required:
None
Sprint:
None
Release Blocker:
Regression Exception
Target Backport Versions:

rhel-9.6.z, rhel-10.0.z, rhel-9.7.z, rhel-10.1.z, rhel-9.8

Acceptance Criteria:

Hide

Definition of Done:

Please mark each item below with ( / ) if completed or ( x ) if incomplete:

The acceptance criteria defined below are met.

Given a NetworkManager system using the libreswan plugin on Libreswan ≥5.2,

When a VPN profile is created (via nmcli or DBus) with libreswan.leftprotoport=icmp and libreswan.rightprotoport=icmp and activated,

Then the generated ipsec.conf contains matching leftprotoport=icmp and rightprotoport=icmp entries with no validation errors and the tunnel reaches NM_ACTIVE_CONNECTION_STATE_ACTIVATED.

Integration test case is available upstream.

Code is reviewed and merged upstream.

Preliminary testing is done.

Upstream documentation is written in the upstream MR.

Release notes text is written in the RHEL issue.

A demo is recorded

Show
Definition of Done: Please mark each item below with ( / ) if completed or ( x ) if incomplete: The acceptance criteria defined below are met. Given a NetworkManager system using the libreswan plugin on Libreswan ≥5.2, When a VPN profile is created (via nmcli or DBus) with libreswan.leftprotoport=icmp and libreswan.rightprotoport=icmp and activated, Then the generated ipsec.conf contains matching leftprotoport=icmp and rightprotoport=icmp entries with no validation errors and the tunnel reaches NM_ACTIVE_CONNECTION_STATE_ACTIVATED. Integration test case is available upstream. Code is reviewed and merged upstream. Preliminary testing is done. Upstream documentation is written in the upstream MR. Release notes text is written in the RHEL issue. A demo is recorded
Git Pull Request:
https://gitlab.gnome.org/GNOME/NetworkManager-libreswan/-/merge_requests/65
Preliminary Testing:
Pass
Errata Link:
https://errata.engineering.redhat.com/advisory/155031
Test Coverage:
None

ProdDocsReview-CCS:
Unspecified
ProdDocsReview-Dev:
Unspecified
ProdDocsReview-QE:
Unspecified

Experience:

PX Impact Score:
SFDC Cases Counter:
SFDC Cases Open:
SFDC Cases Links:

Planning:
None

Need support of leftprotoport and rightprotoport ipsec option.

blocks

RHEL-107158 Libreswan: Add leftprotoport and rightprotoport support

Integration

links to

RHBA-2025:155031 NetworkManager-libreswan update

Assignee:: Network Management Team

Reporter:: Gris Ge

Votes:: 0 Vote for this issue

Watchers:: 5 Start watching this issue

Created:: 2025/11/25 12:00 PM

Updated:: 2025/12/15 9:33 AM

Stale Date:: 2026/12/14

Next Planned Release Date:: 2026/05/12

Details

Description

Attachments

Issue Links

Easy Agile Planning Poker

Activity

People

Dates