Package: libreswan
Version: 3.28-1

libreswan tries to detect XFRM support by lookng at /proc/net/xfrm_stat,
but that's only relevant on kernels with CONFIG_XFRM_STATISTICS
enabled.  /proc/sys/net/core/xfrm_acq_expires is a more robust way to
test for xfrm support.  This probably needs to be patched in 3.28.

See libreswan upstream git commit
716f4b712724c6698469563e531dea3667507ceb for more examples.

    --dkg

Attachment: signature.asc
Description: PGP signature

Reply via email to