Package: libreswan Version: 3.28-1 libreswan tries to detect XFRM support by lookng at /proc/net/xfrm_stat, but that's only relevant on kernels with CONFIG_XFRM_STATISTICS enabled. /proc/sys/net/core/xfrm_acq_expires is a more robust way to test for xfrm support. This probably needs to be patched in 3.28.
See libreswan upstream git commit
716f4b712724c6698469563e531dea3667507ceb for more examples.
--dkg
signature.asc
Description: PGP signature

