cloudstack-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "ASF subversion and git services (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (CLOUDSTACK-7087) [VR] [VPN] Downgrade openswan to previous version for VPN services to fix OSX client
Date Sun, 31 Aug 2014 17:59:20 GMT

    [ https://issues.apache.org/jira/browse/CLOUDSTACK-7087?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14116841#comment-14116841
] 

ASF subversion and git services commented on CLOUDSTACK-7087:
-------------------------------------------------------------

Commit 781a8f5c3c19d80bd6f98af7397f075e4d7c8af7 in cloudstack's branch refs/heads/4.4 from
[~harikrishna.patnala]
[ https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;h=781a8f5 ]

CLOUDSTACK-7087: Latest OS X VPN client not working Downgrading openswan version to 1:2.6.37-3

Reviewed-by: Abhinandan

Signed-off-by: Sheng Yang
(cherry picked from commit 2dfd278625a5d569a5cce2fec5ccb0d7c515c9e8)


> [VR] [VPN] Downgrade openswan to previous version for VPN services to fix OSX client
> ------------------------------------------------------------------------------------
>
>                 Key: CLOUDSTACK-7087
>                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-7087
>             Project: CloudStack
>          Issue Type: Bug
>      Security Level: Public(Anyone can view this level - this is the default.) 
>          Components: Virtual Router
>    Affects Versions: 4.2.0, 4.3.0
>            Reporter: Sheng Yang
>            Assignee: Harikrishna Patnala
>             Fix For: 4.2.1, 4.3.1
>
>
> Latest OpenSwan fail to work with OSX/IOS after latest Debian security update(Mar 2014,
https://www.debian.org/security/2014/dsa-2893 ).
> And why Debian didn’t fix it officially, is because Debian decided to drop the support
for OpenSwan(since nobody is maintaining it and it hasn’t been updated for 2 years before
this security fix). We would need to move to other VPN software in the future.
> Here is the Debian bugzilla for the issue. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=744717
> So far, downgrade openswan is only an intermediate solution. We need to move to other
VPN software(e.g. StrongSwan) which is still maintained by Debain in the near future.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message