Return-Path: X-Original-To: apmail-cloudstack-issues-archive@www.apache.org Delivered-To: apmail-cloudstack-issues-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 63072114DF for ; Sun, 31 Aug 2014 17:59:21 +0000 (UTC) Received: (qmail 89658 invoked by uid 500); 31 Aug 2014 17:59:21 -0000 Delivered-To: apmail-cloudstack-issues-archive@cloudstack.apache.org Received: (qmail 89622 invoked by uid 500); 31 Aug 2014 17:59:21 -0000 Mailing-List: contact issues-help@cloudstack.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@cloudstack.apache.org Delivered-To: mailing list issues@cloudstack.apache.org Received: (qmail 89613 invoked by uid 500); 31 Aug 2014 17:59:21 -0000 Delivered-To: apmail-incubator-cloudstack-issues@incubator.apache.org Received: (qmail 89609 invoked by uid 99); 31 Aug 2014 17:59:21 -0000 Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 31 Aug 2014 17:59:21 +0000 Date: Sun, 31 Aug 2014 17:59:20 +0000 (UTC) From: "ASF subversion and git services (JIRA)" To: cloudstack-issues@incubator.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Commented] (CLOUDSTACK-7087) [VR] [VPN] Downgrade openswan to previous version for VPN services to fix OSX client MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/CLOUDSTACK-7087?page=3Dcom.atla= ssian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId= =3D14116841#comment-14116841 ]=20 ASF subversion and git services commented on CLOUDSTACK-7087: ------------------------------------------------------------- Commit 781a8f5c3c19d80bd6f98af7397f075e4d7c8af7 in cloudstack's branch refs= /heads/4.4 from [~harikrishna.patnala] [ https://git-wip-us.apache.org/repos/asf?p=3Dcloudstack.git;h=3D781a8f5 ] CLOUDSTACK-7087: Latest OS X VPN client not working Downgrading openswan ve= rsion to 1:2.6.37-3 Reviewed-by: Abhinandan Signed-off-by: Sheng Yang (cherry picked from commit 2dfd278625a5d569a5cce2fec5ccb0d7c515c9e8) > [VR] [VPN] Downgrade openswan to previous version for VPN services to fix= OSX client > -------------------------------------------------------------------------= ----------- > > Key: CLOUDSTACK-7087 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-708= 7 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the defa= ult.)=20 > Components: Virtual Router > Affects Versions: 4.2.0, 4.3.0 > Reporter: Sheng Yang > Assignee: Harikrishna Patnala > Fix For: 4.2.1, 4.3.1 > > > Latest OpenSwan fail to work with OSX/IOS after latest Debian security up= date(Mar 2014, https://www.debian.org/security/2014/dsa-2893 ). > And why Debian didn=E2=80=99t fix it officially, is because Debian decide= d to drop the support for OpenSwan(since nobody is maintaining it and it ha= sn=E2=80=99t been updated for 2 years before this security fix). We would n= eed to move to other VPN software in the future. > Here is the Debian bugzilla for the issue. https://bugs.debian.org/cgi-bi= n/bugreport.cgi?bug=3D744717 > So far, downgrade openswan is only an intermediate solution. We need to m= ove to other VPN software(e.g. StrongSwan) which is still maintained by Deb= ain in the near future. -- This message was sent by Atlassian JIRA (v6.3.4#6332)