[opensuse] feature 302909: vpn
Perhaps someone can enlighten me on this.... On the feature list I found (as a welcome surprise) this : strongSwan IKE.v2 (replacing openSwan) (Feature No: 302909) Category: Network, Security Status: done Test Result: idle Description: This is a detail of the overall IPv6 story. We need IKEv2, and the best option currently is to switch to strongSwan. As stated above, status is set to done. However, on beta-3, not only the media still contains its predescessor. But strongswan is not even included. So how can it be tested (as part of the repo) My angle is this, is not so much the "ipv6 story" allthough much advocating it, but more, that strongswan does support the use of smartcards/etokens right out of the box, thus enhancing the leven of security. It's not that very much work has been going on on stronfswan lately. Last change in the factory tree is dated on april-23rd I was (at least) exoecting to find both of them. Or do i misinterpret the feature list.... HtH, Hans -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Hans Witvliet <hwit@a-domani.nl> writes:
Perhaps someone can enlighten me on this....
On the feature list I found (as a welcome surprise) this : strongSwan IKE.v2 (replacing openSwan) (Feature No: 302909) Category: Network, Security Status: done Test Result: idle
Description: This is a detail of the overall IPv6 story. We need IKEv2, and the best option currently is to switch to strongSwan.
As stated above, status is set to done. However, on beta-3, not only the media still contains its predescessor. But strongswan is not even included. So how can it be tested (as part of the repo)
My angle is this, is not so much the "ipv6 story" allthough much advocating it, but more, that strongswan does support the use of smartcards/etokens right out of the box, thus enhancing the leven of security.
It's not that very much work has been going on on stronfswan lately. Last change in the factory tree is dated on april-23rd
I was (at least) exoecting to find both of them. Or do i misinterpret the feature list....
I find in factory these packages: inst-source/suse/i586/strongswan-4.2.1-9.i586.rpm inst-source/suse/i586/strongswan-doc-4.2.1-9.i586.rpm The factory tree should have been updated yesterday - 24th of *May*. Could you doublecheck why you do not see it in factory? Andreas -- Andreas Jaeger, Director Platform / openSUSE, aj@suse.de SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nürnberg) Maxfeldstr. 5, 90409 Nürnberg, Germany GPG fingerprint = 93A3 365E CE47 B889 DF7F FED1 389A 563C C272 A126
On Mon, 2008-05-26 at 06:56 +0200, Andreas Jaeger wrote:
Hans Witvliet <hwit@a-domani.nl> writes:
Perhaps someone can enlighten me on this....
On the feature list I found (as a welcome surprise) this : strongSwan IKE.v2 (replacing openSwan) (Feature No: 302909) Category: Network, Security Status: done Test Result: idle
Description: This is a detail of the overall IPv6 story. We need IKEv2, and the best option currently is to switch to strongSwan.
As stated above, status is set to done. However, on beta-3, not only the media still contains its predescessor. But strongswan is not even included. So how can it be tested (as part of the repo)
My angle is this, is not so much the "ipv6 story" allthough much advocating it, but more, that strongswan does support the use of smartcards/etokens right out of the box, thus enhancing the leven of security.
It's not that very much work has been going on on stronfswan lately. Last change in the factory tree is dated on april-23rd
I was (at least) exoecting to find both of them. Or do i misinterpret the feature list....
I find in factory these packages: inst-source/suse/i586/strongswan-4.2.1-9.i586.rpm inst-source/suse/i586/strongswan-doc-4.2.1-9.i586.rpm
The factory tree should have been updated yesterday - 24th of *May*.
Could you doublecheck why you do not see it in factory?
Andreas
Reason: I used the DVD to install it on a system that is not connected to the Net. This evening/night/morning just found out, that it's only on the online inst-source. Added automatically IF you are connected. (I hope that this will not be the case for the rc's...) BTW, is it worthwile to mention that even for text-mode installation one needs 650MB? I noticed on my P3 with 512MB it uses an additional 150MB swap during installation. otoh, B3 runs nice with KDE4 on a 512MB machine. hw -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Hans Witvliet <hwit@a-domani.nl> writes:
Reason: I used the DVD to install it on a system that is not connected to the Net.
Yeah, we cannot put everything on the DVD.
This evening/night/morning just found out, that it's only on the online inst-source. Added automatically IF you are connected. (I hope that this will not be the case for the rc's...)
What exactly do you hope?
BTW, is it worthwile to mention that even for text-mode installation one needs 650MB? I noticed on my P3 with 512MB it uses an additional 150MB swap during installation.
That's much and more than expected.
otoh, B3 runs nice with KDE4 on a 512MB machine.
That's good to hear! Andreas -- Andreas Jaeger, Director Platform / openSUSE, aj@suse.de SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nürnberg) Maxfeldstr. 5, 90409 Nürnberg, Germany GPG fingerprint = 93A3 365E CE47 B889 DF7F FED1 389A 563C C272 A126
On Mon, May 26, 2008 at 8:52 PM, Andreas Jaeger <aj@suse.de> wrote:
Hans Witvliet <hwit@a-domani.nl> writes:
Reason: I used the DVD to install it on a system that is not connected to the Net.
Yeah, we cannot put everything on the DVD.
Why not, since you don't ship anything anymore anyway. Make a second DVD image. But the less common things out there (for any value of uncommon you care to use). -- ----------JSA--------- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
"John Andersen" <jsamyth@gmail.com> writes:
On Mon, May 26, 2008 at 8:52 PM, Andreas Jaeger <aj@suse.de> wrote:
Hans Witvliet <hwit@a-domani.nl> writes:
Reason: I used the DVD to install it on a system that is not connected to the Net.
Yeah, we cannot put everything on the DVD.
Why not, since you don't ship anything anymore anyway. Make a second DVD image. But the less common things out there (for any value of uncommon you care to use).
We could - but so many nowadays have network access that it's more convenient to just download what you need when you need it. We're speaking about the non-common things where you need a few off - and not 4.6 GB... Andreas -- Andreas Jaeger, Director Platform / openSUSE, aj@suse.de SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nürnberg) Maxfeldstr. 5, 90409 Nürnberg, Germany GPG fingerprint = 93A3 365E CE47 B889 DF7F FED1 389A 563C C272 A126
On Tue, 2008-05-27 at 05:52 +0200, Andreas Jaeger wrote:
Hans Witvliet <hwit@a-domani.nl> writes:
Reason: I used the DVD to install it on a system that is not connected to the Net.
Yeah, we cannot put everything on the DVD. Understand that... (disk)Space ... the final frontier ...
This evening/night/morning just found out, that it's only on the online inst-source. Added automatically IF you are connected. (I hope that this will not be the case for the rc's...)
What exactly do you hope?
Well, actually, what is said in the feature list: "strongSwan IKEv2 __(replacing openSwan)__ (Feature No: 302909)" What i mean is, if it's an additional package: great! I wouldn't mind to get it from the obs: ~/security/strongswan/... (where it allready is for 10.3 and factory) But if it is intended to _replace_ openswan, as stated, it should be on the disk. But i asume they will co-exist on the final disk, until it replace openswan, (which is still a good vpn-package anyway.) Actually, in the first place i was expecting this, among others to be found on the obs in a 11.0 tree. On packman, i find 112 packages build for 11.0, even more (92) than 10.3. Related to this: When is openSUSE_11.0 introduced on the OBS (obviously i am contributing to the obs, yet) After the official release of 11.0? hw -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
participants (3)
-
Andreas Jaeger -
Hans Witvliet -
John Andersen