Re: [opensuse-factory] Dropping VPNC [was: Tumbleweed - Review of the week 2018/13]

Le mardi 03 avril 2018 à 10:42 +0200, Frederic Crozat a écrit :

Le mardi 03 avril 2018 à 11:29 +0300, Andrei Borzenkov a écrit :

...

On Tue, Apr 3, 2018 at 10:58 AM, Frederic Crozat wrote:

...

Le mardi 03 avril 2018 à 10:48 +0300, Andrei Borzenkov a écrit :

...

On Tue, Apr 3, 2018 at 10:38 AM, Frank Krüger wrote:

...

Am 03.04.2018 um 09:20 schrieb Frederic Crozat:

...

Le samedi 31 mars 2018 à 13:20 +0200, Dominique Leuenberger / DimStar a écrit : > > * vpnc and networkmanager-vpnc will be removed from the > distro: > openvpn supports those use cases now.

I think there was a typo in the mail.

openCONNECT is replacing vpnc, not openVPN.

And AFAIK, openconnect (http://www.infradead.org/openconnec t/ ) does everything vpnc does, even better.

For everybody who commented in the thread, please test with openconnect / NM-openconnect

Thank you for the clarification. I removed vpnc and switched to openconnect. Using the VPN protocol Cisco AnyConnect it works pretty well. However, it is not clear to me how to deal with VPN connections that explicitly require IPSecID and IPSecsecret.

Can you connect to those servers with Cisco AnyConnect? If yes, you should be able to migrate to openconnet using similar settings. If not, it is enough reason to not drop vpnc until actual replacement is found. Did you try libreswan I mentioned earlier?

And no, openconnect is not replacement for vpnc. It implements different protocol requiring different server setup.

Well, looking at vpnc status ( http://lists.unix-ag.uni-kl.de/pip er mail /vpnc-devel/2017-November/thread.html ), I'm not sure people should rely on vpnc at all (there is now a github projet, but still no maintainer)..

Well, the fact is that Cisco VPN products may offer both SSL and IPSec VPN and can chose to enable either and openconnect implements only the former so dropping vpnc may leave some users without working solution. It means some replacement for IPSec VPN is needed.

Like that maybe : https://www.cisco.com/c/en/us/support/docs/network-management/remote- access/117257-config-ios-vpn-strongswan-00.html

Regarding NM-openswan, it should be dropped in favor or NM-libreswan, which is the replacement with NM >= 1.2 (see https://wiki.gnome.org/P ro jects/NetworkManager/VPN ) and clearly state it is compatible with Cisco IPSec.

But it looks like nobody has packaged it yet

And for people wondering, NM-libreswan can work with strongswan too.. It is mostly a rename of NM-strongswan.. -- Frederic Crozat Enterprise Desktop Release Manager SUSE -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org