]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/blob
db3ea4b843d2e17b2f7d51d3f32ffd8e0a2270ee
[thirdparty/openembedded/openembedded-core.git] /
1 From f7a8e2c049c2c3e2bfcb801d7b65214c0a5bad77 Mon Sep 17 00:00:00 2001
2 From: Yoann Congal <yoann.congal@smile.fr>
3 Date: Tue, 15 Apr 2025 17:27:20 +0200
4 Subject: [PATCH] libreswan: Allow skipping test_config for old ipsec
5
6 In some case, /usr/sbin/ipsec does not handle the readwriteconf command.
7 e.g. on Debian 12 with strongswan installed.
8 As with the other OLD_* variables, add an OLD_LIBRESWAN environment
9 variable to skip configuration testing on those systems.
10
11 Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
12 Upstream-Status: Backport [https://gitlab.com/redhat-crypto/fedora-crypto-policies/-/merge_requests/237]
13 ---
14 python/policygenerators/libreswan.py | 2 ++
15 1 file changed, 2 insertions(+)
16
17 diff --git a/python/policygenerators/libreswan.py b/python/policygenerators/libreswan.py
18 index a2b02f5..d81ec0c 100644
19 --- a/python/policygenerators/libreswan.py
20 +++ b/python/policygenerators/libreswan.py
21 @@ -227,6 +227,8 @@ class LibreswanGenerator(ConfigGenerator):
22
23 @classmethod
24 def test_config(cls, config):
25 + if os.getenv('OLD_LIBRESWAN') == '1':
26 + return True
27 if not os.access('/usr/sbin/ipsec', os.X_OK):
28 return True
29