strongSwan

Tobias Brunner wrote:

to avoid clashes with other packages, we're moving the pki executable into the ipsecdir (which we set to /usr/libexec/strongwan) on Fedora.

Why don't you just ./configure with --bindir=/usr/libexec/strongswan? pki is currently the only program that gets installed in bin, ipsec and charon-cmd are installed in sbin.

I didn't realize that. It would be a solution as well as long as all other binaries are in sbin. If the current strongswan 5.1.2 packages work as expected, I'm going to leave the current solution as is. But I'll be happy to switch to whatever is recommended for 5.1.3 when it's out.

Also, I found out that src/ipsec/_ipsec.in is overly complicated. It might be best to just set $PATH at the beginning, prefer strongswan locations and then call the commands directly without absolute path.

Yeah, I suppose setting PATH and still calling the programs with an absolute path is a bit redundant (could be that this has historical reasons).

And there's like ten distinct exported environment variables to handle that, most (all?) of which probably don't need to be exported at all. All of them are filled in using sed. I guess it calls for a bit of simlification. I guess you have other important tasks in strongswan, so I could send patches with some minor cleanups if you're interested.

Any update?