Tobias Brunner

Yeah, I saw that we print the XAuth message to the log (after running it through `chunk_printable()`). As you noted, the message in EAP-GTC requests is currently just ignored. I...

> Some IKEv1 NAT-T implementations on hardware are buggy. Buggy how? > Allow an easy way to disable sending of nat capabilities to allow charon to work with these implementations....

Are you sure it's a drop policy? (Please provide more logs and status output e.g. from `ip xfrm`.) If you didn't configure one, then they are only installed during address...

This is the patch for the priority/CHILD_SA update issue: 8e31d657307d7e5d5bf70fa3dba869b5e014845f But this is only relevant if you actually configured custom priorities for CHILD_SAs.

A potential issue with this is that one of the variables might already be defined in the shell for some reason (in particular one of the shorter or more generic...

> The question is if the distros that ship strongSwan would need to make any changes to their files to support this single command. So? On Debian/Ubuntu you'd e.g. get...

> Currently there doesn't seem to be any way to do `EAP-MS-CHAPv2` authentication using the SQL configuration plugin as a backend. The missing piece is the lack of ability to...

> what would be the effect of that if not what one might think? See [issue 1057](https://wiki.strongswan.org/issues/1057) and related. > but wouldn't align well with the other backends I agree,...

With trusty, which this _ruby_ build container is running, libunwind8 is apparently shipped. But precise, which the _c_ containers are running, comes with libunwind7: http://packages.ubuntu.com/source/precise/libunwind

Regarding the CoDel queue: I've asked Martin and as far as he remembers, he did some (successful) experimenting at the time, but never any full blown tests (stress or otherwise)...