#1147657 strongswan: Please continue supporting IKEv1 (IKE version 1 not supported, --enable-ikev1)

Package:
strongswan-charon
Source:
strongswan-charon
Description:
strongSwan Internet Key Exchange daemon
Submitter:
Paul Menzel
Date:
2026-09-14 09:39:03 UTC
Severity:
normal
#1147657#5
Date:
2026-09-14 09:37:52 UTC
From:
To:
Dear Debian folks,


Since last week I am unable to connect to the SoftEther VPN server. The
journal contains:

     charon[31789]: 01[IKE] IKE version 1 not supported

The reason is the package upgrade to 6.1.0-1:

     2026-09-08 08:06:58 upgrade strongswan-libcharon:amd64 6.0.7-1 6.1.0-1

and the documented default IKEv1 disablement in 6.1.0 [1][2]:
it’d be great if the Debian package could still ship IKEv1 support.


Kind regards,

Paul


PS: systemd journal still contains:

     Sep 12 09:10:15 abreu systemd[1]: Started
strongswan-starter.service - strongSwan IPsec IKEv1/IKEv2 daemon using
ipsec.conf.


[1]: https://strongswan.org/blog/2026/09/07/strongswan-6.1.0-released.html
[2]:
https://metadata.ftp-master.debian.org/changelogs//main/s/strongswan/strongswan_6.1.0-1_changelog