[strongSwan] ipsec update issue

[Tobias Brunner]

Hi Jordan,

> When I make changes to the traffic selector of an IPsec connection that
> uses "auto=route",  "ipsec update" fails to update IPsec policies in the
> kernel. The only way I can get around this is issue is by using "ipsec
> unroute", followed by "ipsec update".
> 
> I am using strongswan 5.0.1. Is this a bug? Any fix?

Yes, you can update to 5.0.2, which unroutes routed connections
automatically if changed [1].

Regards,
Tobias

[1] http://wiki.strongswan.org/projects/strongswan/wiki/Changelog50