[strongSwan] FreeBSD 13.1-STABLE / StrongSwan 5.9?

[Tobias Brunner]

> Update: The kldload is not automatically initiated by the strongswan rc 
> file; this is an obvious omission since GENERIC now includes only a stub 
> and the actual ipsec driver must dynamically loaded. > I'll put a note in "bugzila" on it since the kernel config now requires
> you kldload the module or it doesn't work.

Weird that this never came up before.

> The enc and IPSEC_NAT_T 
> declarations are not required and neither is in GENERIC.

IPSEC_NAT_T has apparently been removed because the NAT-T support is 
non-optional since FreeBSD 12 (the same merge added the ipsec.ko module 
and the IPSEC_SUPPORT option [1]).

Regards,
Tobias

[1] 
https://cgit.freebsd.org/src/commit/?id=fcf596178b5f2be36424ecbc1b6a3224b29c91d2