packages/net/strongswan, branch master

strongswan: bump PKG_RELEASE

2026-07-16T20:27:36Z

Update PKG_RELEASE to '4'. Signed-off-by: Florian Eckert

strongswan: move strongswan syslog generation into subfunction

2026-07-16T20:27:36Z

This makes the generation process clearer and more extensible. This commit does not change the function and is a preparatory commit. Signed-off-by: Florian Eckert

strongswan: move strongswan scripts generation into subfunction

2026-07-16T20:27:36Z

This makes the generation process clearer and more extensible. This commit does not change the function and is a preparatory commit. Signed-off-by: Florian Eckert

strongswan: move strongswan interfaces_use check into subfunction

2026-07-16T20:27:36Z

This makes the generation process clearer and more extensible. This commit does not change the function and is a preparatory commit. Signed-off-by: Florian Eckert

strongswan: move strongswan ignore_routing_tables check into subfunction

2026-07-16T20:27:36Z

This makes the generation process clearer and more extensible. While we're at it, the option 'ignore_routing_tables' is changed to a list of elements. For the migration, the '/etc/uci-defaults/strongswan' migration script is be extended with the new function 'migrate_ignore_routing_tables', which handles the migration from an 'option' element to a 'list' elements. Signed-off-by: Florian Eckert

strongswan: move uci-defaults migration into subfunction

2026-07-16T20:27:36Z

To make the migration script more organized, the migration for the 'ipsec' unamed section to 'ipsec' named section 'globals' has been moved to a subfunction. The change prepares the new migration script to migrate other areas. Signed-off-by: Florian Eckert

strongswan: move strongswan install_routes check into subfunction

2026-07-16T20:27:36Z

This makes the generation process clearer and more extensible. This commit does not change the function and is a preparatory commit. Signed-off-by: Florian Eckert

strongswan: do not use config_foreach named section globals

2026-07-16T20:27:36Z

In a previous commit, the anonymous 'ipsec' section was changed to a named section called 'globals'. The reason for this is that this is where the 'strongswan.conf' configuration option are saved. This should only occur once. Since only one strongswan service can be running on the system. Therefore, in this commit, the 'config_foreach' loop is removed and the section is permanently set to 'globals'. This commit does not change the function and is a preparatory commit. Assuming there is a global section named 'ipsec'. Signed-off-by: Florian Eckert

strongswan: move strongswan.conf generation to its own function

2026-07-16T20:27:36Z

The cross-file handling of variables that are populated in 'config_ipsec' but then written to 'strongswan.conf' in the 'do postamble' section is prone to errors, as variables are often overlooked. The config file 'strongswan.conf' is now generated in a single function without the need to use global variables. This commit does not change the function and is a preparatory commit. Signed-off-by: Florian Eckert

strongswan: merging the swanctl and strongswan configurations block by block

2026-07-16T20:27:36Z

In the 'prepare_env' function, the configuration setup for 'swanctl' and 'strongswan' is not grouped into blocks, so it is not clear which functions depend on each other. With this change, the 'strongswan' configuration is set up first, followed by the 'swanctl' configuration. This commit does not change the function and is a preparatory commit. Signed-off-by: Florian Eckert