Created attachment 557873 [details] patch Hi, even that openswan package doesn't explicitly require net-tools, it uses ifconfig in /usr/libexec/ipsec/verify. It should be replaced with 'ip' command. See attached patch.
Created attachment 583512 [details] patch Actually also /usr/libexec/ipsec/_startklips uses 'netstat-r' which should be replaced with 'ip route'.
thanks for the report. ipsec verify is slated to be fixed. _startklips has already been fixed to not use netstat.
These were fixed by me in the upstream openswan version 2.6.38 which is our current release in fedora