VPN / IPsec - migrate ipsec.conf to swanctl.conf

[AdSchellevis]

Important notices

Before you add a new report, we ask you kindly to acknowledge the following:

• I have read the contributing guide lines at https://github.com/opnsense/core/blob/master/CONTRIBUTING.md
• I am convinced that my issue is new after having checked both open and closed issues at https://github.com/opnsense/core/issues?q=is%3Aissue

Is your feature request related to a problem? Please describe.

In time Strongswan will remove support for ipsec.conf (could't find a clear path on their end, if there is, it might be good to add a dead line here), in which case the newer swanctl.conf should be used.

Describe the solution you like

Migrate current legacy code to output new style configuration data instead of the current ipsec.conf file.

Currently the ipsec.conf is written here:

core/src/etc/inc/plugins.inc.d/ipsec.inc

Line 1754 in c3bae88

@file_put_contents("/usr/local/etc/ipsec.conf", str_replace("\t", ' ', $ipsecconf));

A challenging part might be the current support for custom includes in :

core/src/etc/inc/plugins.inc.d/ipsec.inc

Line 1752 in c3bae88

$ipsecconf .= "\ninclude ipsec.opnsense.d/*.conf\n";

Describe alternatives you considered

None

Additional context

• Migration note from Strongswan https://wiki.strongswan.org/projects/strongswan/wiki/Fromipsecconf