From: <abe...@us...> - 2016-11-12 04:50:11
|
Revision: 7949 http://sourceforge.net/p/astlinux/code/7949 Author: abelbeck Date: 2016-11-12 04:50:08 +0000 (Sat, 12 Nov 2016) Log Message: ----------- strongswan, 'stroke' must be enabled Modified Paths: -------------- branches/1.0/package/strongswan/strongswan.mk Modified: branches/1.0/package/strongswan/strongswan.mk =================================================================== --- branches/1.0/package/strongswan/strongswan.mk 2016-11-12 01:15:17 UTC (rev 7948) +++ branches/1.0/package/strongswan/strongswan.mk 2016-11-12 04:50:08 UTC (rev 7949) @@ -26,7 +26,7 @@ --enable-xauth-generic=yes \ --enable-xauth-eap=yes \ --enable-unity=no \ - --enable-stroke=no \ + --enable-stroke=yes \ --enable-sqlite=$(if $(BR2_PACKAGE_STRONGSWAN_SQLITE),yes,no) \ --enable-sql=$(if $(BR2_PACKAGE_STRONGSWAN_SQLITE),yes,no) \ --enable-attr-sql=$(if $(BR2_PACKAGE_STRONGSWAN_SQLITE),yes,no) \ @@ -65,9 +65,10 @@ define STRONGSWAN_UNINSTALL_TARGET_CMDS rm -rf $(TARGET_DIR)/usr/lib/ipsec rm -rf $(TARGET_DIR)/usr/libexec/ipsec - rm -rf $(TARGET_DIR)/etc/strongswan.d + rm -rf $(TARGET_DIR)/etc/strongswan.* + rm -rf $(TARGET_DIR)/etc/ipsec.* + rm -rf $(TARGET_DIR)/etc/swanctl rm -rf $(TARGET_DIR)/usr/share/strongswan - rm -f $(TARGET_DIR)/etc/strongswan.conf rm -f $(TARGET_DIR)/etc/init.d/ipsec rm -f $(TARGET_DIR)/etc/runlevels/default/S31ipsec rm -f $(TARGET_DIR)/etc/runlevels/default/K20ipsec This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <abe...@us...> - 2016-11-12 23:42:41
|
Revision: 7951 http://sourceforge.net/p/astlinux/code/7951 Author: abelbeck Date: 2016-11-12 23:42:38 +0000 (Sat, 12 Nov 2016) Log Message: ----------- strongswan, make /etc/swanctl symlink conditional on BR2_PACKAGE_STRONGSWAN_VICI value Modified Paths: -------------- branches/1.0/package/strongswan/strongswan.mk Modified: branches/1.0/package/strongswan/strongswan.mk =================================================================== --- branches/1.0/package/strongswan/strongswan.mk 2016-11-12 19:36:06 UTC (rev 7950) +++ branches/1.0/package/strongswan/strongswan.mk 2016-11-12 23:42:38 UTC (rev 7951) @@ -8,7 +8,7 @@ STRONGSWAN_SOURCE = strongswan-$(STRONGSWAN_VERSION).tar.bz2 STRONGSWAN_SITE = https://download.strongswan.org STRONGSWAN_DEPENDENCIES = openssl host-pkg-config -STRONGSWAN_TARGET_ETC = ipsec.conf ipsec.d ipsec.secrets strongswan.conf strongswan.d swanctl +STRONGSWAN_TARGET_ETC = ipsec.conf ipsec.d ipsec.secrets strongswan.conf strongswan.d $(if $(BR2_PACKAGE_STRONGSWAN_VICI),swanctl) STRONGSWAN_CONF_OPT += \ --without-lib-prefix \ This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <abe...@us...> - 2016-11-13 12:46:50
|
Revision: 7952 http://sourceforge.net/p/astlinux/code/7952 Author: abelbeck Date: 2016-11-13 12:46:47 +0000 (Sun, 13 Nov 2016) Log Message: ----------- strongswan, add back /usr/share/strongswan templates Modified Paths: -------------- branches/1.0/package/strongswan/strongswan.mk Modified: branches/1.0/package/strongswan/strongswan.mk =================================================================== --- branches/1.0/package/strongswan/strongswan.mk 2016-11-12 23:42:38 UTC (rev 7951) +++ branches/1.0/package/strongswan/strongswan.mk 2016-11-13 12:46:47 UTC (rev 7952) @@ -61,7 +61,6 @@ rm -rf $(TARGET_DIR)/etc/$$i ; \ ln -s /tmp/etc/strongswan/$$i $(TARGET_DIR)/etc/$$i ; \ done - rm -rf $(TARGET_DIR)/usr/share/strongswan $(INSTALL) -m 0755 -D package/strongswan/ipsec.init $(TARGET_DIR)/etc/init.d/ipsec ln -sf ../../init.d/ipsec $(TARGET_DIR)/etc/runlevels/default/S31ipsec ln -sf ../../init.d/ipsec $(TARGET_DIR)/etc/runlevels/default/K20ipsec @@ -75,6 +74,7 @@ rm -rf $(TARGET_DIR)/stat/etc/strongswan rm -rf $(TARGET_DIR)/usr/lib/ipsec rm -rf $(TARGET_DIR)/usr/libexec/ipsec + rm -rf $(TARGET_DIR)/usr/share/strongswan rm -f $(addprefix $(TARGET_DIR)/etc/, $(STRONGSWAN_TARGET_ETC)) rm -f $(TARGET_DIR)/etc/init.d/ipsec rm -f $(TARGET_DIR)/etc/runlevels/default/S31ipsec This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <abe...@us...> - 2016-11-13 14:33:26
|
Revision: 7953 http://sourceforge.net/p/astlinux/code/7953 Author: abelbeck Date: 2016-11-13 14:33:23 +0000 (Sun, 13 Nov 2016) Log Message: ----------- strongswan, disable building static libs Modified Paths: -------------- branches/1.0/package/strongswan/strongswan.mk Modified: branches/1.0/package/strongswan/strongswan.mk =================================================================== --- branches/1.0/package/strongswan/strongswan.mk 2016-11-13 12:46:47 UTC (rev 7952) +++ branches/1.0/package/strongswan/strongswan.mk 2016-11-13 14:33:23 UTC (rev 7953) @@ -11,6 +11,7 @@ STRONGSWAN_TARGET_ETC = ipsec.conf ipsec.d ipsec.secrets strongswan.conf strongswan.d $(if $(BR2_PACKAGE_STRONGSWAN_VICI),swanctl) STRONGSWAN_CONF_OPT += \ + --disable-static \ --without-lib-prefix \ --enable-led=no \ --enable-pkcs11=no \ This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <abe...@us...> - 2016-11-13 16:07:36
|
Revision: 7954 http://sourceforge.net/p/astlinux/code/7954 Author: abelbeck Date: 2016-11-13 16:07:33 +0000 (Sun, 13 Nov 2016) Log Message: ----------- strongswan, disable some crypto plugins so OpenSSL handles them, as per Debian and others Modified Paths: -------------- branches/1.0/package/strongswan/strongswan.mk Modified: branches/1.0/package/strongswan/strongswan.mk =================================================================== --- branches/1.0/package/strongswan/strongswan.mk 2016-11-13 14:33:23 UTC (rev 7953) +++ branches/1.0/package/strongswan/strongswan.mk 2016-11-13 16:07:33 UTC (rev 7954) @@ -38,6 +38,7 @@ --enable-scripts=no \ --enable-vici=$(if $(BR2_PACKAGE_STRONGSWAN_VICI),yes,no) \ --enable-swanctl=$(if $(BR2_PACKAGE_STRONGSWAN_VICI),yes,no) \ + --enable-addrblock=yes \ --enable-cmd=yes ifeq ($(BR2_PACKAGE_STRONGSWAN_EAP),y) @@ -50,6 +51,16 @@ --enable-eap-peap endif +# Diable plugins so OpenSSL handles them +STRONGSWAN_CONF_OPT += \ + --disable-aes \ + --disable-des \ + --disable-rc2 \ + --disable-md5 \ + --disable-sha1 \ + --disable-sha2 \ + --disable-hmac + ifeq ($(BR2_PACKAGE_STRONGSWAN_SQLITE),y) STRONGSWAN_DEPENDENCIES += \ $(if $(BR2_PACKAGE_SQLITE),sqlite) This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <abe...@us...> - 2016-11-18 20:58:21
|
Revision: 7965 http://sourceforge.net/p/astlinux/code/7965 Author: abelbeck Date: 2016-11-18 20:58:18 +0000 (Fri, 18 Nov 2016) Log Message: ----------- strongswan, include the 'unity' plugin, if needed 'charon.cisco_unity=yes' must be added to /etc/strongswan.conf Modified Paths: -------------- branches/1.0/package/strongswan/strongswan.mk Modified: branches/1.0/package/strongswan/strongswan.mk =================================================================== --- branches/1.0/package/strongswan/strongswan.mk 2016-11-16 18:29:14 UTC (rev 7964) +++ branches/1.0/package/strongswan/strongswan.mk 2016-11-18 20:58:18 UTC (rev 7965) @@ -29,7 +29,7 @@ --enable-tnccs-dynamic=no \ --enable-xauth-generic=yes \ --enable-xauth-eap=yes \ - --enable-unity=no \ + --enable-unity=yes \ --enable-stroke=yes \ --enable-sqlite=$(if $(BR2_PACKAGE_STRONGSWAN_SQLITE),yes,no) \ --enable-sql=$(if $(BR2_PACKAGE_STRONGSWAN_SQLITE),yes,no) \ This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <abe...@us...> - 2017-03-30 13:41:18
|
Revision: 8248 http://sourceforge.net/p/astlinux/code/8248 Author: abelbeck Date: 2017-03-30 13:41:15 +0000 (Thu, 30 Mar 2017) Log Message: ----------- strongswan, version bump to 5.5.2 Modified Paths: -------------- branches/1.0/package/strongswan/strongswan.mk Modified: branches/1.0/package/strongswan/strongswan.mk =================================================================== --- branches/1.0/package/strongswan/strongswan.mk 2017-03-30 00:15:17 UTC (rev 8247) +++ branches/1.0/package/strongswan/strongswan.mk 2017-03-30 13:41:15 UTC (rev 8248) @@ -4,7 +4,7 @@ # ################################################################################ -STRONGSWAN_VERSION = 5.5.1 +STRONGSWAN_VERSION = 5.5.2 STRONGSWAN_SOURCE = strongswan-$(STRONGSWAN_VERSION).tar.bz2 STRONGSWAN_SITE = https://download.strongswan.org STRONGSWAN_DEPENDENCIES = openssl host-pkg-config @@ -27,6 +27,7 @@ --enable-tnccs-11=no \ --enable-tnccs-20=no \ --enable-tnccs-dynamic=no \ + --enable-tpm=no \ --enable-xauth-generic=yes \ --enable-xauth-eap=yes \ --enable-unity=yes \ This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |
From: <abe...@us...> - 2017-06-01 21:56:05
|
Revision: 8365 http://sourceforge.net/p/astlinux/code/8365 Author: abelbeck Date: 2017-06-01 21:56:03 +0000 (Thu, 01 Jun 2017) Log Message: ----------- strongswan, version bump to 5.5.3, security fixes: CVE-2017-9022, CVE-2017-9023 Modified Paths: -------------- branches/1.0/package/strongswan/strongswan.mk Modified: branches/1.0/package/strongswan/strongswan.mk =================================================================== --- branches/1.0/package/strongswan/strongswan.mk 2017-06-01 21:39:14 UTC (rev 8364) +++ branches/1.0/package/strongswan/strongswan.mk 2017-06-01 21:56:03 UTC (rev 8365) @@ -4,7 +4,7 @@ # ################################################################################ -STRONGSWAN_VERSION = 5.5.2 +STRONGSWAN_VERSION = 5.5.3 STRONGSWAN_SOURCE = strongswan-$(STRONGSWAN_VERSION).tar.bz2 STRONGSWAN_SITE = https://download.strongswan.org STRONGSWAN_DEPENDENCIES = openssl host-pkg-config This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site. |