|
From: <abe...@us...> - 2016-11-12 04:50:11
|
Revision: 7949
http://sourceforge.net/p/astlinux/code/7949
Author: abelbeck
Date: 2016-11-12 04:50:08 +0000 (Sat, 12 Nov 2016)
Log Message:
-----------
strongswan, 'stroke' must be enabled
Modified Paths:
--------------
branches/1.0/package/strongswan/strongswan.mk
Modified: branches/1.0/package/strongswan/strongswan.mk
===================================================================
--- branches/1.0/package/strongswan/strongswan.mk 2016-11-12 01:15:17 UTC (rev 7948)
+++ branches/1.0/package/strongswan/strongswan.mk 2016-11-12 04:50:08 UTC (rev 7949)
@@ -26,7 +26,7 @@
--enable-xauth-generic=yes \
--enable-xauth-eap=yes \
--enable-unity=no \
- --enable-stroke=no \
+ --enable-stroke=yes \
--enable-sqlite=$(if $(BR2_PACKAGE_STRONGSWAN_SQLITE),yes,no) \
--enable-sql=$(if $(BR2_PACKAGE_STRONGSWAN_SQLITE),yes,no) \
--enable-attr-sql=$(if $(BR2_PACKAGE_STRONGSWAN_SQLITE),yes,no) \
@@ -65,9 +65,10 @@
define STRONGSWAN_UNINSTALL_TARGET_CMDS
rm -rf $(TARGET_DIR)/usr/lib/ipsec
rm -rf $(TARGET_DIR)/usr/libexec/ipsec
- rm -rf $(TARGET_DIR)/etc/strongswan.d
+ rm -rf $(TARGET_DIR)/etc/strongswan.*
+ rm -rf $(TARGET_DIR)/etc/ipsec.*
+ rm -rf $(TARGET_DIR)/etc/swanctl
rm -rf $(TARGET_DIR)/usr/share/strongswan
- rm -f $(TARGET_DIR)/etc/strongswan.conf
rm -f $(TARGET_DIR)/etc/init.d/ipsec
rm -f $(TARGET_DIR)/etc/runlevels/default/S31ipsec
rm -f $(TARGET_DIR)/etc/runlevels/default/K20ipsec
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <abe...@us...> - 2016-11-12 23:42:41
|
Revision: 7951
http://sourceforge.net/p/astlinux/code/7951
Author: abelbeck
Date: 2016-11-12 23:42:38 +0000 (Sat, 12 Nov 2016)
Log Message:
-----------
strongswan, make /etc/swanctl symlink conditional on BR2_PACKAGE_STRONGSWAN_VICI value
Modified Paths:
--------------
branches/1.0/package/strongswan/strongswan.mk
Modified: branches/1.0/package/strongswan/strongswan.mk
===================================================================
--- branches/1.0/package/strongswan/strongswan.mk 2016-11-12 19:36:06 UTC (rev 7950)
+++ branches/1.0/package/strongswan/strongswan.mk 2016-11-12 23:42:38 UTC (rev 7951)
@@ -8,7 +8,7 @@
STRONGSWAN_SOURCE = strongswan-$(STRONGSWAN_VERSION).tar.bz2
STRONGSWAN_SITE = https://download.strongswan.org
STRONGSWAN_DEPENDENCIES = openssl host-pkg-config
-STRONGSWAN_TARGET_ETC = ipsec.conf ipsec.d ipsec.secrets strongswan.conf strongswan.d swanctl
+STRONGSWAN_TARGET_ETC = ipsec.conf ipsec.d ipsec.secrets strongswan.conf strongswan.d $(if $(BR2_PACKAGE_STRONGSWAN_VICI),swanctl)
STRONGSWAN_CONF_OPT += \
--without-lib-prefix \
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <abe...@us...> - 2016-11-13 12:46:50
|
Revision: 7952
http://sourceforge.net/p/astlinux/code/7952
Author: abelbeck
Date: 2016-11-13 12:46:47 +0000 (Sun, 13 Nov 2016)
Log Message:
-----------
strongswan, add back /usr/share/strongswan templates
Modified Paths:
--------------
branches/1.0/package/strongswan/strongswan.mk
Modified: branches/1.0/package/strongswan/strongswan.mk
===================================================================
--- branches/1.0/package/strongswan/strongswan.mk 2016-11-12 23:42:38 UTC (rev 7951)
+++ branches/1.0/package/strongswan/strongswan.mk 2016-11-13 12:46:47 UTC (rev 7952)
@@ -61,7 +61,6 @@
rm -rf $(TARGET_DIR)/etc/$$i ; \
ln -s /tmp/etc/strongswan/$$i $(TARGET_DIR)/etc/$$i ; \
done
- rm -rf $(TARGET_DIR)/usr/share/strongswan
$(INSTALL) -m 0755 -D package/strongswan/ipsec.init $(TARGET_DIR)/etc/init.d/ipsec
ln -sf ../../init.d/ipsec $(TARGET_DIR)/etc/runlevels/default/S31ipsec
ln -sf ../../init.d/ipsec $(TARGET_DIR)/etc/runlevels/default/K20ipsec
@@ -75,6 +74,7 @@
rm -rf $(TARGET_DIR)/stat/etc/strongswan
rm -rf $(TARGET_DIR)/usr/lib/ipsec
rm -rf $(TARGET_DIR)/usr/libexec/ipsec
+ rm -rf $(TARGET_DIR)/usr/share/strongswan
rm -f $(addprefix $(TARGET_DIR)/etc/, $(STRONGSWAN_TARGET_ETC))
rm -f $(TARGET_DIR)/etc/init.d/ipsec
rm -f $(TARGET_DIR)/etc/runlevels/default/S31ipsec
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <abe...@us...> - 2016-11-13 14:33:26
|
Revision: 7953
http://sourceforge.net/p/astlinux/code/7953
Author: abelbeck
Date: 2016-11-13 14:33:23 +0000 (Sun, 13 Nov 2016)
Log Message:
-----------
strongswan, disable building static libs
Modified Paths:
--------------
branches/1.0/package/strongswan/strongswan.mk
Modified: branches/1.0/package/strongswan/strongswan.mk
===================================================================
--- branches/1.0/package/strongswan/strongswan.mk 2016-11-13 12:46:47 UTC (rev 7952)
+++ branches/1.0/package/strongswan/strongswan.mk 2016-11-13 14:33:23 UTC (rev 7953)
@@ -11,6 +11,7 @@
STRONGSWAN_TARGET_ETC = ipsec.conf ipsec.d ipsec.secrets strongswan.conf strongswan.d $(if $(BR2_PACKAGE_STRONGSWAN_VICI),swanctl)
STRONGSWAN_CONF_OPT += \
+ --disable-static \
--without-lib-prefix \
--enable-led=no \
--enable-pkcs11=no \
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <abe...@us...> - 2016-11-13 16:07:36
|
Revision: 7954
http://sourceforge.net/p/astlinux/code/7954
Author: abelbeck
Date: 2016-11-13 16:07:33 +0000 (Sun, 13 Nov 2016)
Log Message:
-----------
strongswan, disable some crypto plugins so OpenSSL handles them, as per Debian and others
Modified Paths:
--------------
branches/1.0/package/strongswan/strongswan.mk
Modified: branches/1.0/package/strongswan/strongswan.mk
===================================================================
--- branches/1.0/package/strongswan/strongswan.mk 2016-11-13 14:33:23 UTC (rev 7953)
+++ branches/1.0/package/strongswan/strongswan.mk 2016-11-13 16:07:33 UTC (rev 7954)
@@ -38,6 +38,7 @@
--enable-scripts=no \
--enable-vici=$(if $(BR2_PACKAGE_STRONGSWAN_VICI),yes,no) \
--enable-swanctl=$(if $(BR2_PACKAGE_STRONGSWAN_VICI),yes,no) \
+ --enable-addrblock=yes \
--enable-cmd=yes
ifeq ($(BR2_PACKAGE_STRONGSWAN_EAP),y)
@@ -50,6 +51,16 @@
--enable-eap-peap
endif
+# Diable plugins so OpenSSL handles them
+STRONGSWAN_CONF_OPT += \
+ --disable-aes \
+ --disable-des \
+ --disable-rc2 \
+ --disable-md5 \
+ --disable-sha1 \
+ --disable-sha2 \
+ --disable-hmac
+
ifeq ($(BR2_PACKAGE_STRONGSWAN_SQLITE),y)
STRONGSWAN_DEPENDENCIES += \
$(if $(BR2_PACKAGE_SQLITE),sqlite)
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <abe...@us...> - 2016-11-18 20:58:21
|
Revision: 7965
http://sourceforge.net/p/astlinux/code/7965
Author: abelbeck
Date: 2016-11-18 20:58:18 +0000 (Fri, 18 Nov 2016)
Log Message:
-----------
strongswan, include the 'unity' plugin, if needed 'charon.cisco_unity=yes' must be added to /etc/strongswan.conf
Modified Paths:
--------------
branches/1.0/package/strongswan/strongswan.mk
Modified: branches/1.0/package/strongswan/strongswan.mk
===================================================================
--- branches/1.0/package/strongswan/strongswan.mk 2016-11-16 18:29:14 UTC (rev 7964)
+++ branches/1.0/package/strongswan/strongswan.mk 2016-11-18 20:58:18 UTC (rev 7965)
@@ -29,7 +29,7 @@
--enable-tnccs-dynamic=no \
--enable-xauth-generic=yes \
--enable-xauth-eap=yes \
- --enable-unity=no \
+ --enable-unity=yes \
--enable-stroke=yes \
--enable-sqlite=$(if $(BR2_PACKAGE_STRONGSWAN_SQLITE),yes,no) \
--enable-sql=$(if $(BR2_PACKAGE_STRONGSWAN_SQLITE),yes,no) \
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <abe...@us...> - 2017-03-30 13:41:18
|
Revision: 8248
http://sourceforge.net/p/astlinux/code/8248
Author: abelbeck
Date: 2017-03-30 13:41:15 +0000 (Thu, 30 Mar 2017)
Log Message:
-----------
strongswan, version bump to 5.5.2
Modified Paths:
--------------
branches/1.0/package/strongswan/strongswan.mk
Modified: branches/1.0/package/strongswan/strongswan.mk
===================================================================
--- branches/1.0/package/strongswan/strongswan.mk 2017-03-30 00:15:17 UTC (rev 8247)
+++ branches/1.0/package/strongswan/strongswan.mk 2017-03-30 13:41:15 UTC (rev 8248)
@@ -4,7 +4,7 @@
#
################################################################################
-STRONGSWAN_VERSION = 5.5.1
+STRONGSWAN_VERSION = 5.5.2
STRONGSWAN_SOURCE = strongswan-$(STRONGSWAN_VERSION).tar.bz2
STRONGSWAN_SITE = https://download.strongswan.org
STRONGSWAN_DEPENDENCIES = openssl host-pkg-config
@@ -27,6 +27,7 @@
--enable-tnccs-11=no \
--enable-tnccs-20=no \
--enable-tnccs-dynamic=no \
+ --enable-tpm=no \
--enable-xauth-generic=yes \
--enable-xauth-eap=yes \
--enable-unity=yes \
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|
|
From: <abe...@us...> - 2017-06-01 21:56:05
|
Revision: 8365
http://sourceforge.net/p/astlinux/code/8365
Author: abelbeck
Date: 2017-06-01 21:56:03 +0000 (Thu, 01 Jun 2017)
Log Message:
-----------
strongswan, version bump to 5.5.3, security fixes: CVE-2017-9022, CVE-2017-9023
Modified Paths:
--------------
branches/1.0/package/strongswan/strongswan.mk
Modified: branches/1.0/package/strongswan/strongswan.mk
===================================================================
--- branches/1.0/package/strongswan/strongswan.mk 2017-06-01 21:39:14 UTC (rev 8364)
+++ branches/1.0/package/strongswan/strongswan.mk 2017-06-01 21:56:03 UTC (rev 8365)
@@ -4,7 +4,7 @@
#
################################################################################
-STRONGSWAN_VERSION = 5.5.2
+STRONGSWAN_VERSION = 5.5.3
STRONGSWAN_SOURCE = strongswan-$(STRONGSWAN_VERSION).tar.bz2
STRONGSWAN_SITE = https://download.strongswan.org
STRONGSWAN_DEPENDENCIES = openssl host-pkg-config
This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.
|