bakabtw/packages
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
packages/net/strongswan4/Makefile

500 lines
14 KiB
Makefile
Raw Normal View History

[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
#
[PATCH] strongswan4 update to 4.5.1 This patch updates the strongswan4 package from 4.3.7 to 4.5.1. I have added the following plugins which get built as strongswan4-mod-<plugin> packages: constraints - X.509 constraint checking dhcp - DHCP-based IP and DNS farp - Fake arp responses led - LED blink on IKE activity revocation - X.509 revocation checking socket-default - Default socket for IKEv2 socket-raw - RAW socket of IKEv1 and IKEv2 xauth - XAUTH authentication Upstream default plugins were added to the strongswan4-default meta package. "socket-default" and "kernel-netlink" plugins were added to the strongswan4-minimal meta package since a socket and a kernel interface are required for a working setup and these are the upstream defaults in this case. The whack command was moved to strongswan4-app-pluto. The 202-clone.patch has been fixed upstream so it can be removed. The other patches were rebased for the new strongswan4 release. I have been using strongswan 4.5.1 with backfire and trunk for a couple weeks now. There are some missing kernel modules in trunk that are required for strongswan4 to work (also true for 4.3.7). There are already a couple of tickets on trac addressing these kernel modules: https://dev.openwrt.org/ticket/9234 https://dev.openwrt.org/ticket/8928 I also have my own patch that just packages all of the missing modules into a single kmod-crypto-ipsec package. It would be nice to get some discussion how these modules should be packaged so we can get working ipsec support in trunk. Signed-off-by: Lars Hjersted <lars at hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@26789 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-04-29 15:26:26 +00:00
# Copyright (C) 2010-2011 OpenWrt.org
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#
include $(TOPDIR)/rules.mk
PKG_NAME:=strongswan
[package] strongswan4: update to 4.5.3 Private libraries moved from /usr/lib to /usr/lib/ipsec. Signed-off-by: Lars Hjersted <lars@hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@28016 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-08-16 20:34:20 +00:00
PKG_VERSION:=4.5.3
[package] update to strongswan4 4.3.7 (#7884) git-svn-id: svn://svn.openwrt.org/openwrt/packages@23009 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-09-11 18:38:24 +00:00
PKG_RELEASE:=1
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2
PKG_SOURCE_URL:=http://download.strongswan.org/
[package] strongswan4: update to 4.5.3 Private libraries moved from /usr/lib to /usr/lib/ipsec. Signed-off-by: Lars Hjersted <lars@hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@28016 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-08-16 20:34:20 +00:00
PKG_MD5SUM:=ee7c50a90c91307b111e8085f2479890
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
[packages] strongswan4: rebuild when plugin selection is changed git-svn-id: svn://svn.openwrt.org/openwrt/packages@20977 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-18 00:57:17 +00:00
PKG_MOD_AVAILABLE:= \
aes \
[package] strongswan4: add af-alg plugin * Add kernel crypto user-space interface plugin (strongswan4-mod-af-alg) * Requires kmod-crypto-user Signed-off-by: Lars Hjersted <lars@hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@28017 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-08-16 20:34:22 +00:00
af-alg \
[packages] strongswan4: rebuild when plugin selection is changed git-svn-id: svn://svn.openwrt.org/openwrt/packages@20977 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-18 00:57:17 +00:00
agent \
attr \
attr-sql \
blowfish \
[PATCH] strongswan4 update to 4.5.1 This patch updates the strongswan4 package from 4.3.7 to 4.5.1. I have added the following plugins which get built as strongswan4-mod-<plugin> packages: constraints - X.509 constraint checking dhcp - DHCP-based IP and DNS farp - Fake arp responses led - LED blink on IKE activity revocation - X.509 revocation checking socket-default - Default socket for IKEv2 socket-raw - RAW socket of IKEv1 and IKEv2 xauth - XAUTH authentication Upstream default plugins were added to the strongswan4-default meta package. "socket-default" and "kernel-netlink" plugins were added to the strongswan4-minimal meta package since a socket and a kernel interface are required for a working setup and these are the upstream defaults in this case. The whack command was moved to strongswan4-app-pluto. The 202-clone.patch has been fixed upstream so it can be removed. The other patches were rebased for the new strongswan4 release. I have been using strongswan 4.5.1 with backfire and trunk for a couple weeks now. There are some missing kernel modules in trunk that are required for strongswan4 to work (also true for 4.3.7). There are already a couple of tickets on trac addressing these kernel modules: https://dev.openwrt.org/ticket/9234 https://dev.openwrt.org/ticket/8928 I also have my own patch that just packages all of the missing modules into a single kmod-crypto-ipsec package. It would be nice to get some discussion how these modules should be packaged so we can get working ipsec support in trunk. Signed-off-by: Lars Hjersted <lars at hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@26789 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-04-29 15:26:26 +00:00
constraints \
[package] update strongswan4 to 4.5.2 Update version of strongswan4 package from 4.5.1 to 4.5.2. Add new strongswan4 plugins: coupling, duplicheck, whitelist. Add strongswan4-libfast package and make build dependencies on clearsilver and fcgi conditional. Previously libfast was being built, but not packaged. Now libfast will only be built when the it's package is selected. Remove ipsec.conf and strongswan.conf and use configuration files from upstream instead. The previously provided strongswan.conf was not functional. Omit strongswan4-mod-kernel-klips from strongswan4-full meta package in favor of strongswan4-mod-kernel-netlink. Only one of these two kernel interfaces should be installed. Omit strongswan4-mod-socket-default from strongswan4-full meta package in favor of strongswan4-mod-socket-raw. Only the raw socket allows charon to run while pluto is also running. Make all build dependencies on libraries required by strongswan4 plugins conditional. Signed-off-by: Lars Hjersted <lars@hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@27092 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-06-02 14:24:20 +00:00
coupling \
[packages] strongswan4: rebuild when plugin selection is changed git-svn-id: svn://svn.openwrt.org/openwrt/packages@20977 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-18 00:57:17 +00:00
curl \
des \
[PATCH] strongswan4 update to 4.5.1 This patch updates the strongswan4 package from 4.3.7 to 4.5.1. I have added the following plugins which get built as strongswan4-mod-<plugin> packages: constraints - X.509 constraint checking dhcp - DHCP-based IP and DNS farp - Fake arp responses led - LED blink on IKE activity revocation - X.509 revocation checking socket-default - Default socket for IKEv2 socket-raw - RAW socket of IKEv1 and IKEv2 xauth - XAUTH authentication Upstream default plugins were added to the strongswan4-default meta package. "socket-default" and "kernel-netlink" plugins were added to the strongswan4-minimal meta package since a socket and a kernel interface are required for a working setup and these are the upstream defaults in this case. The whack command was moved to strongswan4-app-pluto. The 202-clone.patch has been fixed upstream so it can be removed. The other patches were rebased for the new strongswan4 release. I have been using strongswan 4.5.1 with backfire and trunk for a couple weeks now. There are some missing kernel modules in trunk that are required for strongswan4 to work (also true for 4.3.7). There are already a couple of tickets on trac addressing these kernel modules: https://dev.openwrt.org/ticket/9234 https://dev.openwrt.org/ticket/8928 I also have my own patch that just packages all of the missing modules into a single kmod-crypto-ipsec package. It would be nice to get some discussion how these modules should be packaged so we can get working ipsec support in trunk. Signed-off-by: Lars Hjersted <lars at hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@26789 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-04-29 15:26:26 +00:00
dhcp \
[packages] strongswan4: rebuild when plugin selection is changed git-svn-id: svn://svn.openwrt.org/openwrt/packages@20977 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-18 00:57:17 +00:00
dnskey \
[package] update strongswan4 to 4.5.2 Update version of strongswan4 package from 4.5.1 to 4.5.2. Add new strongswan4 plugins: coupling, duplicheck, whitelist. Add strongswan4-libfast package and make build dependencies on clearsilver and fcgi conditional. Previously libfast was being built, but not packaged. Now libfast will only be built when the it's package is selected. Remove ipsec.conf and strongswan.conf and use configuration files from upstream instead. The previously provided strongswan.conf was not functional. Omit strongswan4-mod-kernel-klips from strongswan4-full meta package in favor of strongswan4-mod-kernel-netlink. Only one of these two kernel interfaces should be installed. Omit strongswan4-mod-socket-default from strongswan4-full meta package in favor of strongswan4-mod-socket-raw. Only the raw socket allows charon to run while pluto is also running. Make all build dependencies on libraries required by strongswan4 plugins conditional. Signed-off-by: Lars Hjersted <lars@hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@27092 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-06-02 14:24:20 +00:00
duplicheck \
[packages] strongswan4: rebuild when plugin selection is changed git-svn-id: svn://svn.openwrt.org/openwrt/packages@20977 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-18 00:57:17 +00:00
eap-md5 \
eap-mschapv2 \
eap-radius \
[PATCH] strongswan4 update to 4.5.1 This patch updates the strongswan4 package from 4.3.7 to 4.5.1. I have added the following plugins which get built as strongswan4-mod-<plugin> packages: constraints - X.509 constraint checking dhcp - DHCP-based IP and DNS farp - Fake arp responses led - LED blink on IKE activity revocation - X.509 revocation checking socket-default - Default socket for IKEv2 socket-raw - RAW socket of IKEv1 and IKEv2 xauth - XAUTH authentication Upstream default plugins were added to the strongswan4-default meta package. "socket-default" and "kernel-netlink" plugins were added to the strongswan4-minimal meta package since a socket and a kernel interface are required for a working setup and these are the upstream defaults in this case. The whack command was moved to strongswan4-app-pluto. The 202-clone.patch has been fixed upstream so it can be removed. The other patches were rebased for the new strongswan4 release. I have been using strongswan 4.5.1 with backfire and trunk for a couple weeks now. There are some missing kernel modules in trunk that are required for strongswan4 to work (also true for 4.3.7). There are already a couple of tickets on trac addressing these kernel modules: https://dev.openwrt.org/ticket/9234 https://dev.openwrt.org/ticket/8928 I also have my own patch that just packages all of the missing modules into a single kmod-crypto-ipsec package. It would be nice to get some discussion how these modules should be packaged so we can get working ipsec support in trunk. Signed-off-by: Lars Hjersted <lars at hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@26789 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-04-29 15:26:26 +00:00
farp \
[packages] strongswan4: rebuild when plugin selection is changed git-svn-id: svn://svn.openwrt.org/openwrt/packages@20977 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-18 00:57:17 +00:00
fips-prf \
gcrypt \
gmp \
hmac \
kernel-klips \
kernel-netlink \
kernel-pfkey \
ldap \
[PATCH] strongswan4 update to 4.5.1 This patch updates the strongswan4 package from 4.3.7 to 4.5.1. I have added the following plugins which get built as strongswan4-mod-<plugin> packages: constraints - X.509 constraint checking dhcp - DHCP-based IP and DNS farp - Fake arp responses led - LED blink on IKE activity revocation - X.509 revocation checking socket-default - Default socket for IKEv2 socket-raw - RAW socket of IKEv1 and IKEv2 xauth - XAUTH authentication Upstream default plugins were added to the strongswan4-default meta package. "socket-default" and "kernel-netlink" plugins were added to the strongswan4-minimal meta package since a socket and a kernel interface are required for a working setup and these are the upstream defaults in this case. The whack command was moved to strongswan4-app-pluto. The 202-clone.patch has been fixed upstream so it can be removed. The other patches were rebased for the new strongswan4 release. I have been using strongswan 4.5.1 with backfire and trunk for a couple weeks now. There are some missing kernel modules in trunk that are required for strongswan4 to work (also true for 4.3.7). There are already a couple of tickets on trac addressing these kernel modules: https://dev.openwrt.org/ticket/9234 https://dev.openwrt.org/ticket/8928 I also have my own patch that just packages all of the missing modules into a single kmod-crypto-ipsec package. It would be nice to get some discussion how these modules should be packaged so we can get working ipsec support in trunk. Signed-off-by: Lars Hjersted <lars at hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@26789 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-04-29 15:26:26 +00:00
led \
[packages] strongswan4: rebuild when plugin selection is changed git-svn-id: svn://svn.openwrt.org/openwrt/packages@20977 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-18 00:57:17 +00:00
load-tester \
md5 \
medcli \
medsrv \
mysql \
padlock \
pem \
pgp \
pkcs1 \
pubkey \
random \
resolve \
[PATCH] strongswan4 update to 4.5.1 This patch updates the strongswan4 package from 4.3.7 to 4.5.1. I have added the following plugins which get built as strongswan4-mod-<plugin> packages: constraints - X.509 constraint checking dhcp - DHCP-based IP and DNS farp - Fake arp responses led - LED blink on IKE activity revocation - X.509 revocation checking socket-default - Default socket for IKEv2 socket-raw - RAW socket of IKEv1 and IKEv2 xauth - XAUTH authentication Upstream default plugins were added to the strongswan4-default meta package. "socket-default" and "kernel-netlink" plugins were added to the strongswan4-minimal meta package since a socket and a kernel interface are required for a working setup and these are the upstream defaults in this case. The whack command was moved to strongswan4-app-pluto. The 202-clone.patch has been fixed upstream so it can be removed. The other patches were rebased for the new strongswan4 release. I have been using strongswan 4.5.1 with backfire and trunk for a couple weeks now. There are some missing kernel modules in trunk that are required for strongswan4 to work (also true for 4.3.7). There are already a couple of tickets on trac addressing these kernel modules: https://dev.openwrt.org/ticket/9234 https://dev.openwrt.org/ticket/8928 I also have my own patch that just packages all of the missing modules into a single kmod-crypto-ipsec package. It would be nice to get some discussion how these modules should be packaged so we can get working ipsec support in trunk. Signed-off-by: Lars Hjersted <lars at hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@26789 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-04-29 15:26:26 +00:00
revocation \
[packages] strongswan4: rebuild when plugin selection is changed git-svn-id: svn://svn.openwrt.org/openwrt/packages@20977 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-18 00:57:17 +00:00
sha1 \
sha2 \
smp \
[PATCH] strongswan4 update to 4.5.1 This patch updates the strongswan4 package from 4.3.7 to 4.5.1. I have added the following plugins which get built as strongswan4-mod-<plugin> packages: constraints - X.509 constraint checking dhcp - DHCP-based IP and DNS farp - Fake arp responses led - LED blink on IKE activity revocation - X.509 revocation checking socket-default - Default socket for IKEv2 socket-raw - RAW socket of IKEv1 and IKEv2 xauth - XAUTH authentication Upstream default plugins were added to the strongswan4-default meta package. "socket-default" and "kernel-netlink" plugins were added to the strongswan4-minimal meta package since a socket and a kernel interface are required for a working setup and these are the upstream defaults in this case. The whack command was moved to strongswan4-app-pluto. The 202-clone.patch has been fixed upstream so it can be removed. The other patches were rebased for the new strongswan4 release. I have been using strongswan 4.5.1 with backfire and trunk for a couple weeks now. There are some missing kernel modules in trunk that are required for strongswan4 to work (also true for 4.3.7). There are already a couple of tickets on trac addressing these kernel modules: https://dev.openwrt.org/ticket/9234 https://dev.openwrt.org/ticket/8928 I also have my own patch that just packages all of the missing modules into a single kmod-crypto-ipsec package. It would be nice to get some discussion how these modules should be packaged so we can get working ipsec support in trunk. Signed-off-by: Lars Hjersted <lars at hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@26789 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-04-29 15:26:26 +00:00
socket-default \
socket-raw \
[packages] strongswan4: rebuild when plugin selection is changed git-svn-id: svn://svn.openwrt.org/openwrt/packages@20977 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-18 00:57:17 +00:00
sql \
sqlite \
stroke \
uci \
updown \
[package] update strongswan4 to 4.5.2 Update version of strongswan4 package from 4.5.1 to 4.5.2. Add new strongswan4 plugins: coupling, duplicheck, whitelist. Add strongswan4-libfast package and make build dependencies on clearsilver and fcgi conditional. Previously libfast was being built, but not packaged. Now libfast will only be built when the it's package is selected. Remove ipsec.conf and strongswan.conf and use configuration files from upstream instead. The previously provided strongswan.conf was not functional. Omit strongswan4-mod-kernel-klips from strongswan4-full meta package in favor of strongswan4-mod-kernel-netlink. Only one of these two kernel interfaces should be installed. Omit strongswan4-mod-socket-default from strongswan4-full meta package in favor of strongswan4-mod-socket-raw. Only the raw socket allows charon to run while pluto is also running. Make all build dependencies on libraries required by strongswan4 plugins conditional. Signed-off-by: Lars Hjersted <lars@hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@27092 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-06-02 14:24:20 +00:00
whitelist \
[packages] strongswan4: rebuild when plugin selection is changed git-svn-id: svn://svn.openwrt.org/openwrt/packages@20977 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-18 00:57:17 +00:00
x509 \
[PATCH] strongswan4 update to 4.5.1 This patch updates the strongswan4 package from 4.3.7 to 4.5.1. I have added the following plugins which get built as strongswan4-mod-<plugin> packages: constraints - X.509 constraint checking dhcp - DHCP-based IP and DNS farp - Fake arp responses led - LED blink on IKE activity revocation - X.509 revocation checking socket-default - Default socket for IKEv2 socket-raw - RAW socket of IKEv1 and IKEv2 xauth - XAUTH authentication Upstream default plugins were added to the strongswan4-default meta package. "socket-default" and "kernel-netlink" plugins were added to the strongswan4-minimal meta package since a socket and a kernel interface are required for a working setup and these are the upstream defaults in this case. The whack command was moved to strongswan4-app-pluto. The 202-clone.patch has been fixed upstream so it can be removed. The other patches were rebased for the new strongswan4 release. I have been using strongswan 4.5.1 with backfire and trunk for a couple weeks now. There are some missing kernel modules in trunk that are required for strongswan4 to work (also true for 4.3.7). There are already a couple of tickets on trac addressing these kernel modules: https://dev.openwrt.org/ticket/9234 https://dev.openwrt.org/ticket/8928 I also have my own patch that just packages all of the missing modules into a single kmod-crypto-ipsec package. It would be nice to get some discussion how these modules should be packaged so we can get working ipsec support in trunk. Signed-off-by: Lars Hjersted <lars at hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@26789 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-04-29 15:26:26 +00:00
xauth \
[packages] strongswan4: rebuild when plugin selection is changed git-svn-id: svn://svn.openwrt.org/openwrt/packages@20977 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-18 00:57:17 +00:00
xcbc \
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
PKG_BUILD_DEPENDS:= \
[package] update strongswan4 to 4.5.2 Update version of strongswan4 package from 4.5.1 to 4.5.2. Add new strongswan4 plugins: coupling, duplicheck, whitelist. Add strongswan4-libfast package and make build dependencies on clearsilver and fcgi conditional. Previously libfast was being built, but not packaged. Now libfast will only be built when the it's package is selected. Remove ipsec.conf and strongswan.conf and use configuration files from upstream instead. The previously provided strongswan.conf was not functional. Omit strongswan4-mod-kernel-klips from strongswan4-full meta package in favor of strongswan4-mod-kernel-netlink. Only one of these two kernel interfaces should be installed. Omit strongswan4-mod-socket-default from strongswan4-full meta package in favor of strongswan4-mod-socket-raw. Only the raw socket allows charon to run while pluto is also running. Make all build dependencies on libraries required by strongswan4 plugins conditional. Signed-off-by: Lars Hjersted <lars@hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@27092 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-06-02 14:24:20 +00:00
PACKAGE_strongswan4-libfast:clearsilver \
PACKAGE_strongswan4-libfast:fcgi \
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
[packages] strongswan4: rebuild when plugin selection is changed git-svn-id: svn://svn.openwrt.org/openwrt/packages@20977 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-18 00:57:17 +00:00
PKG_CONFIG_DEPENDS:= \
CONFIG_STRONGSWAN4_ENABLE_CISCO_QUIRKS \
CONFIG_STRONGSWAN4_ENABLE_NAT_TRANSPORT \
[packages] strongswan4: move in VPN submenu, add 2 more config options and changes from #2538: * add a strongswan4-default package (matching upstream autoconf defaults) * add dependency on kmod-crypto-authenc * fix 2 typos git-svn-id: svn://svn.openwrt.org/openwrt/packages@21099 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-23 03:31:40 +00:00
CONFIG_STRONGSWAN4_ENABLE_VENDOR_ID \
CONFIG_STRONGSWAN4_ENABLE_XAUTH_VID \
[packages] strongswan4: rebuild when plugin selection is changed git-svn-id: svn://svn.openwrt.org/openwrt/packages@20977 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-18 00:57:17 +00:00
CONFIG_STRONGSWAN4_DEVICE_RANDOM \
CONFIG_STRONGSWAN4_DEVICE_URANDOM \
CONFIG_STRONGSWAN4_ROUTING_TABLE \
CONFIG_STRONGSWAN4_ROUTING_TABLE_PRIO \
$(patsubst %,CONFIG_PACKAGE_strongswan4-mod-%,$(PKG_MOD_AVAILABLE)) \
[PATCH] strongswan4 update to 4.5.1 This patch updates the strongswan4 package from 4.3.7 to 4.5.1. I have added the following plugins which get built as strongswan4-mod-<plugin> packages: constraints - X.509 constraint checking dhcp - DHCP-based IP and DNS farp - Fake arp responses led - LED blink on IKE activity revocation - X.509 revocation checking socket-default - Default socket for IKEv2 socket-raw - RAW socket of IKEv1 and IKEv2 xauth - XAUTH authentication Upstream default plugins were added to the strongswan4-default meta package. "socket-default" and "kernel-netlink" plugins were added to the strongswan4-minimal meta package since a socket and a kernel interface are required for a working setup and these are the upstream defaults in this case. The whack command was moved to strongswan4-app-pluto. The 202-clone.patch has been fixed upstream so it can be removed. The other patches were rebased for the new strongswan4 release. I have been using strongswan 4.5.1 with backfire and trunk for a couple weeks now. There are some missing kernel modules in trunk that are required for strongswan4 to work (also true for 4.3.7). There are already a couple of tickets on trac addressing these kernel modules: https://dev.openwrt.org/ticket/9234 https://dev.openwrt.org/ticket/8928 I also have my own patch that just packages all of the missing modules into a single kmod-crypto-ipsec package. It would be nice to get some discussion how these modules should be packaged so we can get working ipsec support in trunk. Signed-off-by: Lars Hjersted <lars at hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@26789 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-04-29 15:26:26 +00:00
PKG_FIXUP:=autoreconf
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
PKG_INSTALL:=1
strongswan4: Enable parallel build git-svn-id: svn://svn.openwrt.org/openwrt/packages@23849 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-11-04 00:51:55 +00:00
PKG_BUILD_PARALLEL:=1
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
include $(INCLUDE_DIR)/package.mk
define Package/strongswan4/Default
[packages] strongswan4: move in VPN submenu, add 2 more config options and changes from #2538: * add a strongswan4-default package (matching upstream autoconf defaults) * add dependency on kmod-crypto-authenc * fix 2 typos git-svn-id: svn://svn.openwrt.org/openwrt/packages@21099 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-23 03:31:40 +00:00
SUBMENU:=VPN
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
SECTION:=net
CATEGORY:=Network
TITLE:=StrongSwan
URL:=http://www.strongswan.org/
endef
define Package/strongswan4/description/Default
StrongSwan is an OpenSource IPsec implementation for the Linux
operating system.
endef
define Package/strongswan4
$(call Package/strongswan4/Default)
DEPENDS:= +libpthread +ip \
[packages] strongswan4: move in VPN submenu, add 2 more config options and changes from #2538: * add a strongswan4-default package (matching upstream autoconf defaults) * add dependency on kmod-crypto-authenc * fix 2 typos git-svn-id: svn://svn.openwrt.org/openwrt/packages@21099 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-23 03:31:40 +00:00
+kmod-crypto-authenc \
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
+kmod-ipsec +kmod-ipsec4 \
+kmod-ipt-ipsec +iptables-mod-ipsec
endef
define Package/strongswan4/config
[packages] strongswan4: fix dependencies, cleanup * make strongswan4-default & strongswan4-minimal installable again * mark strongswan4-full as DEVEL (closes: #9508) git-svn-id: svn://svn.openwrt.org/openwrt/packages@28517 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-10-22 13:04:19 +00:00
source "$(SOURCE)/Config.in"
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
endef
define Package/strongswan4/description
$(call Package/strongswan4/description/Default)
.
This package contains shared libraries and scripts.
endef
define Package/strongswan4-full
$(call Package/strongswan4/Default)
TITLE+= (full)
[packages] strongswan4: fix dependencies, cleanup * make strongswan4-default & strongswan4-minimal installable again * mark strongswan4-full as DEVEL (closes: #9508) git-svn-id: svn://svn.openwrt.org/openwrt/packages@28517 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-10-22 13:04:19 +00:00
DEPENDS:= +strongswan4 \
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
+strongswan4-app-charon \
+strongswan4-app-pluto \
[package] update strongswan4 to 4.5.2 Update version of strongswan4 package from 4.5.1 to 4.5.2. Add new strongswan4 plugins: coupling, duplicheck, whitelist. Add strongswan4-libfast package and make build dependencies on clearsilver and fcgi conditional. Previously libfast was being built, but not packaged. Now libfast will only be built when the it's package is selected. Remove ipsec.conf and strongswan.conf and use configuration files from upstream instead. The previously provided strongswan.conf was not functional. Omit strongswan4-mod-kernel-klips from strongswan4-full meta package in favor of strongswan4-mod-kernel-netlink. Only one of these two kernel interfaces should be installed. Omit strongswan4-mod-socket-default from strongswan4-full meta package in favor of strongswan4-mod-socket-raw. Only the raw socket allows charon to run while pluto is also running. Make all build dependencies on libraries required by strongswan4 plugins conditional. Signed-off-by: Lars Hjersted <lars@hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@27092 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-06-02 14:24:20 +00:00
+strongswan4-libfast \
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
+strongswan4-mod-aes \
[package] strongswan4: add af-alg plugin * Add kernel crypto user-space interface plugin (strongswan4-mod-af-alg) * Requires kmod-crypto-user Signed-off-by: Lars Hjersted <lars@hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@28017 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-08-16 20:34:22 +00:00
+strongswan4-mod-af-alg \
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
+strongswan4-mod-agent \
+strongswan4-mod-attr \
+strongswan4-mod-attr-sql \
+strongswan4-mod-blowfish \
[PATCH] strongswan4 update to 4.5.1 This patch updates the strongswan4 package from 4.3.7 to 4.5.1. I have added the following plugins which get built as strongswan4-mod-<plugin> packages: constraints - X.509 constraint checking dhcp - DHCP-based IP and DNS farp - Fake arp responses led - LED blink on IKE activity revocation - X.509 revocation checking socket-default - Default socket for IKEv2 socket-raw - RAW socket of IKEv1 and IKEv2 xauth - XAUTH authentication Upstream default plugins were added to the strongswan4-default meta package. "socket-default" and "kernel-netlink" plugins were added to the strongswan4-minimal meta package since a socket and a kernel interface are required for a working setup and these are the upstream defaults in this case. The whack command was moved to strongswan4-app-pluto. The 202-clone.patch has been fixed upstream so it can be removed. The other patches were rebased for the new strongswan4 release. I have been using strongswan 4.5.1 with backfire and trunk for a couple weeks now. There are some missing kernel modules in trunk that are required for strongswan4 to work (also true for 4.3.7). There are already a couple of tickets on trac addressing these kernel modules: https://dev.openwrt.org/ticket/9234 https://dev.openwrt.org/ticket/8928 I also have my own patch that just packages all of the missing modules into a single kmod-crypto-ipsec package. It would be nice to get some discussion how these modules should be packaged so we can get working ipsec support in trunk. Signed-off-by: Lars Hjersted <lars at hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@26789 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-04-29 15:26:26 +00:00
+strongswan4-mod-constraints \
[package] update strongswan4 to 4.5.2 Update version of strongswan4 package from 4.5.1 to 4.5.2. Add new strongswan4 plugins: coupling, duplicheck, whitelist. Add strongswan4-libfast package and make build dependencies on clearsilver and fcgi conditional. Previously libfast was being built, but not packaged. Now libfast will only be built when the it's package is selected. Remove ipsec.conf and strongswan.conf and use configuration files from upstream instead. The previously provided strongswan.conf was not functional. Omit strongswan4-mod-kernel-klips from strongswan4-full meta package in favor of strongswan4-mod-kernel-netlink. Only one of these two kernel interfaces should be installed. Omit strongswan4-mod-socket-default from strongswan4-full meta package in favor of strongswan4-mod-socket-raw. Only the raw socket allows charon to run while pluto is also running. Make all build dependencies on libraries required by strongswan4 plugins conditional. Signed-off-by: Lars Hjersted <lars@hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@27092 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-06-02 14:24:20 +00:00
+strongswan4-mod-coupling \
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
+strongswan4-mod-curl \
+strongswan4-mod-des \
[PATCH] strongswan4 update to 4.5.1 This patch updates the strongswan4 package from 4.3.7 to 4.5.1. I have added the following plugins which get built as strongswan4-mod-<plugin> packages: constraints - X.509 constraint checking dhcp - DHCP-based IP and DNS farp - Fake arp responses led - LED blink on IKE activity revocation - X.509 revocation checking socket-default - Default socket for IKEv2 socket-raw - RAW socket of IKEv1 and IKEv2 xauth - XAUTH authentication Upstream default plugins were added to the strongswan4-default meta package. "socket-default" and "kernel-netlink" plugins were added to the strongswan4-minimal meta package since a socket and a kernel interface are required for a working setup and these are the upstream defaults in this case. The whack command was moved to strongswan4-app-pluto. The 202-clone.patch has been fixed upstream so it can be removed. The other patches were rebased for the new strongswan4 release. I have been using strongswan 4.5.1 with backfire and trunk for a couple weeks now. There are some missing kernel modules in trunk that are required for strongswan4 to work (also true for 4.3.7). There are already a couple of tickets on trac addressing these kernel modules: https://dev.openwrt.org/ticket/9234 https://dev.openwrt.org/ticket/8928 I also have my own patch that just packages all of the missing modules into a single kmod-crypto-ipsec package. It would be nice to get some discussion how these modules should be packaged so we can get working ipsec support in trunk. Signed-off-by: Lars Hjersted <lars at hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@26789 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-04-29 15:26:26 +00:00
+strongswan4-mod-dhcp \
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
+strongswan4-mod-dnskey \
[package] update strongswan4 to 4.5.2 Update version of strongswan4 package from 4.5.1 to 4.5.2. Add new strongswan4 plugins: coupling, duplicheck, whitelist. Add strongswan4-libfast package and make build dependencies on clearsilver and fcgi conditional. Previously libfast was being built, but not packaged. Now libfast will only be built when the it's package is selected. Remove ipsec.conf and strongswan.conf and use configuration files from upstream instead. The previously provided strongswan.conf was not functional. Omit strongswan4-mod-kernel-klips from strongswan4-full meta package in favor of strongswan4-mod-kernel-netlink. Only one of these two kernel interfaces should be installed. Omit strongswan4-mod-socket-default from strongswan4-full meta package in favor of strongswan4-mod-socket-raw. Only the raw socket allows charon to run while pluto is also running. Make all build dependencies on libraries required by strongswan4 plugins conditional. Signed-off-by: Lars Hjersted <lars@hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@27092 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-06-02 14:24:20 +00:00
+strongswan4-mod-duplicheck \
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
+strongswan4-mod-eap-md5 \
+strongswan4-mod-eap-mschapv2 \
+strongswan4-mod-eap-radius \
[PATCH] strongswan4 update to 4.5.1 This patch updates the strongswan4 package from 4.3.7 to 4.5.1. I have added the following plugins which get built as strongswan4-mod-<plugin> packages: constraints - X.509 constraint checking dhcp - DHCP-based IP and DNS farp - Fake arp responses led - LED blink on IKE activity revocation - X.509 revocation checking socket-default - Default socket for IKEv2 socket-raw - RAW socket of IKEv1 and IKEv2 xauth - XAUTH authentication Upstream default plugins were added to the strongswan4-default meta package. "socket-default" and "kernel-netlink" plugins were added to the strongswan4-minimal meta package since a socket and a kernel interface are required for a working setup and these are the upstream defaults in this case. The whack command was moved to strongswan4-app-pluto. The 202-clone.patch has been fixed upstream so it can be removed. The other patches were rebased for the new strongswan4 release. I have been using strongswan 4.5.1 with backfire and trunk for a couple weeks now. There are some missing kernel modules in trunk that are required for strongswan4 to work (also true for 4.3.7). There are already a couple of tickets on trac addressing these kernel modules: https://dev.openwrt.org/ticket/9234 https://dev.openwrt.org/ticket/8928 I also have my own patch that just packages all of the missing modules into a single kmod-crypto-ipsec package. It would be nice to get some discussion how these modules should be packaged so we can get working ipsec support in trunk. Signed-off-by: Lars Hjersted <lars at hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@26789 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-04-29 15:26:26 +00:00
+strongswan4-mod-farp \
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
+strongswan4-mod-fips-prf \
+strongswan4-mod-gcrypt \
+strongswan4-mod-gmp \
+strongswan4-mod-hmac \
+strongswan4-mod-kernel-netlink \
+strongswan4-mod-kernel-pfkey \
+strongswan4-mod-ldap \
[PATCH] strongswan4 update to 4.5.1 This patch updates the strongswan4 package from 4.3.7 to 4.5.1. I have added the following plugins which get built as strongswan4-mod-<plugin> packages: constraints - X.509 constraint checking dhcp - DHCP-based IP and DNS farp - Fake arp responses led - LED blink on IKE activity revocation - X.509 revocation checking socket-default - Default socket for IKEv2 socket-raw - RAW socket of IKEv1 and IKEv2 xauth - XAUTH authentication Upstream default plugins were added to the strongswan4-default meta package. "socket-default" and "kernel-netlink" plugins were added to the strongswan4-minimal meta package since a socket and a kernel interface are required for a working setup and these are the upstream defaults in this case. The whack command was moved to strongswan4-app-pluto. The 202-clone.patch has been fixed upstream so it can be removed. The other patches were rebased for the new strongswan4 release. I have been using strongswan 4.5.1 with backfire and trunk for a couple weeks now. There are some missing kernel modules in trunk that are required for strongswan4 to work (also true for 4.3.7). There are already a couple of tickets on trac addressing these kernel modules: https://dev.openwrt.org/ticket/9234 https://dev.openwrt.org/ticket/8928 I also have my own patch that just packages all of the missing modules into a single kmod-crypto-ipsec package. It would be nice to get some discussion how these modules should be packaged so we can get working ipsec support in trunk. Signed-off-by: Lars Hjersted <lars at hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@26789 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-04-29 15:26:26 +00:00
+strongswan4-mod-led \
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
+strongswan4-mod-load-tester \
+strongswan4-mod-md5 \
+strongswan4-mod-medcli \
+strongswan4-mod-medsrv \
+strongswan4-mod-mysql \
[packages] strongswan4: mark padlock plugin as x86 only git-svn-id: svn://svn.openwrt.org/openwrt/packages@21106 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-23 10:56:37 +00:00
+TARGET_x86:strongswan4-mod-padlock \
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
+strongswan4-mod-pem \
+strongswan4-mod-pgp \
+strongswan4-mod-pkcs1 \
+strongswan4-mod-pubkey \
+strongswan4-mod-random \
+strongswan4-mod-resolve \
[PATCH] strongswan4 update to 4.5.1 This patch updates the strongswan4 package from 4.3.7 to 4.5.1. I have added the following plugins which get built as strongswan4-mod-<plugin> packages: constraints - X.509 constraint checking dhcp - DHCP-based IP and DNS farp - Fake arp responses led - LED blink on IKE activity revocation - X.509 revocation checking socket-default - Default socket for IKEv2 socket-raw - RAW socket of IKEv1 and IKEv2 xauth - XAUTH authentication Upstream default plugins were added to the strongswan4-default meta package. "socket-default" and "kernel-netlink" plugins were added to the strongswan4-minimal meta package since a socket and a kernel interface are required for a working setup and these are the upstream defaults in this case. The whack command was moved to strongswan4-app-pluto. The 202-clone.patch has been fixed upstream so it can be removed. The other patches were rebased for the new strongswan4 release. I have been using strongswan 4.5.1 with backfire and trunk for a couple weeks now. There are some missing kernel modules in trunk that are required for strongswan4 to work (also true for 4.3.7). There are already a couple of tickets on trac addressing these kernel modules: https://dev.openwrt.org/ticket/9234 https://dev.openwrt.org/ticket/8928 I also have my own patch that just packages all of the missing modules into a single kmod-crypto-ipsec package. It would be nice to get some discussion how these modules should be packaged so we can get working ipsec support in trunk. Signed-off-by: Lars Hjersted <lars at hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@26789 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-04-29 15:26:26 +00:00
+strongswan4-mod-revocation \
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
+strongswan4-mod-sha1 \
+strongswan4-mod-sha2 \
+strongswan4-mod-smp \
[PATCH] strongswan4 update to 4.5.1 This patch updates the strongswan4 package from 4.3.7 to 4.5.1. I have added the following plugins which get built as strongswan4-mod-<plugin> packages: constraints - X.509 constraint checking dhcp - DHCP-based IP and DNS farp - Fake arp responses led - LED blink on IKE activity revocation - X.509 revocation checking socket-default - Default socket for IKEv2 socket-raw - RAW socket of IKEv1 and IKEv2 xauth - XAUTH authentication Upstream default plugins were added to the strongswan4-default meta package. "socket-default" and "kernel-netlink" plugins were added to the strongswan4-minimal meta package since a socket and a kernel interface are required for a working setup and these are the upstream defaults in this case. The whack command was moved to strongswan4-app-pluto. The 202-clone.patch has been fixed upstream so it can be removed. The other patches were rebased for the new strongswan4 release. I have been using strongswan 4.5.1 with backfire and trunk for a couple weeks now. There are some missing kernel modules in trunk that are required for strongswan4 to work (also true for 4.3.7). There are already a couple of tickets on trac addressing these kernel modules: https://dev.openwrt.org/ticket/9234 https://dev.openwrt.org/ticket/8928 I also have my own patch that just packages all of the missing modules into a single kmod-crypto-ipsec package. It would be nice to get some discussion how these modules should be packaged so we can get working ipsec support in trunk. Signed-off-by: Lars Hjersted <lars at hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@26789 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-04-29 15:26:26 +00:00
+strongswan4-mod-socket-raw \
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
+strongswan4-mod-sql \
+strongswan4-mod-sqlite \
+strongswan4-mod-stroke \
+strongswan4-mod-uci \
+strongswan4-mod-updown \
[package] update strongswan4 to 4.5.2 Update version of strongswan4 package from 4.5.1 to 4.5.2. Add new strongswan4 plugins: coupling, duplicheck, whitelist. Add strongswan4-libfast package and make build dependencies on clearsilver and fcgi conditional. Previously libfast was being built, but not packaged. Now libfast will only be built when the it's package is selected. Remove ipsec.conf and strongswan.conf and use configuration files from upstream instead. The previously provided strongswan.conf was not functional. Omit strongswan4-mod-kernel-klips from strongswan4-full meta package in favor of strongswan4-mod-kernel-netlink. Only one of these two kernel interfaces should be installed. Omit strongswan4-mod-socket-default from strongswan4-full meta package in favor of strongswan4-mod-socket-raw. Only the raw socket allows charon to run while pluto is also running. Make all build dependencies on libraries required by strongswan4 plugins conditional. Signed-off-by: Lars Hjersted <lars@hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@27092 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-06-02 14:24:20 +00:00
+strongswan4-mod-whitelist \
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
+strongswan4-mod-x509 \
[PATCH] strongswan4 update to 4.5.1 This patch updates the strongswan4 package from 4.3.7 to 4.5.1. I have added the following plugins which get built as strongswan4-mod-<plugin> packages: constraints - X.509 constraint checking dhcp - DHCP-based IP and DNS farp - Fake arp responses led - LED blink on IKE activity revocation - X.509 revocation checking socket-default - Default socket for IKEv2 socket-raw - RAW socket of IKEv1 and IKEv2 xauth - XAUTH authentication Upstream default plugins were added to the strongswan4-default meta package. "socket-default" and "kernel-netlink" plugins were added to the strongswan4-minimal meta package since a socket and a kernel interface are required for a working setup and these are the upstream defaults in this case. The whack command was moved to strongswan4-app-pluto. The 202-clone.patch has been fixed upstream so it can be removed. The other patches were rebased for the new strongswan4 release. I have been using strongswan 4.5.1 with backfire and trunk for a couple weeks now. There are some missing kernel modules in trunk that are required for strongswan4 to work (also true for 4.3.7). There are already a couple of tickets on trac addressing these kernel modules: https://dev.openwrt.org/ticket/9234 https://dev.openwrt.org/ticket/8928 I also have my own patch that just packages all of the missing modules into a single kmod-crypto-ipsec package. It would be nice to get some discussion how these modules should be packaged so we can get working ipsec support in trunk. Signed-off-by: Lars Hjersted <lars at hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@26789 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-04-29 15:26:26 +00:00
+strongswan4-mod-xauth \
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
+strongswan4-mod-xcbc \
[packages] strongswan4: fix dependencies, cleanup * make strongswan4-default & strongswan4-minimal installable again * mark strongswan4-full as DEVEL (closes: #9508) git-svn-id: svn://svn.openwrt.org/openwrt/packages@28517 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-10-22 13:04:19 +00:00
+strongswan4-utils \
@DEVEL
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
endef
define Package/strongswan4-full/description
$(call Package/strongswan4/description/Default)
.
[package] update strongswan4 to 4.5.2 Update version of strongswan4 package from 4.5.1 to 4.5.2. Add new strongswan4 plugins: coupling, duplicheck, whitelist. Add strongswan4-libfast package and make build dependencies on clearsilver and fcgi conditional. Previously libfast was being built, but not packaged. Now libfast will only be built when the it's package is selected. Remove ipsec.conf and strongswan.conf and use configuration files from upstream instead. The previously provided strongswan.conf was not functional. Omit strongswan4-mod-kernel-klips from strongswan4-full meta package in favor of strongswan4-mod-kernel-netlink. Only one of these two kernel interfaces should be installed. Omit strongswan4-mod-socket-default from strongswan4-full meta package in favor of strongswan4-mod-socket-raw. Only the raw socket allows charon to run while pluto is also running. Make all build dependencies on libraries required by strongswan4 plugins conditional. Signed-off-by: Lars Hjersted <lars@hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@27092 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-06-02 14:24:20 +00:00
This meta-package contains dependencies for all of the strongswan4
plugins except kernel-klips and socket-default which are ommitted in
favor of the kernel-netlink and socket-raw plugins.
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
endef
[packages] strongswan4: move in VPN submenu, add 2 more config options and changes from #2538: * add a strongswan4-default package (matching upstream autoconf defaults) * add dependency on kmod-crypto-authenc * fix 2 typos git-svn-id: svn://svn.openwrt.org/openwrt/packages@21099 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-23 03:31:40 +00:00
define Package/strongswan4-default
$(call Package/strongswan4/Default)
TITLE+= (default)
[packages] strongswan4: fix dependencies, cleanup * make strongswan4-default & strongswan4-minimal installable again * mark strongswan4-full as DEVEL (closes: #9508) git-svn-id: svn://svn.openwrt.org/openwrt/packages@28517 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-10-22 13:04:19 +00:00
DEPENDS:= +strongswan4 \
[packages] strongswan4: move in VPN submenu, add 2 more config options and changes from #2538: * add a strongswan4-default package (matching upstream autoconf defaults) * add dependency on kmod-crypto-authenc * fix 2 typos git-svn-id: svn://svn.openwrt.org/openwrt/packages@21099 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-23 03:31:40 +00:00
+strongswan4-app-charon \
+strongswan4-app-pluto \
+strongswan4-mod-aes \
[PATCH] strongswan4 update to 4.5.1 This patch updates the strongswan4 package from 4.3.7 to 4.5.1. I have added the following plugins which get built as strongswan4-mod-<plugin> packages: constraints - X.509 constraint checking dhcp - DHCP-based IP and DNS farp - Fake arp responses led - LED blink on IKE activity revocation - X.509 revocation checking socket-default - Default socket for IKEv2 socket-raw - RAW socket of IKEv1 and IKEv2 xauth - XAUTH authentication Upstream default plugins were added to the strongswan4-default meta package. "socket-default" and "kernel-netlink" plugins were added to the strongswan4-minimal meta package since a socket and a kernel interface are required for a working setup and these are the upstream defaults in this case. The whack command was moved to strongswan4-app-pluto. The 202-clone.patch has been fixed upstream so it can be removed. The other patches were rebased for the new strongswan4 release. I have been using strongswan 4.5.1 with backfire and trunk for a couple weeks now. There are some missing kernel modules in trunk that are required for strongswan4 to work (also true for 4.3.7). There are already a couple of tickets on trac addressing these kernel modules: https://dev.openwrt.org/ticket/9234 https://dev.openwrt.org/ticket/8928 I also have my own patch that just packages all of the missing modules into a single kmod-crypto-ipsec package. It would be nice to get some discussion how these modules should be packaged so we can get working ipsec support in trunk. Signed-off-by: Lars Hjersted <lars at hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@26789 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-04-29 15:26:26 +00:00
+strongswan4-mod-constraints \
[packages] strongswan4: move in VPN submenu, add 2 more config options and changes from #2538: * add a strongswan4-default package (matching upstream autoconf defaults) * add dependency on kmod-crypto-authenc * fix 2 typos git-svn-id: svn://svn.openwrt.org/openwrt/packages@21099 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-23 03:31:40 +00:00
+strongswan4-mod-attr \
+strongswan4-mod-des \
+strongswan4-mod-dnskey \
+strongswan4-mod-fips-prf \
+strongswan4-mod-gmp \
+strongswan4-mod-hmac \
[PATCH] strongswan4 update to 4.5.1 This patch updates the strongswan4 package from 4.3.7 to 4.5.1. I have added the following plugins which get built as strongswan4-mod-<plugin> packages: constraints - X.509 constraint checking dhcp - DHCP-based IP and DNS farp - Fake arp responses led - LED blink on IKE activity revocation - X.509 revocation checking socket-default - Default socket for IKEv2 socket-raw - RAW socket of IKEv1 and IKEv2 xauth - XAUTH authentication Upstream default plugins were added to the strongswan4-default meta package. "socket-default" and "kernel-netlink" plugins were added to the strongswan4-minimal meta package since a socket and a kernel interface are required for a working setup and these are the upstream defaults in this case. The whack command was moved to strongswan4-app-pluto. The 202-clone.patch has been fixed upstream so it can be removed. The other patches were rebased for the new strongswan4 release. I have been using strongswan 4.5.1 with backfire and trunk for a couple weeks now. There are some missing kernel modules in trunk that are required for strongswan4 to work (also true for 4.3.7). There are already a couple of tickets on trac addressing these kernel modules: https://dev.openwrt.org/ticket/9234 https://dev.openwrt.org/ticket/8928 I also have my own patch that just packages all of the missing modules into a single kmod-crypto-ipsec package. It would be nice to get some discussion how these modules should be packaged so we can get working ipsec support in trunk. Signed-off-by: Lars Hjersted <lars at hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@26789 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-04-29 15:26:26 +00:00
+strongswan4-mod-kernel-netlink \
[packages] strongswan4: move in VPN submenu, add 2 more config options and changes from #2538: * add a strongswan4-default package (matching upstream autoconf defaults) * add dependency on kmod-crypto-authenc * fix 2 typos git-svn-id: svn://svn.openwrt.org/openwrt/packages@21099 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-23 03:31:40 +00:00
+strongswan4-mod-md5 \
+strongswan4-mod-pem \
+strongswan4-mod-pgp \
+strongswan4-mod-pkcs1 \
+strongswan4-mod-pubkey \
+strongswan4-mod-random \
[PATCH] strongswan4 update to 4.5.1 This patch updates the strongswan4 package from 4.3.7 to 4.5.1. I have added the following plugins which get built as strongswan4-mod-<plugin> packages: constraints - X.509 constraint checking dhcp - DHCP-based IP and DNS farp - Fake arp responses led - LED blink on IKE activity revocation - X.509 revocation checking socket-default - Default socket for IKEv2 socket-raw - RAW socket of IKEv1 and IKEv2 xauth - XAUTH authentication Upstream default plugins were added to the strongswan4-default meta package. "socket-default" and "kernel-netlink" plugins were added to the strongswan4-minimal meta package since a socket and a kernel interface are required for a working setup and these are the upstream defaults in this case. The whack command was moved to strongswan4-app-pluto. The 202-clone.patch has been fixed upstream so it can be removed. The other patches were rebased for the new strongswan4 release. I have been using strongswan 4.5.1 with backfire and trunk for a couple weeks now. There are some missing kernel modules in trunk that are required for strongswan4 to work (also true for 4.3.7). There are already a couple of tickets on trac addressing these kernel modules: https://dev.openwrt.org/ticket/9234 https://dev.openwrt.org/ticket/8928 I also have my own patch that just packages all of the missing modules into a single kmod-crypto-ipsec package. It would be nice to get some discussion how these modules should be packaged so we can get working ipsec support in trunk. Signed-off-by: Lars Hjersted <lars at hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@26789 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-04-29 15:26:26 +00:00
+strongswan4-mod-revocation \
[packages] strongswan4: move in VPN submenu, add 2 more config options and changes from #2538: * add a strongswan4-default package (matching upstream autoconf defaults) * add dependency on kmod-crypto-authenc * fix 2 typos git-svn-id: svn://svn.openwrt.org/openwrt/packages@21099 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-23 03:31:40 +00:00
+strongswan4-mod-resolve \
+strongswan4-mod-sha1 \
+strongswan4-mod-sha2 \
[PATCH] strongswan4 update to 4.5.1 This patch updates the strongswan4 package from 4.3.7 to 4.5.1. I have added the following plugins which get built as strongswan4-mod-<plugin> packages: constraints - X.509 constraint checking dhcp - DHCP-based IP and DNS farp - Fake arp responses led - LED blink on IKE activity revocation - X.509 revocation checking socket-default - Default socket for IKEv2 socket-raw - RAW socket of IKEv1 and IKEv2 xauth - XAUTH authentication Upstream default plugins were added to the strongswan4-default meta package. "socket-default" and "kernel-netlink" plugins were added to the strongswan4-minimal meta package since a socket and a kernel interface are required for a working setup and these are the upstream defaults in this case. The whack command was moved to strongswan4-app-pluto. The 202-clone.patch has been fixed upstream so it can be removed. The other patches were rebased for the new strongswan4 release. I have been using strongswan 4.5.1 with backfire and trunk for a couple weeks now. There are some missing kernel modules in trunk that are required for strongswan4 to work (also true for 4.3.7). There are already a couple of tickets on trac addressing these kernel modules: https://dev.openwrt.org/ticket/9234 https://dev.openwrt.org/ticket/8928 I also have my own patch that just packages all of the missing modules into a single kmod-crypto-ipsec package. It would be nice to get some discussion how these modules should be packaged so we can get working ipsec support in trunk. Signed-off-by: Lars Hjersted <lars at hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@26789 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-04-29 15:26:26 +00:00
+strongswan4-mod-socket-raw \
[packages] strongswan4: move in VPN submenu, add 2 more config options and changes from #2538: * add a strongswan4-default package (matching upstream autoconf defaults) * add dependency on kmod-crypto-authenc * fix 2 typos git-svn-id: svn://svn.openwrt.org/openwrt/packages@21099 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-23 03:31:40 +00:00
+strongswan4-mod-stroke \
+strongswan4-mod-updown \
+strongswan4-mod-x509 \
[PATCH] strongswan4 update to 4.5.1 This patch updates the strongswan4 package from 4.3.7 to 4.5.1. I have added the following plugins which get built as strongswan4-mod-<plugin> packages: constraints - X.509 constraint checking dhcp - DHCP-based IP and DNS farp - Fake arp responses led - LED blink on IKE activity revocation - X.509 revocation checking socket-default - Default socket for IKEv2 socket-raw - RAW socket of IKEv1 and IKEv2 xauth - XAUTH authentication Upstream default plugins were added to the strongswan4-default meta package. "socket-default" and "kernel-netlink" plugins were added to the strongswan4-minimal meta package since a socket and a kernel interface are required for a working setup and these are the upstream defaults in this case. The whack command was moved to strongswan4-app-pluto. The 202-clone.patch has been fixed upstream so it can be removed. The other patches were rebased for the new strongswan4 release. I have been using strongswan 4.5.1 with backfire and trunk for a couple weeks now. There are some missing kernel modules in trunk that are required for strongswan4 to work (also true for 4.3.7). There are already a couple of tickets on trac addressing these kernel modules: https://dev.openwrt.org/ticket/9234 https://dev.openwrt.org/ticket/8928 I also have my own patch that just packages all of the missing modules into a single kmod-crypto-ipsec package. It would be nice to get some discussion how these modules should be packaged so we can get working ipsec support in trunk. Signed-off-by: Lars Hjersted <lars at hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@26789 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-04-29 15:26:26 +00:00
+strongswan4-mod-xauth \
[packages] strongswan4: move in VPN submenu, add 2 more config options and changes from #2538: * add a strongswan4-default package (matching upstream autoconf defaults) * add dependency on kmod-crypto-authenc * fix 2 typos git-svn-id: svn://svn.openwrt.org/openwrt/packages@21099 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-23 03:31:40 +00:00
+strongswan4-mod-xcbc \
+strongswan4-utils
endef
define Package/strongswan4-default/description
$(call Package/strongswan4/description/Default)
.
This meta-package contains only dependencies to match upstream
defaults.
endef
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
define Package/strongswan4-minimal
$(call Package/strongswan4/Default)
TITLE+= (minimal)
[packages] strongswan4: fix dependencies, cleanup * make strongswan4-default & strongswan4-minimal installable again * mark strongswan4-full as DEVEL (closes: #9508) git-svn-id: svn://svn.openwrt.org/openwrt/packages@28517 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-10-22 13:04:19 +00:00
DEPENDS:= +strongswan4 \
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
+strongswan4-app-charon \
+strongswan4-mod-aes \
+strongswan4-mod-gmp \
+strongswan4-mod-hmac \
[PATCH] strongswan4 update to 4.5.1 This patch updates the strongswan4 package from 4.3.7 to 4.5.1. I have added the following plugins which get built as strongswan4-mod-<plugin> packages: constraints - X.509 constraint checking dhcp - DHCP-based IP and DNS farp - Fake arp responses led - LED blink on IKE activity revocation - X.509 revocation checking socket-default - Default socket for IKEv2 socket-raw - RAW socket of IKEv1 and IKEv2 xauth - XAUTH authentication Upstream default plugins were added to the strongswan4-default meta package. "socket-default" and "kernel-netlink" plugins were added to the strongswan4-minimal meta package since a socket and a kernel interface are required for a working setup and these are the upstream defaults in this case. The whack command was moved to strongswan4-app-pluto. The 202-clone.patch has been fixed upstream so it can be removed. The other patches were rebased for the new strongswan4 release. I have been using strongswan 4.5.1 with backfire and trunk for a couple weeks now. There are some missing kernel modules in trunk that are required for strongswan4 to work (also true for 4.3.7). There are already a couple of tickets on trac addressing these kernel modules: https://dev.openwrt.org/ticket/9234 https://dev.openwrt.org/ticket/8928 I also have my own patch that just packages all of the missing modules into a single kmod-crypto-ipsec package. It would be nice to get some discussion how these modules should be packaged so we can get working ipsec support in trunk. Signed-off-by: Lars Hjersted <lars at hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@26789 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-04-29 15:26:26 +00:00
+strongswan4-mod-kernel-netlink \
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
+strongswan4-mod-pubkey \
+strongswan4-mod-random \
+strongswan4-mod-sha1 \
[PATCH] strongswan4 update to 4.5.1 This patch updates the strongswan4 package from 4.3.7 to 4.5.1. I have added the following plugins which get built as strongswan4-mod-<plugin> packages: constraints - X.509 constraint checking dhcp - DHCP-based IP and DNS farp - Fake arp responses led - LED blink on IKE activity revocation - X.509 revocation checking socket-default - Default socket for IKEv2 socket-raw - RAW socket of IKEv1 and IKEv2 xauth - XAUTH authentication Upstream default plugins were added to the strongswan4-default meta package. "socket-default" and "kernel-netlink" plugins were added to the strongswan4-minimal meta package since a socket and a kernel interface are required for a working setup and these are the upstream defaults in this case. The whack command was moved to strongswan4-app-pluto. The 202-clone.patch has been fixed upstream so it can be removed. The other patches were rebased for the new strongswan4 release. I have been using strongswan 4.5.1 with backfire and trunk for a couple weeks now. There are some missing kernel modules in trunk that are required for strongswan4 to work (also true for 4.3.7). There are already a couple of tickets on trac addressing these kernel modules: https://dev.openwrt.org/ticket/9234 https://dev.openwrt.org/ticket/8928 I also have my own patch that just packages all of the missing modules into a single kmod-crypto-ipsec package. It would be nice to get some discussion how these modules should be packaged so we can get working ipsec support in trunk. Signed-off-by: Lars Hjersted <lars at hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@26789 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-04-29 15:26:26 +00:00
+strongswan4-mod-socket-default \
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
+strongswan4-mod-stroke \
+strongswan4-mod-updown \
+strongswan4-mod-x509 \
+strongswan4-mod-xcbc
endef
define Package/strongswan4-minimal/description
$(call Package/strongswan4/description/Default)
.
[PATCH] strongswan4 update to 4.5.1 This patch updates the strongswan4 package from 4.3.7 to 4.5.1. I have added the following plugins which get built as strongswan4-mod-<plugin> packages: constraints - X.509 constraint checking dhcp - DHCP-based IP and DNS farp - Fake arp responses led - LED blink on IKE activity revocation - X.509 revocation checking socket-default - Default socket for IKEv2 socket-raw - RAW socket of IKEv1 and IKEv2 xauth - XAUTH authentication Upstream default plugins were added to the strongswan4-default meta package. "socket-default" and "kernel-netlink" plugins were added to the strongswan4-minimal meta package since a socket and a kernel interface are required for a working setup and these are the upstream defaults in this case. The whack command was moved to strongswan4-app-pluto. The 202-clone.patch has been fixed upstream so it can be removed. The other patches were rebased for the new strongswan4 release. I have been using strongswan 4.5.1 with backfire and trunk for a couple weeks now. There are some missing kernel modules in trunk that are required for strongswan4 to work (also true for 4.3.7). There are already a couple of tickets on trac addressing these kernel modules: https://dev.openwrt.org/ticket/9234 https://dev.openwrt.org/ticket/8928 I also have my own patch that just packages all of the missing modules into a single kmod-crypto-ipsec package. It would be nice to get some discussion how these modules should be packaged so we can get working ipsec support in trunk. Signed-off-by: Lars Hjersted <lars at hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@26789 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-04-29 15:26:26 +00:00
This meta-package contains only dependencies for a minimal IKEv2 setup.
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
endef
define Package/strongswan4-app-charon
$(call Package/strongswan4/Default)
TITLE+= IKEv2 keying daemon
[packages] strongswan4: fix dependencies, cleanup * make strongswan4-default & strongswan4-minimal installable again * mark strongswan4-full as DEVEL (closes: #9508) git-svn-id: svn://svn.openwrt.org/openwrt/packages@28517 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-10-22 13:04:19 +00:00
DEPENDS:= +strongswan4
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
endef
define Package/strongswan4-app-charon/description
$(call Package/strongswan4/description/Default)
.
This package contains charon, an IKEv2 keying daemon.
endef
define Package/strongswan4-app-pluto
$(call Package/strongswan4/Default)
TITLE+= IKEv1 keying daemon
[packages] strongswan4: fix dependencies, cleanup * make strongswan4-default & strongswan4-minimal installable again * mark strongswan4-full as DEVEL (closes: #9508) git-svn-id: svn://svn.openwrt.org/openwrt/packages@28517 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-10-22 13:04:19 +00:00
DEPENDS:= +strongswan4
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
endef
define Package/strongswan4-app-pluto/description
$(call Package/strongswan4/description/Default)
.
This package contains pluto, an IKEv1 keying daemon.
endef
[package] update strongswan4 to 4.5.2 Update version of strongswan4 package from 4.5.1 to 4.5.2. Add new strongswan4 plugins: coupling, duplicheck, whitelist. Add strongswan4-libfast package and make build dependencies on clearsilver and fcgi conditional. Previously libfast was being built, but not packaged. Now libfast will only be built when the it's package is selected. Remove ipsec.conf and strongswan.conf and use configuration files from upstream instead. The previously provided strongswan.conf was not functional. Omit strongswan4-mod-kernel-klips from strongswan4-full meta package in favor of strongswan4-mod-kernel-netlink. Only one of these two kernel interfaces should be installed. Omit strongswan4-mod-socket-default from strongswan4-full meta package in favor of strongswan4-mod-socket-raw. Only the raw socket allows charon to run while pluto is also running. Make all build dependencies on libraries required by strongswan4 plugins conditional. Signed-off-by: Lars Hjersted <lars@hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@27092 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-06-02 14:24:20 +00:00
define Package/strongswan4-libfast
$(call Package/strongswan4/Default)
TITLE+= libfast
[packages] strongswan4: fix dependencies, cleanup * make strongswan4-default & strongswan4-minimal installable again * mark strongswan4-full as DEVEL (closes: #9508) git-svn-id: svn://svn.openwrt.org/openwrt/packages@28517 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-10-22 13:04:19 +00:00
DEPENDS:= +strongswan4
[package] update strongswan4 to 4.5.2 Update version of strongswan4 package from 4.5.1 to 4.5.2. Add new strongswan4 plugins: coupling, duplicheck, whitelist. Add strongswan4-libfast package and make build dependencies on clearsilver and fcgi conditional. Previously libfast was being built, but not packaged. Now libfast will only be built when the it's package is selected. Remove ipsec.conf and strongswan.conf and use configuration files from upstream instead. The previously provided strongswan.conf was not functional. Omit strongswan4-mod-kernel-klips from strongswan4-full meta package in favor of strongswan4-mod-kernel-netlink. Only one of these two kernel interfaces should be installed. Omit strongswan4-mod-socket-default from strongswan4-full meta package in favor of strongswan4-mod-socket-raw. Only the raw socket allows charon to run while pluto is also running. Make all build dependencies on libraries required by strongswan4 plugins conditional. Signed-off-by: Lars Hjersted <lars@hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@27092 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-06-02 14:24:20 +00:00
endef
define Package/strongswan4-libfast/description
$(call Package/strongswan4/description/Default)
.
This package contains libfast, a lightweight framework to build native
web applications using ClearSilver and FastCGI.
endef
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
define Package/strongswan4-utils
$(call Package/strongswan4/Default)
TITLE+= utilities
[packages] strongswan4: fix dependencies, cleanup * make strongswan4-default & strongswan4-minimal installable again * mark strongswan4-full as DEVEL (closes: #9508) git-svn-id: svn://svn.openwrt.org/openwrt/packages@28517 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-10-22 13:04:19 +00:00
DEPENDS:= +strongswan4
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
endef
define Package/strongswan4-utils/description
$(call Package/strongswan4/description/Default)
.
This package contains the openac, pki & scepclient utilities.
endef
# 1. Name
# 2. Title
# 3. Depends
define BuildPlugin
define Package/strongswan4-mod-$(1)
$$(call Package/strongswan4/Default)
[packages] strongswan4: move in VPN submenu, add 2 more config options and changes from #2538: * add a strongswan4-default package (matching upstream autoconf defaults) * add dependency on kmod-crypto-authenc * fix 2 typos git-svn-id: svn://svn.openwrt.org/openwrt/packages@21099 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-23 03:31:40 +00:00
TITLE:= StrongSwan $(2) plugin
[packages] strongswan4: fix dependencies, cleanup * make strongswan4-default & strongswan4-minimal installable again * mark strongswan4-full as DEVEL (closes: #9508) git-svn-id: svn://svn.openwrt.org/openwrt/packages@28517 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-10-22 13:04:19 +00:00
DEPENDS:= +strongswan4 $(3)
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
endef
define Package/strongswan4-mod-$(1)/install
$(INSTALL_DIR) $$(1)/usr/lib/ipsec/plugins
$(CP) \
$(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-$(1).so \
$$(1)/usr/lib/ipsec/plugins/ ;
$(call Plugin/$(1)/install,$$(1))
endef
$$(eval $$(call BuildPackage,strongswan4-mod-$(1)))
endef
CONFIGURE_ARGS+= \
$(if $(CONFIG_STRONGSWAN4_ENABLE_CISCO_QUIRKS),--enable-cisco-quirks,--disable-cisco-quirks) \
$(if $(CONFIG_STRONGSWAN4_ENABLE_NAT_TRANSPORT),--enable-nat-transport,--disable-nat-transport) \
[packages] strongswan4: move in VPN submenu, add 2 more config options and changes from #2538: * add a strongswan4-default package (matching upstream autoconf defaults) * add dependency on kmod-crypto-authenc * fix 2 typos git-svn-id: svn://svn.openwrt.org/openwrt/packages@21099 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-23 03:31:40 +00:00
$(if $(CONFIG_STRONGSWAN4_ENABLE_VENDOR_ID),--enable-vendor-id,--disable-vendor-id) \
$(if $(CONFIG_STRONGSWAN4_ENABLE_XAUTH_VID),--enable-xauth-vid,--disable-xauth-vid) \
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
--disable-scripts \
--disable-static \
[package] update strongswan4 to 4.5.2 Update version of strongswan4 package from 4.5.1 to 4.5.2. Add new strongswan4 plugins: coupling, duplicheck, whitelist. Add strongswan4-libfast package and make build dependencies on clearsilver and fcgi conditional. Previously libfast was being built, but not packaged. Now libfast will only be built when the it's package is selected. Remove ipsec.conf and strongswan.conf and use configuration files from upstream instead. The previously provided strongswan.conf was not functional. Omit strongswan4-mod-kernel-klips from strongswan4-full meta package in favor of strongswan4-mod-kernel-netlink. Only one of these two kernel interfaces should be installed. Omit strongswan4-mod-socket-default from strongswan4-full meta package in favor of strongswan4-mod-socket-raw. Only the raw socket allows charon to run while pluto is also running. Make all build dependencies on libraries required by strongswan4 plugins conditional. Signed-off-by: Lars Hjersted <lars@hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@27092 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-06-02 14:24:20 +00:00
$(if $(CONFIG_PACKAGE_strongswan4-libfast),--enable-fast,--disable-fast) \
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
$(if $(CONFIG_PACKAGE_strongswan4-utils),--enable-tools,--disable-tools) \
--with-random-device="$(call qstrip,$(CONFIG_STRONGSWAN4_DEVICE_RANDOM))" \
[packages] strongswan4: move in VPN submenu, add 2 more config options and changes from #2538: * add a strongswan4-default package (matching upstream autoconf defaults) * add dependency on kmod-crypto-authenc * fix 2 typos git-svn-id: svn://svn.openwrt.org/openwrt/packages@21099 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-23 03:31:40 +00:00
--with-urandom-device="$(call qstrip,$(CONFIG_STRONGSWAN4_DEVICE_URANDOM))" \
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
--with-routing-table="$(call qstrip,$(CONFIG_STRONGSWAN4_ROUTING_TABLE))" \
--with-routing-table-prio="$(call qstrip,$(CONFIG_STRONGSWAN4_ROUTING_TABLE_PRIO))" \
[packages] strongswan4: rebuild when plugin selection is changed git-svn-id: svn://svn.openwrt.org/openwrt/packages@20977 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-18 00:57:17 +00:00
$(foreach m,$(PKG_MOD_AVAILABLE), \
$(if $(CONFIG_PACKAGE_strongswan4-mod-$(m)),--enable-$(m),--disable-$(m)) \
) \
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
[package] update strongswan4 to 4.5.2 Update version of strongswan4 package from 4.5.1 to 4.5.2. Add new strongswan4 plugins: coupling, duplicheck, whitelist. Add strongswan4-libfast package and make build dependencies on clearsilver and fcgi conditional. Previously libfast was being built, but not packaged. Now libfast will only be built when the it's package is selected. Remove ipsec.conf and strongswan.conf and use configuration files from upstream instead. The previously provided strongswan.conf was not functional. Omit strongswan4-mod-kernel-klips from strongswan4-full meta package in favor of strongswan4-mod-kernel-netlink. Only one of these two kernel interfaces should be installed. Omit strongswan4-mod-socket-default from strongswan4-full meta package in favor of strongswan4-mod-socket-raw. Only the raw socket allows charon to run while pluto is also running. Make all build dependencies on libraries required by strongswan4 plugins conditional. Signed-off-by: Lars Hjersted <lars@hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@27092 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-06-02 14:24:20 +00:00
ifneq ($(CONFIG_PACKAGE_strongswan4-libfast),)
EXTRA_CPPFLAGS+= -I$(STAGING_DIR)/usr/include/ClearSilver
endif
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
EXTRA_LDFLAGS+= -Wl,-rpath-link,$(STAGING_DIR)/usr/lib
define Package/strongswan4/conffiles
/etc/ipsec.conf
/etc/ipsec.secrets
/etc/strongswan.conf
endef
define Package/strongswan4/install
$(INSTALL_DIR) $(1)/etc
$(CP) -R $(PKG_INSTALL_DIR)/etc/ipsec.d $(1)/etc/
[package] update strongswan4 to 4.5.2 Update version of strongswan4 package from 4.5.1 to 4.5.2. Add new strongswan4 plugins: coupling, duplicheck, whitelist. Add strongswan4-libfast package and make build dependencies on clearsilver and fcgi conditional. Previously libfast was being built, but not packaged. Now libfast will only be built when the it's package is selected. Remove ipsec.conf and strongswan.conf and use configuration files from upstream instead. The previously provided strongswan.conf was not functional. Omit strongswan4-mod-kernel-klips from strongswan4-full meta package in favor of strongswan4-mod-kernel-netlink. Only one of these two kernel interfaces should be installed. Omit strongswan4-mod-socket-default from strongswan4-full meta package in favor of strongswan4-mod-socket-raw. Only the raw socket allows charon to run while pluto is also running. Make all build dependencies on libraries required by strongswan4 plugins conditional. Signed-off-by: Lars Hjersted <lars@hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@27092 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-06-02 14:24:20 +00:00
$(CP) $(PKG_INSTALL_DIR)/etc/{ipsec.conf,strongswan.conf} $(1)/etc/
[package] strongswan4: update to 4.5.3 Private libraries moved from /usr/lib to /usr/lib/ipsec. Signed-off-by: Lars Hjersted <lars@hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@28016 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-08-16 20:34:20 +00:00
$(INSTALL_DIR) $(1)/usr/lib/ipsec
$(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/{libstrongswan.so.*,libhydra.so.*} $(1)/usr/lib/ipsec/
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
$(INSTALL_DIR) $(1)/usr/sbin
[package] update strongswan4 to 4.5.2 Update version of strongswan4 package from 4.5.1 to 4.5.2. Add new strongswan4 plugins: coupling, duplicheck, whitelist. Add strongswan4-libfast package and make build dependencies on clearsilver and fcgi conditional. Previously libfast was being built, but not packaged. Now libfast will only be built when the it's package is selected. Remove ipsec.conf and strongswan.conf and use configuration files from upstream instead. The previously provided strongswan.conf was not functional. Omit strongswan4-mod-kernel-klips from strongswan4-full meta package in favor of strongswan4-mod-kernel-netlink. Only one of these two kernel interfaces should be installed. Omit strongswan4-mod-socket-default from strongswan4-full meta package in favor of strongswan4-mod-socket-raw. Only the raw socket allows charon to run while pluto is also running. Make all build dependencies on libraries required by strongswan4 plugins conditional. Signed-off-by: Lars Hjersted <lars@hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@27092 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-06-02 14:24:20 +00:00
$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/sbin/ipsec $(1)/usr/sbin/
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
$(INSTALL_DIR) $(1)/usr/lib/ipsec
[package] update strongswan4 to 4.5.2 Update version of strongswan4 package from 4.5.1 to 4.5.2. Add new strongswan4 plugins: coupling, duplicheck, whitelist. Add strongswan4-libfast package and make build dependencies on clearsilver and fcgi conditional. Previously libfast was being built, but not packaged. Now libfast will only be built when the it's package is selected. Remove ipsec.conf and strongswan.conf and use configuration files from upstream instead. The previously provided strongswan.conf was not functional. Omit strongswan4-mod-kernel-klips from strongswan4-full meta package in favor of strongswan4-mod-kernel-netlink. Only one of these two kernel interfaces should be installed. Omit strongswan4-mod-socket-default from strongswan4-full meta package in favor of strongswan4-mod-socket-raw. Only the raw socket allows charon to run while pluto is also running. Make all build dependencies on libraries required by strongswan4 plugins conditional. Signed-off-by: Lars Hjersted <lars@hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@27092 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-06-02 14:24:20 +00:00
$(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/{_copyright,starter} $(1)/usr/lib/ipsec/
$(INSTALL_CONF) ./files/ipsec.secrets $(1)/etc/
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
endef
[packages] strongswan4: move in VPN submenu, add 2 more config options and changes from #2538: * add a strongswan4-default package (matching upstream autoconf defaults) * add dependency on kmod-crypto-authenc * fix 2 typos git-svn-id: svn://svn.openwrt.org/openwrt/packages@21099 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-23 03:31:40 +00:00
define Package/strongswan4-default/install
true
endef
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
define Package/strongswan4-full/install
true
endef
define Package/strongswan4-minimal/install
true
endef
define Package/strongswan4-app-charon/install
[package] strongswan4: update to 4.5.3 Private libraries moved from /usr/lib to /usr/lib/ipsec. Signed-off-by: Lars Hjersted <lars@hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@28016 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-08-16 20:34:20 +00:00
$(INSTALL_DIR) $(1)/usr/lib/ipsec
$(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libcharon.so.* $(1)/usr/lib/ipsec/
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
$(INSTALL_DIR) $(1)/usr/lib/ipsec
[package] update strongswan4 to 4.5.2 Update version of strongswan4 package from 4.5.1 to 4.5.2. Add new strongswan4 plugins: coupling, duplicheck, whitelist. Add strongswan4-libfast package and make build dependencies on clearsilver and fcgi conditional. Previously libfast was being built, but not packaged. Now libfast will only be built when the it's package is selected. Remove ipsec.conf and strongswan.conf and use configuration files from upstream instead. The previously provided strongswan.conf was not functional. Omit strongswan4-mod-kernel-klips from strongswan4-full meta package in favor of strongswan4-mod-kernel-netlink. Only one of these two kernel interfaces should be installed. Omit strongswan4-mod-socket-default from strongswan4-full meta package in favor of strongswan4-mod-socket-raw. Only the raw socket allows charon to run while pluto is also running. Make all build dependencies on libraries required by strongswan4 plugins conditional. Signed-off-by: Lars Hjersted <lars@hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@27092 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-06-02 14:24:20 +00:00
$(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/{charon,stroke} $(1)/usr/lib/ipsec/
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
endef
define Package/strongswan4-app-pluto/install
$(INSTALL_DIR) $(1)/usr/lib/ipsec
[package] update strongswan4 to 4.5.2 Update version of strongswan4 package from 4.5.1 to 4.5.2. Add new strongswan4 plugins: coupling, duplicheck, whitelist. Add strongswan4-libfast package and make build dependencies on clearsilver and fcgi conditional. Previously libfast was being built, but not packaged. Now libfast will only be built when the it's package is selected. Remove ipsec.conf and strongswan.conf and use configuration files from upstream instead. The previously provided strongswan.conf was not functional. Omit strongswan4-mod-kernel-klips from strongswan4-full meta package in favor of strongswan4-mod-kernel-netlink. Only one of these two kernel interfaces should be installed. Omit strongswan4-mod-socket-default from strongswan4-full meta package in favor of strongswan4-mod-socket-raw. Only the raw socket allows charon to run while pluto is also running. Make all build dependencies on libraries required by strongswan4 plugins conditional. Signed-off-by: Lars Hjersted <lars@hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@27092 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-06-02 14:24:20 +00:00
$(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/{pluto,_pluto_adns,whack} $(1)/usr/lib/ipsec/
endef
define Package/strongswan4-libfast/install
[package] strongswan4: update to 4.5.3 Private libraries moved from /usr/lib to /usr/lib/ipsec. Signed-off-by: Lars Hjersted <lars@hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@28016 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-08-16 20:34:20 +00:00
$(INSTALL_DIR) $(1)/usr/lib/ipsec
$(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libfast.so.* $(1)/usr/lib/ipsec/
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
endef
define Package/strongswan4-utils/install
$(INSTALL_DIR) $(1)/usr/lib/ipsec
[package] update strongswan4 to 4.5.2 Update version of strongswan4 package from 4.5.1 to 4.5.2. Add new strongswan4 plugins: coupling, duplicheck, whitelist. Add strongswan4-libfast package and make build dependencies on clearsilver and fcgi conditional. Previously libfast was being built, but not packaged. Now libfast will only be built when the it's package is selected. Remove ipsec.conf and strongswan.conf and use configuration files from upstream instead. The previously provided strongswan.conf was not functional. Omit strongswan4-mod-kernel-klips from strongswan4-full meta package in favor of strongswan4-mod-kernel-netlink. Only one of these two kernel interfaces should be installed. Omit strongswan4-mod-socket-default from strongswan4-full meta package in favor of strongswan4-mod-socket-raw. Only the raw socket allows charon to run while pluto is also running. Make all build dependencies on libraries required by strongswan4 plugins conditional. Signed-off-by: Lars Hjersted <lars@hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@27092 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-06-02 14:24:20 +00:00
$(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/{openac,pki,scepclient} $(1)/usr/lib/ipsec/
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
endef
define Plugin/attr-sql/install
$(INSTALL_DIR) $(1)/usr/lib/ipsec
[package] update strongswan4 to 4.5.2 Update version of strongswan4 package from 4.5.1 to 4.5.2. Add new strongswan4 plugins: coupling, duplicheck, whitelist. Add strongswan4-libfast package and make build dependencies on clearsilver and fcgi conditional. Previously libfast was being built, but not packaged. Now libfast will only be built when the it's package is selected. Remove ipsec.conf and strongswan.conf and use configuration files from upstream instead. The previously provided strongswan.conf was not functional. Omit strongswan4-mod-kernel-klips from strongswan4-full meta package in favor of strongswan4-mod-kernel-netlink. Only one of these two kernel interfaces should be installed. Omit strongswan4-mod-socket-default from strongswan4-full meta package in favor of strongswan4-mod-socket-raw. Only the raw socket allows charon to run while pluto is also running. Make all build dependencies on libraries required by strongswan4 plugins conditional. Signed-off-by: Lars Hjersted <lars@hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@27092 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-06-02 14:24:20 +00:00
$(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/pool $(1)/usr/lib/ipsec/
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
endef
define Plugin/updown/install
$(INSTALL_DIR) $(1)/usr/lib/ipsec
[package] update strongswan4 to 4.5.2 Update version of strongswan4 package from 4.5.1 to 4.5.2. Add new strongswan4 plugins: coupling, duplicheck, whitelist. Add strongswan4-libfast package and make build dependencies on clearsilver and fcgi conditional. Previously libfast was being built, but not packaged. Now libfast will only be built when the it's package is selected. Remove ipsec.conf and strongswan.conf and use configuration files from upstream instead. The previously provided strongswan.conf was not functional. Omit strongswan4-mod-kernel-klips from strongswan4-full meta package in favor of strongswan4-mod-kernel-netlink. Only one of these two kernel interfaces should be installed. Omit strongswan4-mod-socket-default from strongswan4-full meta package in favor of strongswan4-mod-socket-raw. Only the raw socket allows charon to run while pluto is also running. Make all build dependencies on libraries required by strongswan4 plugins conditional. Signed-off-by: Lars Hjersted <lars@hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@27092 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-06-02 14:24:20 +00:00
$(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/{_updown,_updown_espmark} $(1)/usr/lib/ipsec/
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
endef
$(eval $(call BuildPackage,strongswan4))
[packages] strongswan4: move in VPN submenu, add 2 more config options and changes from #2538: * add a strongswan4-default package (matching upstream autoconf defaults) * add dependency on kmod-crypto-authenc * fix 2 typos git-svn-id: svn://svn.openwrt.org/openwrt/packages@21099 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-23 03:31:40 +00:00
$(eval $(call BuildPackage,strongswan4-default))
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
$(eval $(call BuildPackage,strongswan4-full))
$(eval $(call BuildPackage,strongswan4-minimal))
$(eval $(call BuildPackage,strongswan4-app-charon))
$(eval $(call BuildPackage,strongswan4-app-pluto))
[package] update strongswan4 to 4.5.2 Update version of strongswan4 package from 4.5.1 to 4.5.2. Add new strongswan4 plugins: coupling, duplicheck, whitelist. Add strongswan4-libfast package and make build dependencies on clearsilver and fcgi conditional. Previously libfast was being built, but not packaged. Now libfast will only be built when the it's package is selected. Remove ipsec.conf and strongswan.conf and use configuration files from upstream instead. The previously provided strongswan.conf was not functional. Omit strongswan4-mod-kernel-klips from strongswan4-full meta package in favor of strongswan4-mod-kernel-netlink. Only one of these two kernel interfaces should be installed. Omit strongswan4-mod-socket-default from strongswan4-full meta package in favor of strongswan4-mod-socket-raw. Only the raw socket allows charon to run while pluto is also running. Make all build dependencies on libraries required by strongswan4 plugins conditional. Signed-off-by: Lars Hjersted <lars@hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@27092 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-06-02 14:24:20 +00:00
$(eval $(call BuildPackage,strongswan4-libfast))
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
$(eval $(call BuildPackage,strongswan4-utils))
$(eval $(call BuildPlugin,aes,AES crypto,))
$(eval $(call BuildPlugin,agent,SSH agent signing,))
[package] strongswan4: add af-alg plugin * Add kernel crypto user-space interface plugin (strongswan4-mod-af-alg) * Requires kmod-crypto-user Signed-off-by: Lars Hjersted <lars@hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@28017 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-08-16 20:34:22 +00:00
$(eval $(call BuildPlugin,af-alg,AF_ALG Linux crypto API,+kmod-crypto-user))
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
$(eval $(call BuildPlugin,attr,File-based config attr,))
$(eval $(call BuildPlugin,attr-sql,SQL-based config attrib,+strongswan4-mod-sql))
$(eval $(call BuildPlugin,blowfish,Blowfish crypto,))
[PATCH] strongswan4 update to 4.5.1 This patch updates the strongswan4 package from 4.3.7 to 4.5.1. I have added the following plugins which get built as strongswan4-mod-<plugin> packages: constraints - X.509 constraint checking dhcp - DHCP-based IP and DNS farp - Fake arp responses led - LED blink on IKE activity revocation - X.509 revocation checking socket-default - Default socket for IKEv2 socket-raw - RAW socket of IKEv1 and IKEv2 xauth - XAUTH authentication Upstream default plugins were added to the strongswan4-default meta package. "socket-default" and "kernel-netlink" plugins were added to the strongswan4-minimal meta package since a socket and a kernel interface are required for a working setup and these are the upstream defaults in this case. The whack command was moved to strongswan4-app-pluto. The 202-clone.patch has been fixed upstream so it can be removed. The other patches were rebased for the new strongswan4 release. I have been using strongswan 4.5.1 with backfire and trunk for a couple weeks now. There are some missing kernel modules in trunk that are required for strongswan4 to work (also true for 4.3.7). There are already a couple of tickets on trac addressing these kernel modules: https://dev.openwrt.org/ticket/9234 https://dev.openwrt.org/ticket/8928 I also have my own patch that just packages all of the missing modules into a single kmod-crypto-ipsec package. It would be nice to get some discussion how these modules should be packaged so we can get working ipsec support in trunk. Signed-off-by: Lars Hjersted <lars at hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@26789 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-04-29 15:26:26 +00:00
$(eval $(call BuildPlugin,constraints,X.509 constraint checking,))
[package] update strongswan4 to 4.5.2 Update version of strongswan4 package from 4.5.1 to 4.5.2. Add new strongswan4 plugins: coupling, duplicheck, whitelist. Add strongswan4-libfast package and make build dependencies on clearsilver and fcgi conditional. Previously libfast was being built, but not packaged. Now libfast will only be built when the it's package is selected. Remove ipsec.conf and strongswan.conf and use configuration files from upstream instead. The previously provided strongswan.conf was not functional. Omit strongswan4-mod-kernel-klips from strongswan4-full meta package in favor of strongswan4-mod-kernel-netlink. Only one of these two kernel interfaces should be installed. Omit strongswan4-mod-socket-default from strongswan4-full meta package in favor of strongswan4-mod-socket-raw. Only the raw socket allows charon to run while pluto is also running. Make all build dependencies on libraries required by strongswan4 plugins conditional. Signed-off-by: Lars Hjersted <lars@hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@27092 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-06-02 14:24:20 +00:00
$(eval $(call BuildPlugin,coupling,Peer certificate coupling,))
$(eval $(call BuildPlugin,curl,cURL,+PACKAGE_strongswan4-mod-curl:libcurl))
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
$(eval $(call BuildPlugin,des,DES crypto,))
[PATCH] strongswan4 update to 4.5.1 This patch updates the strongswan4 package from 4.3.7 to 4.5.1. I have added the following plugins which get built as strongswan4-mod-<plugin> packages: constraints - X.509 constraint checking dhcp - DHCP-based IP and DNS farp - Fake arp responses led - LED blink on IKE activity revocation - X.509 revocation checking socket-default - Default socket for IKEv2 socket-raw - RAW socket of IKEv1 and IKEv2 xauth - XAUTH authentication Upstream default plugins were added to the strongswan4-default meta package. "socket-default" and "kernel-netlink" plugins were added to the strongswan4-minimal meta package since a socket and a kernel interface are required for a working setup and these are the upstream defaults in this case. The whack command was moved to strongswan4-app-pluto. The 202-clone.patch has been fixed upstream so it can be removed. The other patches were rebased for the new strongswan4 release. I have been using strongswan 4.5.1 with backfire and trunk for a couple weeks now. There are some missing kernel modules in trunk that are required for strongswan4 to work (also true for 4.3.7). There are already a couple of tickets on trac addressing these kernel modules: https://dev.openwrt.org/ticket/9234 https://dev.openwrt.org/ticket/8928 I also have my own patch that just packages all of the missing modules into a single kmod-crypto-ipsec package. It would be nice to get some discussion how these modules should be packaged so we can get working ipsec support in trunk. Signed-off-by: Lars Hjersted <lars at hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@26789 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-04-29 15:26:26 +00:00
$(eval $(call BuildPlugin,dhcp,DHCP-based IP and DNS,))
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
$(eval $(call BuildPlugin,dnskey,DNS RR key decoding,))
[package] update strongswan4 to 4.5.2 Update version of strongswan4 package from 4.5.1 to 4.5.2. Add new strongswan4 plugins: coupling, duplicheck, whitelist. Add strongswan4-libfast package and make build dependencies on clearsilver and fcgi conditional. Previously libfast was being built, but not packaged. Now libfast will only be built when the it's package is selected. Remove ipsec.conf and strongswan.conf and use configuration files from upstream instead. The previously provided strongswan.conf was not functional. Omit strongswan4-mod-kernel-klips from strongswan4-full meta package in favor of strongswan4-mod-kernel-netlink. Only one of these two kernel interfaces should be installed. Omit strongswan4-mod-socket-default from strongswan4-full meta package in favor of strongswan4-mod-socket-raw. Only the raw socket allows charon to run while pluto is also running. Make all build dependencies on libraries required by strongswan4 plugins conditional. Signed-off-by: Lars Hjersted <lars@hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@27092 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-06-02 14:24:20 +00:00
$(eval $(call BuildPlugin,duplicheck,Duplicate checking,))
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
$(eval $(call BuildPlugin,eap-md5,MD5 EAP (CHAP) auth,))
$(eval $(call BuildPlugin,eap-mschapv2,MS-CHAPv2 EAP auth,))
$(eval $(call BuildPlugin,eap-radius,RADIUS proxy auth,))
[PATCH] strongswan4 update to 4.5.1 This patch updates the strongswan4 package from 4.3.7 to 4.5.1. I have added the following plugins which get built as strongswan4-mod-<plugin> packages: constraints - X.509 constraint checking dhcp - DHCP-based IP and DNS farp - Fake arp responses led - LED blink on IKE activity revocation - X.509 revocation checking socket-default - Default socket for IKEv2 socket-raw - RAW socket of IKEv1 and IKEv2 xauth - XAUTH authentication Upstream default plugins were added to the strongswan4-default meta package. "socket-default" and "kernel-netlink" plugins were added to the strongswan4-minimal meta package since a socket and a kernel interface are required for a working setup and these are the upstream defaults in this case. The whack command was moved to strongswan4-app-pluto. The 202-clone.patch has been fixed upstream so it can be removed. The other patches were rebased for the new strongswan4 release. I have been using strongswan 4.5.1 with backfire and trunk for a couple weeks now. There are some missing kernel modules in trunk that are required for strongswan4 to work (also true for 4.3.7). There are already a couple of tickets on trac addressing these kernel modules: https://dev.openwrt.org/ticket/9234 https://dev.openwrt.org/ticket/8928 I also have my own patch that just packages all of the missing modules into a single kmod-crypto-ipsec package. It would be nice to get some discussion how these modules should be packaged so we can get working ipsec support in trunk. Signed-off-by: Lars Hjersted <lars at hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@26789 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-04-29 15:26:26 +00:00
$(eval $(call BuildPlugin,farp,Fake arp respsonses,))
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
$(eval $(call BuildPlugin,fips-prf,FIPS PRF crypto,))
[package] update strongswan4 to 4.5.2 Update version of strongswan4 package from 4.5.1 to 4.5.2. Add new strongswan4 plugins: coupling, duplicheck, whitelist. Add strongswan4-libfast package and make build dependencies on clearsilver and fcgi conditional. Previously libfast was being built, but not packaged. Now libfast will only be built when the it's package is selected. Remove ipsec.conf and strongswan.conf and use configuration files from upstream instead. The previously provided strongswan.conf was not functional. Omit strongswan4-mod-kernel-klips from strongswan4-full meta package in favor of strongswan4-mod-kernel-netlink. Only one of these two kernel interfaces should be installed. Omit strongswan4-mod-socket-default from strongswan4-full meta package in favor of strongswan4-mod-socket-raw. Only the raw socket allows charon to run while pluto is also running. Make all build dependencies on libraries required by strongswan4 plugins conditional. Signed-off-by: Lars Hjersted <lars@hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@27092 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-06-02 14:24:20 +00:00
$(eval $(call BuildPlugin,gcrypt,libgcrypt,+PACKAGE_strongswan4-mod-gcrypt:libgcrypt))
$(eval $(call BuildPlugin,gmp,libgmp,+PACKAGE_strongswan4-mod-gmp:libgmp))
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
$(eval $(call BuildPlugin,hmac,HMAC crypto,))
$(eval $(call BuildPlugin,kernel-klips,KLIPS kernel interface,))
$(eval $(call BuildPlugin,kernel-netlink,netlink kernel interface,))
$(eval $(call BuildPlugin,kernel-pfkey,PK_KEY kernel interface,))
[package] update strongswan4 to 4.5.2 Update version of strongswan4 package from 4.5.1 to 4.5.2. Add new strongswan4 plugins: coupling, duplicheck, whitelist. Add strongswan4-libfast package and make build dependencies on clearsilver and fcgi conditional. Previously libfast was being built, but not packaged. Now libfast will only be built when the it's package is selected. Remove ipsec.conf and strongswan.conf and use configuration files from upstream instead. The previously provided strongswan.conf was not functional. Omit strongswan4-mod-kernel-klips from strongswan4-full meta package in favor of strongswan4-mod-kernel-netlink. Only one of these two kernel interfaces should be installed. Omit strongswan4-mod-socket-default from strongswan4-full meta package in favor of strongswan4-mod-socket-raw. Only the raw socket allows charon to run while pluto is also running. Make all build dependencies on libraries required by strongswan4 plugins conditional. Signed-off-by: Lars Hjersted <lars@hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@27092 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-06-02 14:24:20 +00:00
$(eval $(call BuildPlugin,ldap,LDAP,+PACKAGE_strongswan4-mod-ldap:libopenldap))
[PATCH] strongswan4 update to 4.5.1 This patch updates the strongswan4 package from 4.3.7 to 4.5.1. I have added the following plugins which get built as strongswan4-mod-<plugin> packages: constraints - X.509 constraint checking dhcp - DHCP-based IP and DNS farp - Fake arp responses led - LED blink on IKE activity revocation - X.509 revocation checking socket-default - Default socket for IKEv2 socket-raw - RAW socket of IKEv1 and IKEv2 xauth - XAUTH authentication Upstream default plugins were added to the strongswan4-default meta package. "socket-default" and "kernel-netlink" plugins were added to the strongswan4-minimal meta package since a socket and a kernel interface are required for a working setup and these are the upstream defaults in this case. The whack command was moved to strongswan4-app-pluto. The 202-clone.patch has been fixed upstream so it can be removed. The other patches were rebased for the new strongswan4 release. I have been using strongswan 4.5.1 with backfire and trunk for a couple weeks now. There are some missing kernel modules in trunk that are required for strongswan4 to work (also true for 4.3.7). There are already a couple of tickets on trac addressing these kernel modules: https://dev.openwrt.org/ticket/9234 https://dev.openwrt.org/ticket/8928 I also have my own patch that just packages all of the missing modules into a single kmod-crypto-ipsec package. It would be nice to get some discussion how these modules should be packaged so we can get working ipsec support in trunk. Signed-off-by: Lars Hjersted <lars at hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@26789 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-04-29 15:26:26 +00:00
$(eval $(call BuildPlugin,led,LED blink on IKE activity,))
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
$(eval $(call BuildPlugin,load-tester,load testing,))
$(eval $(call BuildPlugin,md5,MD5 crypto,))
$(eval $(call BuildPlugin,medcli,mediation client configuration database,))
$(eval $(call BuildPlugin,medsrv,mediation server configuration database,))
strongswan4: make build dependencies on libraries required by plugins conditional git-svn-id: svn://svn.openwrt.org/openwrt/packages@21624 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-05-29 23:34:33 +00:00
$(eval $(call BuildPlugin,mysql,MySQL database interface,+strongswan4-mod-sql +PACKAGE_strongswan4-mod-mysql:libmysqlclient))
[packages] strongswan4: mark padlock plugin as x86 only git-svn-id: svn://svn.openwrt.org/openwrt/packages@21106 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-23 10:56:37 +00:00
$(eval $(call BuildPlugin,padlock,VIA PadLock crypto,@TARGET_x86))
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
$(eval $(call BuildPlugin,pem,PEM decoding,))
$(eval $(call BuildPlugin,pgp,PGP key decoding,))
$(eval $(call BuildPlugin,pkcs1,PKCS1 key decoding,))
$(eval $(call BuildPlugin,pubkey,raw public key,))
$(eval $(call BuildPlugin,random,RNG,))
$(eval $(call BuildPlugin,resolve,DNS resolver,))
[PATCH] strongswan4 update to 4.5.1 This patch updates the strongswan4 package from 4.3.7 to 4.5.1. I have added the following plugins which get built as strongswan4-mod-<plugin> packages: constraints - X.509 constraint checking dhcp - DHCP-based IP and DNS farp - Fake arp responses led - LED blink on IKE activity revocation - X.509 revocation checking socket-default - Default socket for IKEv2 socket-raw - RAW socket of IKEv1 and IKEv2 xauth - XAUTH authentication Upstream default plugins were added to the strongswan4-default meta package. "socket-default" and "kernel-netlink" plugins were added to the strongswan4-minimal meta package since a socket and a kernel interface are required for a working setup and these are the upstream defaults in this case. The whack command was moved to strongswan4-app-pluto. The 202-clone.patch has been fixed upstream so it can be removed. The other patches were rebased for the new strongswan4 release. I have been using strongswan 4.5.1 with backfire and trunk for a couple weeks now. There are some missing kernel modules in trunk that are required for strongswan4 to work (also true for 4.3.7). There are already a couple of tickets on trac addressing these kernel modules: https://dev.openwrt.org/ticket/9234 https://dev.openwrt.org/ticket/8928 I also have my own patch that just packages all of the missing modules into a single kmod-crypto-ipsec package. It would be nice to get some discussion how these modules should be packaged so we can get working ipsec support in trunk. Signed-off-by: Lars Hjersted <lars at hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@26789 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-04-29 15:26:26 +00:00
$(eval $(call BuildPlugin,revocation,X.509 revocation checking,))
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
$(eval $(call BuildPlugin,sha1,SHA1 crypto,))
$(eval $(call BuildPlugin,sha2,SHA2 crypto,))
strongswan4: make build dependencies on libraries required by plugins conditional git-svn-id: svn://svn.openwrt.org/openwrt/packages@21624 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-05-29 23:34:33 +00:00
$(eval $(call BuildPlugin,smp,SMP configuration and control interface,+PACKAGE_strongswan4-mod-smp:libxml2))
[PATCH] strongswan4 update to 4.5.1 This patch updates the strongswan4 package from 4.3.7 to 4.5.1. I have added the following plugins which get built as strongswan4-mod-<plugin> packages: constraints - X.509 constraint checking dhcp - DHCP-based IP and DNS farp - Fake arp responses led - LED blink on IKE activity revocation - X.509 revocation checking socket-default - Default socket for IKEv2 socket-raw - RAW socket of IKEv1 and IKEv2 xauth - XAUTH authentication Upstream default plugins were added to the strongswan4-default meta package. "socket-default" and "kernel-netlink" plugins were added to the strongswan4-minimal meta package since a socket and a kernel interface are required for a working setup and these are the upstream defaults in this case. The whack command was moved to strongswan4-app-pluto. The 202-clone.patch has been fixed upstream so it can be removed. The other patches were rebased for the new strongswan4 release. I have been using strongswan 4.5.1 with backfire and trunk for a couple weeks now. There are some missing kernel modules in trunk that are required for strongswan4 to work (also true for 4.3.7). There are already a couple of tickets on trac addressing these kernel modules: https://dev.openwrt.org/ticket/9234 https://dev.openwrt.org/ticket/8928 I also have my own patch that just packages all of the missing modules into a single kmod-crypto-ipsec package. It would be nice to get some discussion how these modules should be packaged so we can get working ipsec support in trunk. Signed-off-by: Lars Hjersted <lars at hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@26789 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-04-29 15:26:26 +00:00
$(eval $(call BuildPlugin,socket-default,default socket for IKEv2,))
$(eval $(call BuildPlugin,socket-raw,RAW socket for IKEv1 and IKEv2,))
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
$(eval $(call BuildPlugin,sql,SQL database interface,))
strongswan4: make build dependencies on libraries required by plugins conditional git-svn-id: svn://svn.openwrt.org/openwrt/packages@21624 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-05-29 23:34:33 +00:00
$(eval $(call BuildPlugin,sqlite,SQLite database interface,+strongswan4-mod-sql +PACKAGE_strongswan4-mod-sqlite:libsqlite3))
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
$(eval $(call BuildPlugin,stroke,Stroke,))
[package] update strongswan4 to 4.5.2 Update version of strongswan4 package from 4.5.1 to 4.5.2. Add new strongswan4 plugins: coupling, duplicheck, whitelist. Add strongswan4-libfast package and make build dependencies on clearsilver and fcgi conditional. Previously libfast was being built, but not packaged. Now libfast will only be built when the it's package is selected. Remove ipsec.conf and strongswan.conf and use configuration files from upstream instead. The previously provided strongswan.conf was not functional. Omit strongswan4-mod-kernel-klips from strongswan4-full meta package in favor of strongswan4-mod-kernel-netlink. Only one of these two kernel interfaces should be installed. Omit strongswan4-mod-socket-default from strongswan4-full meta package in favor of strongswan4-mod-socket-raw. Only the raw socket allows charon to run while pluto is also running. Make all build dependencies on libraries required by strongswan4 plugins conditional. Signed-off-by: Lars Hjersted <lars@hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@27092 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-06-02 14:24:20 +00:00
$(eval $(call BuildPlugin,uci,UCI config interface,+PACKAGE_strongswan4-mod-uci:libuci))
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
$(eval $(call BuildPlugin,updown,updown firewall,))
[package] update strongswan4 to 4.5.2 Update version of strongswan4 package from 4.5.1 to 4.5.2. Add new strongswan4 plugins: coupling, duplicheck, whitelist. Add strongswan4-libfast package and make build dependencies on clearsilver and fcgi conditional. Previously libfast was being built, but not packaged. Now libfast will only be built when the it's package is selected. Remove ipsec.conf and strongswan.conf and use configuration files from upstream instead. The previously provided strongswan.conf was not functional. Omit strongswan4-mod-kernel-klips from strongswan4-full meta package in favor of strongswan4-mod-kernel-netlink. Only one of these two kernel interfaces should be installed. Omit strongswan4-mod-socket-default from strongswan4-full meta package in favor of strongswan4-mod-socket-raw. Only the raw socket allows charon to run while pluto is also running. Make all build dependencies on libraries required by strongswan4 plugins conditional. Signed-off-by: Lars Hjersted <lars@hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@27092 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-06-02 14:24:20 +00:00
$(eval $(call BuildPlugin,whitelist,Peer identity whitelisting,))
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
$(eval $(call BuildPlugin,x509,x509 certificate,))
[PATCH] strongswan4 update to 4.5.1 This patch updates the strongswan4 package from 4.3.7 to 4.5.1. I have added the following plugins which get built as strongswan4-mod-<plugin> packages: constraints - X.509 constraint checking dhcp - DHCP-based IP and DNS farp - Fake arp responses led - LED blink on IKE activity revocation - X.509 revocation checking socket-default - Default socket for IKEv2 socket-raw - RAW socket of IKEv1 and IKEv2 xauth - XAUTH authentication Upstream default plugins were added to the strongswan4-default meta package. "socket-default" and "kernel-netlink" plugins were added to the strongswan4-minimal meta package since a socket and a kernel interface are required for a working setup and these are the upstream defaults in this case. The whack command was moved to strongswan4-app-pluto. The 202-clone.patch has been fixed upstream so it can be removed. The other patches were rebased for the new strongswan4 release. I have been using strongswan 4.5.1 with backfire and trunk for a couple weeks now. There are some missing kernel modules in trunk that are required for strongswan4 to work (also true for 4.3.7). There are already a couple of tickets on trac addressing these kernel modules: https://dev.openwrt.org/ticket/9234 https://dev.openwrt.org/ticket/8928 I also have my own patch that just packages all of the missing modules into a single kmod-crypto-ipsec package. It would be nice to get some discussion how these modules should be packaged so we can get working ipsec support in trunk. Signed-off-by: Lars Hjersted <lars at hjersted.com> git-svn-id: svn://svn.openwrt.org/openwrt/packages@26789 3c298f89-4303-0410-b956-a3cf2f4a3e73
2011-04-29 15:26:26 +00:00
$(eval $(call BuildPlugin,xauth,XAUTH authentication,))
[packages] add strongswan4 (closes: #2538) git-svn-id: svn://svn.openwrt.org/openwrt/packages@20965 3c298f89-4303-0410-b956-a3cf2f4a3e73
2010-04-17 23:44:49 +00:00
$(eval $(call BuildPlugin,xcbc,xcbc crypto,))
Reference in New Issue Copy Permalink