Update version of strongswan4 package from 4.5.1 to 4.5.2.
Add new strongswan4 plugins: coupling, duplicheck, whitelist.
Add strongswan4-libfast package and make build dependencies on
clearsilver and fcgi conditional. Previously libfast was being built,
but not packaged. Now libfast will only be built when the it's package
is selected.
Remove ipsec.conf and strongswan.conf and use configuration files from
upstream instead. The previously provided strongswan.conf was not
functional.
Omit strongswan4-mod-kernel-klips from strongswan4-full meta package in
favor of strongswan4-mod-kernel-netlink. Only one of these two kernel
interfaces should be installed.
Omit strongswan4-mod-socket-default from strongswan4-full meta package
in favor of strongswan4-mod-socket-raw. Only the raw socket allows
charon to run while pluto is also running.
Make all build dependencies on libraries required by strongswan4 plugins
conditional.
Signed-off-by: Lars Hjersted <lars@hjersted.com>
git-svn-id: svn://svn.openwrt.org/openwrt/packages@27092 3c298f89-4303-0410-b956-a3cf2f4a3e73
Corrected patch (last try) to update tcpdump to version 4.1.1.
Signed-off-by: Christoph König <christoph.koenig@ikt.uni-hannover.de>
git-svn-id: svn://svn.openwrt.org/openwrt/packages@27091 3c298f89-4303-0410-b956-a3cf2f4a3e73
This allows people to use the luci interface to specify to dhcpd which
interfaces it should listen to, and which static MAC->IP host mappings
should it define
For the interface, this has to be done in the initscript, via
commandline when the server is started
For the static hosts, the initscript makes a file called
/tmp/dhcpd.hosts which you can include in your dhcpd.config to use the
webgui defined hosts
Fix: 7.5.2011. Now works properly on interfaces which are in a bridge
Signed-off-by: Rajko Stojadinovic <admin@rajko.info>
git-svn-id: svn://svn.openwrt.org/openwrt/packages@26998 3c298f89-4303-0410-b956-a3cf2f4a3e73
This patch also fixes the ping6 linking issues with uClibc by disabling
the libresolv-based stuff (the "-N nodeinfo-option" feature).
Signed-off-by: Luis Alberto Dallos Roa <luis.dallos at gmail.com>
git-svn-id: svn://svn.openwrt.org/openwrt/packages@26994 3c298f89-4303-0410-b956-a3cf2f4a3e73
Hi,
The patch attached to the mail updates yaddns to 1.1-rc2. Changes are:
* autotools refactoring
* fix blocked state in request if connect() or recv() failed.
Add timeout feature which abort pending request (connect(), send(), recv())
after XX seconds.
* add new ./configure options:
* --enable-debug
* --enable-debug-log
* fix segfault case if user remove account cfg and SIGHUP yaddns when
doing update procedure for the removed account.
* fix buffer overread in base64_encode function
* implement unit tests
Regards,
Anthony.
git-svn-id: svn://svn.openwrt.org/openwrt/packages@26993 3c298f89-4303-0410-b956-a3cf2f4a3e73
Attached patch allows to use the 'bind' option even if transparent proxy
support is compiled into tinyproxy (which is in openwrt). There are
several references related to the bug, but nobody seams to know why this
- apparently not needed - check was build in.
Regards
Mathias
git-svn-id: svn://svn.openwrt.org/openwrt/packages@26982 3c298f89-4303-0410-b956-a3cf2f4a3e73
The default variant of nmap does not appear to be building correctly, if
at all (all invocations of configure have --with-openssl). Add a nossl
variant to fix building.
Set PKG_BULID_DIR to differ between variants to prevent overlapping of
builds.
Signed-off-by: Kevin Locke <klocke@digitalenginesoftware.com>
git-svn-id: svn://svn.openwrt.org/openwrt/packages@26951 3c298f89-4303-0410-b956-a3cf2f4a3e73
Split rsyncd into a separate package
Make rsyncd a separate config option so that people who don't want an
rsync daemon using up RAM can still select the rsync client. Depends
on rsync for the binary, the rsyncd package just consists of the init
script and configuration files.
Signed-off-by: Russell Senior <seniorr at aracnet.com>
git-svn-id: svn://svn.openwrt.org/openwrt/packages@26852 3c298f89-4303-0410-b956-a3cf2f4a3e73
This patch updates the strongswan4 package from 4.3.7 to 4.5.1. I have
added the following plugins which get built as strongswan4-mod-<plugin>
packages:
constraints - X.509 constraint checking
dhcp - DHCP-based IP and DNS
farp - Fake arp responses
led - LED blink on IKE activity
revocation - X.509 revocation checking
socket-default - Default socket for IKEv2
socket-raw - RAW socket of IKEv1 and IKEv2
xauth - XAUTH authentication
Upstream default plugins were added to the strongswan4-default meta
package. "socket-default" and "kernel-netlink" plugins were added to the
strongswan4-minimal meta package since a socket and a kernel interface are
required for a working setup and these are the upstream defaults in this
case. The whack command was moved to strongswan4-app-pluto.
The 202-clone.patch has been fixed upstream so it can be removed. The
other patches were rebased for the new strongswan4 release.
I have been using strongswan 4.5.1 with backfire and trunk for a couple
weeks now. There are some missing kernel modules in trunk that are
required for strongswan4 to work (also true for 4.3.7). There are already
a couple of tickets on trac addressing these kernel modules:
https://dev.openwrt.org/ticket/9234https://dev.openwrt.org/ticket/8928
I also have my own patch that just packages all of the missing modules
into a single kmod-crypto-ipsec package. It would be nice to get some
discussion how these modules should be packaged so we can get working
ipsec support in trunk.
Signed-off-by: Lars Hjersted <lars at hjersted.com>
git-svn-id: svn://svn.openwrt.org/openwrt/packages@26789 3c298f89-4303-0410-b956-a3cf2f4a3e73
