Skip to Content.
Sympa Menu

sm-commit - [SM-Commit] GIT changes to master grimoire by Vlad Glagolev (eff180687a51db585a50299c086ba80710e1a21a)

sm-commit AT lists.ibiblio.org

Subject: Source Mage code commit list

List archive

Chronological Thread  
  • From: Vlad Glagolev <scm AT sourcemage.org>
  • To: sm-commit AT lists.ibiblio.org
  • Subject: [SM-Commit] GIT changes to master grimoire by Vlad Glagolev (eff180687a51db585a50299c086ba80710e1a21a)
  • Date: Mon, 5 May 2014 16:39:55 -0500

GIT changes to master grimoire by Vlad Glagolev <stealth AT sourcemage.org>:

ChangeLog | 4 +++
net/libreswan/BUILD | 1
net/libreswan/CONFLICTS | 1
net/libreswan/DEPENDS | 47
++++++++++++++++++++++++++++++++++++++++++++
net/libreswan/DETAILS | 24 ++++++++++++++++++++++
net/libreswan/HISTORY | 3 ++
net/libreswan/PRE_BUILD | 7 ++++++
net/libreswan/init.d/ipsec | 23 +++++++++++++++++++++
net/libreswan/libreswan.gpg |binary
net/libreswan/no-pam.patch | 26 ++++++++++++++++++++++++
net/openswan/CONFLICTS | 1
net/openswan/HISTORY | 3 ++
12 files changed, 140 insertions(+)

New commits:
commit eff180687a51db585a50299c086ba80710e1a21a
Author: Vlad Glagolev <stealth AT sourcemage.org>
Commit: Vlad Glagolev <stealth AT sourcemage.org>

openswan: conflicts with new libreswan spell

commit 4666ef684e2a94ac30cd75d1a400368adab38f42
Author: Vlad Glagolev <stealth AT sourcemage.org>
Commit: Vlad Glagolev <stealth AT sourcemage.org>

libreswan: new spell, IPsec implementation for Linux - Openswan fork

diff --git a/ChangeLog b/ChangeLog
index 4b9dfd5..c40464e 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,7 @@
+2014-05-06 Vlad Glagolev <stealth AT sourcemage.org>
+ * net/libreswan: new spell, IPsec implementation for Linux - Openswan
+ fork
+
2014-05-05 Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>
* haskell/haskell-tf-random: new spell, a high-quality splittable
pseudorandom number generator
diff --git a/net/libreswan/BUILD b/net/libreswan/BUILD
new file mode 100755
index 0000000..5ddecbb
--- /dev/null
+++ b/net/libreswan/BUILD
@@ -0,0 +1 @@
+make $OPTS programs
diff --git a/net/libreswan/CONFLICTS b/net/libreswan/CONFLICTS
new file mode 100755
index 0000000..140c856
--- /dev/null
+++ b/net/libreswan/CONFLICTS
@@ -0,0 +1 @@
+conflicts openswan
diff --git a/net/libreswan/DEPENDS b/net/libreswan/DEPENDS
new file mode 100755
index 0000000..fbc7591
--- /dev/null
+++ b/net/libreswan/DEPENDS
@@ -0,0 +1,47 @@
+. "$GRIMOIRE/FUNCTIONS" &&
+
+depends gmp &&
+depends nspr &&
+depends nss &&
+depends pkgconfig &&
+depends iptables &&
+
+if is_version_less $(get_kernel_version) 2.6.9; then
+ depends ipsec-tools
+else
+ depends iproute2 &&
+
+ if spell_ok iproute2 && is_version_less $(installed_version iproute2)
2.6.8; then
+ force_depends iproute2
+ fi
+fi &&
+
+optional_depends linux-pam \
+ "USE_XAUTHPAM=true" \
+ "USE_XAUTHPAM=false" \
+ "for pam/xauth support" &&
+
+optional_depends curl \
+ "USE_LIBCURL=true" \
+ "USE_LIBCURL=false" \
+ "for CRL fetching support via curl" &&
+
+optional_depends openldap \
+ "USE_LDAP=true" \
+ "USE_LDAP=false" \
+ "for CRL fetching support via openldap" &&
+
+optional_depends libselinux \
+ "USE_LABELED_IPSEC=true" \
+ "USE_LABELED_IPSEC=false" \
+ "for Labeled IPSec Functionality" &&
+
+optional_depends unbound \
+ "USE_DNSSEC=true" \
+ "USE_DNSSEC=false" \
+ "for DNSSEC support" &&
+
+optional_depends libcap-ng \
+ "USE_LIBCAP_NG=true" \
+ "USE_LIBCAP_NG=false" \
+ "to drop unneeded capabilities for the pluto daemon"
diff --git a/net/libreswan/DETAILS b/net/libreswan/DETAILS
new file mode 100755
index 0000000..1c82ab1
--- /dev/null
+++ b/net/libreswan/DETAILS
@@ -0,0 +1,24 @@
+ SPELL=libreswan
+ VERSION=3.8
+ SOURCE=$SPELL-$VERSION.tar.gz
+ SOURCE2=$SOURCE.asc
+ SOURCE_DIRECTORY="$BUILD_DIRECTORY/$SPELL-$VERSION"
+ SOURCE_URL[0]=https://download.libreswan.org/$SOURCE
+ SOURCE_URL[1]=ftp://ftp.libreswan.org/$SOURCE
+ SOURCE2_URL[0]=${SOURCE_URL[0]}.asc
+ SOURCE2_URL[1]=${SOURCE_URL[1]}.asc
+ SOURCE_GPG=libreswan.gpg:$SOURCE2:UPSTREAM_KEY
+ SOURCE2_IGNORE=signature
+ LICENSE[0]=GPL
+ WEB_SITE=http://libreswan.org/
+ ENTERED=20140506
+ KEYWORDS="net"
+ SHORT="IPsec implementation for Linux - Openswan fork"
+cat << EOF
+Libreswan is an IPsec implementation for Linux. It has support for most of
the
+extensions (RFC + IETF drafts) related to IPsec, including IKEv2, X.509
+Digital Certificates, NAT Traversal, and many others.
+Libreswan uses the native Linux IPsec stack (NETKEY/XFRM) per default.
+
+Libreswan was forked from Openswan 2.6.38, which was forked from FreeS/WAN
1.99.
+EOF
diff --git a/net/libreswan/HISTORY b/net/libreswan/HISTORY
new file mode 100644
index 0000000..2693e86
--- /dev/null
+++ b/net/libreswan/HISTORY
@@ -0,0 +1,3 @@
+2014-05-05 Vlad Glagolev <stealth AT sourcemage.org>
+ * DETAILS, DEPENDS, CONFLICTS, {PRE_,}BUILD, libreswan.gpg,
+ init.d/ipsec, no-pam.patch: created the spell
diff --git a/net/libreswan/PRE_BUILD b/net/libreswan/PRE_BUILD
new file mode 100755
index 0000000..8bfe733
--- /dev/null
+++ b/net/libreswan/PRE_BUILD
@@ -0,0 +1,7 @@
+default_pre_build &&
+cd "$SOURCE_DIRECTORY" &&
+
+patch -p0 < "$SPELL_DIRECTORY/no-pam.patch" &&
+
+sedit "s:/usr/local:$INSTALL_ROOT/usr:g" Makefile.inc && # Install to
/usr
+sedit "s:=man:=share/man:" Makefile.inc # Install
manpages to /usr/share
diff --git a/net/libreswan/init.d/ipsec b/net/libreswan/init.d/ipsec
new file mode 100644
index 0000000..18fe740
--- /dev/null
+++ b/net/libreswan/init.d/ipsec
@@ -0,0 +1,23 @@
+#!/bin/bash
+
+PROGRAM=/usr/sbin/ipsec
+ARGS="setup"
+RUNLEVEL=3
+NEEDS="+network +remote_fs"
+
+. /etc/init.d/smgl_init
+
+status()
+{
+ $PROGRAM $ARGS status
+}
+
+start()
+{
+ $PROGRAM $ARGS start
+}
+
+stop()
+{
+ $PROGRAM $ARGS stop
+}
diff --git a/net/libreswan/libreswan.gpg b/net/libreswan/libreswan.gpg
new file mode 100644
index 0000000..f42c13c
Binary files /dev/null and b/net/libreswan/libreswan.gpg differ
diff --git a/net/libreswan/no-pam.patch b/net/libreswan/no-pam.patch
new file mode 100644
index 0000000..087ad83
--- /dev/null
+++ b/net/libreswan/no-pam.patch
@@ -0,0 +1,26 @@
+--- programs/pluto/state.h.orig
++++ programs/pluto/state.h
+@@ -213,10 +213,8 @@ struct state {
+ so_serial_t st_clonedfrom; /* serial number of parent */
+ int st_usage;
+
+-#ifdef XAUTH_HAVE_PAM
+ pthread_mutex_t xauth_mutex; /* per state xauth_mutex */
+ pthread_t xauth_tid; /* per state XAUTH_RO thread
id */
+-#endif
+
+ bool st_ikev2; /* is this an IKEv2 state? */
+ bool st_rekeytov2; /* true if this IKEv1 is about
+--- programs/pluto/xauth.c.orig
++++ programs/pluto/xauth.c
+ 2014-05-05 21:25:14.112883644 +0400
+@@ -99,9 +99,7 @@
+ chunk_t name;
+ chunk_t password;
+ chunk_t connname;
+-#ifdef XAUTH_HAVE_PAM
+ st_jbuf_t *ptr;
+-#endif
+ };
+
+ #ifdef XAUTH_HAVE_PAM
diff --git a/net/openswan/CONFLICTS b/net/openswan/CONFLICTS
new file mode 100755
index 0000000..132638a
--- /dev/null
+++ b/net/openswan/CONFLICTS
@@ -0,0 +1 @@
+conflicts libreswan
diff --git a/net/openswan/HISTORY b/net/openswan/HISTORY
index 93f38bb..318473b 100644
--- a/net/openswan/HISTORY
+++ b/net/openswan/HISTORY
@@ -1,3 +1,6 @@
+2014-05-06 Vlad Glagolev <stealth AT sourcemage.org>
+ * CONFLICTS: added, conflicts with new libreswan spell
+
2013-10-10 Vlad Glagolev <stealth AT sourcemage.org>
* DETAILS: updated spell to 2.6.39; SECURITY_PATCH++ (CVE-2013-2053)
* openswan.gpg: added 9FC816CA public key (Openswan Master Signing Key



  • [SM-Commit] GIT changes to master grimoire by Vlad Glagolev (eff180687a51db585a50299c086ba80710e1a21a), Vlad Glagolev, 05/05/2014

Archive powered by MHonArc 2.6.24.

Top of Page