- Updated to strongSwan 4.5.1 release, changes overview since 4.5.0:

* Implements RFC 5793 Posture Broker Protocol (BP)
  * Re-implemented TNCCS 1.1 protocol
  * Allows to store IKE and ESP proposals in an SQL database
  * Allows to store CRL and OCSP cert points in an SQL database
  * New 'include' statement in strongswan.conf allows recursions
  * Modifications of strongswan.conf parser, cause syntax attr plugin
    syntax changes.
  * ipsec listalgs now appends the plugin registering an algo
  * Adds support for Traffic Flow Confidentiality with Linux 2.6.38
  * New af-alg plugin allows to use new primitives in 2.6.38 crypto api
    and removes the need for additional userland implementations.
  * IKEv2 daemon supports the INITIAL_CONTACT notify
  * conftest conformance testing framework
  * new constraints plugin provides advanced X.509 constraint checking
  * left/rightauth ipsec.conf keywords accept minimum strengths
  * basic support for delta CRLs
  See the NEWS file or http://download.strongswan.org/CHANGES4.txt
  for a detailed description of the changes.

OBS-URL: https://build.opensuse.org/package/show/network:vpn/strongswan?expand=0&rev=25

strongswan-4.5.0-rpmlintrc

@@ -1,5 +0,0 @@
-### Known warnings:
-# - traditional name
-addFilter("strongswan.* incoherent-init-script-name ipsec")
-# - readme only, triggers full ipsec + ikev1&ikev2 install
-addFilter("strongswan.* no-binary")

strongswan-4.5.0.tar.bz2

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:108b0fbbf119011b24eb6ccabc3d9f8888f4036382dd3aad011dec04100ad559
-size 3154064

strongswan-4.5.0.tar.bz2.sig

@@ -1,14 +0,0 @@
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v1.4.10 (GNU/Linux)
-
-iQGcBAABAgAGBQJMykZ7AAoJEN9CwXCzTbp36BYL/A9q4F2n7EHvVW7HTmG6ogMw
-are1n1ZYRdqUmrdk2woCqJPfkzihHMa1nc7u6hgucRDi7wJfJBXoAT0Rvd9AN8qw
-bKuaajKRvXFA14qtORvkX4z+Se+/nqL3+ZlvlnPS6rgpdBD+kZY+sFNdSAhJxShJ
-zbJ4U+jnO74pyzp8I9hp1HccPKJjt/ljlCB7izPqJ1bQAbrNTQr90JHPNz9BSQkq
-BIF5T+nsRWE1p2tWzz6IAjvbC3ghc2lmVy5FGKjItMXWxsyCYuira4MlbGp2ObKE
-1aa9QbNYxJ0aD0vsX+r8usXvpdq5QLQotp1bLG2m2XYWdzC4yBwRHj2pS8JHIENP
-y9o4za9finsG1Ahb661+2Pw7xO/R2blLDDQyhxH5e6AO7p4Pz050yiicCxVKEwG0
-mJM6c5TbAerBCH2ovgwNeGV3hsOt9ng7e63SMIBkYtN41uQV8hqUjZbtYcvpsER2
-bB/Jdp14aR1F9jMgEmt/I6tNHizJWvB5FFGLqH2cTQ==
-=o5iz
------END PGP SIGNATURE-----

strongswan-4.5.1.tar.bz2

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:252d7369d94aa2d79e6fad078853b07ca897ea811ab1e1a2b008bcec0d1e758a
+size 3254264

strongswan-4.5.1.tar.bz2.sig

@@ -0,0 +1,14 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1.4.10 (GNU/Linux)
+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+=Q4kv
+-----END PGP SIGNATURE-----

strongswan.changes

@@ -1,3 +1,26 @@
+-------------------------------------------------------------------
+Mon Mar 14 10:59:32 UTC 2011 - mt@suse.de
+
+- Updated to strongSwan 4.5.1 release, changes overview since 4.5.0:
+  * Implements RFC 5793 Posture Broker Protocol (BP)
+  * Re-implemented TNCCS 1.1 protocol
+  * Allows to store IKE and ESP proposals in an SQL database
+  * Allows to store CRL and OCSP cert points in an SQL database
+  * New 'include' statement in strongswan.conf allows recursions
+  * Modifications of strongswan.conf parser, cause syntax attr plugin
+    syntax changes.
+  * ipsec listalgs now appends the plugin registering an algo
+  * Adds support for Traffic Flow Confidentiality with Linux 2.6.38
+  * New af-alg plugin allows to use new primitives in 2.6.38 crypto api
+    and removes the need for additional userland implementations.
+  * IKEv2 daemon supports the INITIAL_CONTACT notify
+  * conftest conformance testing framework
+  * new constraints plugin provides advanced X.509 constraint checking
+  * left/rightauth ipsec.conf keywords accept minimum strengths
+  * basic support for delta CRLs
+  See the NEWS file or http://download.strongswan.org/CHANGES4.txt
+  for a detailed description of the changes.
+
 -------------------------------------------------------------------
 Mon Nov 22 09:05:30 UTC 2010 - mt@suse.de
 

strongswan.spec

@@ -1,5 +1,5 @@
 #
-# spec file for package strongswan (Version 4.5.0)
+# spec file for package strongswan (Version 4.5.1)
 #
 # Copyright (c) 2010 SUSE LINUX Products GmbH, Nuernberg, Germany.
 #
@@ -19,7 +19,7 @@
 
 
 Name:           strongswan
-%define         upstream_version 4.5.0
+%define         upstream_version 4.5.1
 %define         strongswan_docdir  %{_docdir}/%{name}
 %define         strongswan_plugins %{_libexecdir}/ipsec/plugins
 %define		with_mysql	1
@@ -27,8 +27,8 @@ Name:           strongswan
 %define		with_gcrypt	0%{suse_version} >= 1110
 %define		with_nm		0%{suse_version} >= 1110
 %define		with_tests	0
-Version:        4.5.0
+Version:        4.5.1
-Release:        1
+Release:        0
 License:        GPLv2+
 Group:          Productivity/Networking/Security
 Summary:        OpenSource IPsec-based VPN Solution
@@ -178,6 +178,7 @@ to maintain both, IKEv1 and IKEv2 daemons, using /etc/ipsec.conf and
 /etc/ipsec.sectes files.
 
 %if %with_mysql
+
 %package mysql
 License:        GPLv2+
 Summary:        OpenSource IPsec-based VPN Solution
@@ -192,6 +193,7 @@ This package provides the strongswan mysql plugin.
 %endif
 
 %if %with_sqlite
+
 %package sqlite
 License:        GPLv2+
 Summary:        OpenSource IPsec-based VPN Solution
@@ -206,6 +208,7 @@ This package provides the strongswan sqlite plugin.
 %endif
 
 %if %with_nm
+
 %package nm
 License:        GPLv2+
 Summary:        OpenSource IPsec-based VPN Solution
@@ -224,6 +227,7 @@ NetworkManager-strongswan graphical user interface.
 %endif
 
 %if %with_tests
+
 %package tests
 License:        GPLv2+
 Summary:        OpenSource IPsec-based VPN Solution
@@ -415,14 +419,11 @@ fi
 %{_mandir}/man3/anyaddr.3*
 %{_mandir}/man3/atoaddr.3*
 %{_mandir}/man3/atoasr.3*
-%{_mandir}/man3/atosa.3*
 %{_mandir}/man3/atoul.3*
 %{_mandir}/man3/goodmask.3*
 %{_mandir}/man3/initaddr.3*
 %{_mandir}/man3/initsubnet.3*
-%{_mandir}/man3/keyblobtoid.3*
 %{_mandir}/man3/portof.3*
-%{_mandir}/man3/prng.3*
 %{_mandir}/man3/rangetosubnet.3*
 %{_mandir}/man3/sameaddr.3*
 %{_mandir}/man3/subnetof.3*
@@ -430,13 +431,11 @@ fi
 %{_mandir}/man3/ttodata.3*
 %{_mandir}/man3/ttosa.3*
 %{_mandir}/man3/ttoul.3*
-%{_mandir}/man8/_copyright.8*
 %{_mandir}/man8/_updown.8*
 %{_mandir}/man8/_updown_espmark.8*
 %{_mandir}/man8/openac.8*
 %{_mandir}/man8/pluto.8*
 %{_mandir}/man8/scepclient.8*
-%{_mandir}/man8/starter.8*
 
 %files libs0
 %defattr(-,root,root)
@@ -457,6 +456,7 @@ fi
 %{strongswan_plugins}/libstrongswan-attr.so
 %{strongswan_plugins}/libstrongswan-attr-sql.so
 %{strongswan_plugins}/libstrongswan-blowfish.so
+%{strongswan_plugins}/libstrongswan-constraints.so
 %{strongswan_plugins}/libstrongswan-curl.so
 %{strongswan_plugins}/libstrongswan-des.so
 %{strongswan_plugins}/libstrongswan-dhcp.so
@@ -503,6 +503,7 @@ fi
 %dir %ghost %{_localstatedir}/run/strongswan
 
 %if %with_nm
+
 %files nm
 %defattr(-,root,root)
 %dir %{_libexecdir}/ipsec
@@ -511,6 +512,7 @@ fi
 %endif
 
 %if %with_mysql
+
 %files mysql
 %defattr(-,root,root)
 %dir %{strongswan_plugins}
@@ -518,6 +520,7 @@ fi
 %endif
 
 %if %with_sqlite
+
 %files sqlite
 %defattr(-,root,root)
 %dir %{strongswan_plugins}
@@ -525,6 +528,7 @@ fi
 %endif
 
 %if %with_tests
+
 %files tests
 %defattr(-,root,root)
 %dir %{strongswan_plugins}