Accepting request 1092643 from network:vpn

- Remove pre-SLE15 build logic
- Update to release 5.9.11

OBS-URL: https://build.opensuse.org/request/show/1092643
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/strongswan?expand=0&rev=90

strongswan-5.9.10.tar.bz2

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:3b72789e243c9fa6f0a01ccaf4f83766eba96a5e5b1e071d36e997572cf34654
-size 4765407

strongswan-5.9.10.tar.bz2.sig

@@ -1,14 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQGzBAABCgAdFiEElI8Vik52onvz0HUy30LBcLNNuncFAmQAZmIACgkQ30LBcLNN
-uncmawv8DgoR/EdXdzvqzToiDYREwU5CfIYAPCYmUfw7tdwTZsiN9rdt13lI8+ei
-8IqYIrtGvKVtiV3qwNaxxD/spQ+b/jbOk+ifzCQzylD5gv9fFyyKjiYIiLmK3qhr
-7sc+tN90HY443qN4JV1rwHP4jN57pmNZ2qg2CbzU/zpePUHj5MlM3kgGd5bO5Q6L
-MWmstO/RcjIIsZusqscrOGsaZrkULTeLyrOTLoJcM06b0F4vzeDwhLJjVoqYFVt5
-dPXLXygUfVUr+aAvCfNA03zokt6Ok9aSOBZZ8+nMPLU6wmWjjIdOf0/H9JG3/v6F
-SGHVxlB4Z7sCkDzvmB/vmYquGw+gx+0Fx28eEV4E7TnrJrdlqC5n8wrPO9iFQ36y
-QEua+S/q7qHSUBr01DW35e70oiJmbOqSH+poPVz2Qwk3ZVgcqIxCUpz6aWPjAicL
-7VMYBssX6R5cCD3nIuHSe1+Iyx/AuFP7nuPHQrkIAKsDMVZR8GClNz+M8ZM7Cbar
-a6YUUR/D
-=FN1F
------END PGP SIGNATURE-----

strongswan-5.9.11.tar.bz2

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:ddf53f1f26ad26979d5f55e8da95bd389552f5de3682e35593f9a70b2584ed2d
+size 4786552

strongswan-5.9.11.tar.bz2.sig

@@ -0,0 +1,14 @@
+-----BEGIN PGP SIGNATURE-----
+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+=+d5Q
+-----END PGP SIGNATURE-----

strongswan.changes

@@ -1,3 +1,33 @@
+-------------------------------------------------------------------
+Mon Jun 12 15:54:53 UTC 2023 - Jan Engelhardt <jengelh@inai.de>
+
+- Remove pre-SLE15 build logic
+
+-------------------------------------------------------------------
+Mon Jun 12 15:22:09 UTC 2023 - Mohd Saquib <mohd.saquib@suse.com>
+
+- Update to release 5.9.11
+  * A deadlock in the vici plugin has been fixed
+  * Per RFC 5280, CRLs now have to be signed by a certificate that
+    either encodes the cRLSign keyUsage bit (even if it is a CA
+    certificate), or is a CA certificate without a keyUsage
+    extension.
+  * Support for optional CA labels in EST server URIs was added to
+    the pki --est and pki --estca commands.
+  * The pkcs7 and openssl plugins now support CMS-style signatures
+    in PKCS#7 containers, which allows verifying RSA-PSS and ECDSA
+    signatures.
+  * Fixed a regression in the server implementation of EAP-TLS when
+    using TLS <=1.2.
+  * The EAP-TLS client does now enforce that the TLS handshake is
+    complete when using TLS <=1.2.
+  * On Linux, the kernel-libipsec plugin can now optionally handle
+    ESP packets without UDP encapsulation.
+  * The dhcp plugin uses an alternative method to determine the
+    source address when sending unicast DHCP requests.
+  * ECDSA and EdDSA public keys are supported by the ipseckey
+    plugin when parsing RFC 4025 IPSECKEY resource records.
+
 -------------------------------------------------------------------
 Wed Apr  5 01:34:28 UTC 2023 - Mohd Saquib <mohd.saquib@suse.com>
 

strongswan.spec

@@ -17,7 +17,7 @@
 
 
 Name:           strongswan
-Version:        5.9.10
+Version:        5.9.11
 Release:        0
 %define         upstream_version     %{version}
 %define         strongswan_docdir    %{_docdir}/%{name}
@@ -31,31 +31,19 @@ Release:        0
 %else
 %bcond_with     tests
 %endif
-%if 0%{suse_version} > 1310
 %bcond_without  fipscheck
-%else
-%bcond_with     fipscheck
-%endif
 %ifarch %{ix86} ppc64le
 %bcond_without  integrity
 %else
 %bcond_with     integrity
 %endif
-%if 0%{suse_version} > 1110
 %bcond_without  farp
 %bcond_without  afalg
 %bcond_without  mysql
 %bcond_without  sqlite
 %bcond_without  gcrypt
 %bcond_without  nm
-%else
-%bcond_with     farp
-%bcond_with     afalg
-%bcond_with     mysql
-%bcond_with     sqlite
-%bcond_with     gcrypt
-%bcond_with     nm
-%endif
+%bcond_without  systemd
 Summary:        IPsec-based VPN solution
 License:        GPL-2.0-or-later
 Group:          Productivity/Networking/Security