diff --git a/_service b/_service new file mode 100644 index 0000000..33e352a --- /dev/null +++ b/_service @@ -0,0 +1,3 @@ + + /strongswan-4.5.2.tar.bz2.sigdownload.strongswan.org +/strongswan-4.5.2.tar.bz2download.strongswan.org \ No newline at end of file diff --git a/_service:download_url:strongswan-4.5.2.tar.bz2 b/_service:download_url:strongswan-4.5.2.tar.bz2 new file mode 100644 index 0000000..8da6943 --- /dev/null +++ b/_service:download_url:strongswan-4.5.2.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:f13b5db946393dacc8590db7397b3ddd56eb37619f93a482a9c6cf9d556e105a +size 3271219 diff --git a/_service:download_url:strongswan-4.5.2.tar.bz2.sig b/_service:download_url:strongswan-4.5.2.tar.bz2.sig new file mode 100644 index 0000000..6089e7f --- /dev/null +++ b/_service:download_url:strongswan-4.5.2.tar.bz2.sig @@ -0,0 +1,14 @@ +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v1.4.11 (GNU/Linux) + +iQGcBAABAgAGBQJNzvEVAAoJEN9CwXCzTbp3iKMMAJ2jhS0kbzGn/E3osePgMJHH +lVbhKag6rnIQfNS9lelBrdJLI/3xV6b88geqvcCgcK2X545X4PUcQtZm08N75qLH +Vjku1qKcKjrPa65glD0nkRYg4MS9dN+obYiPl+S6HhrDO05pvddhSx2a7YA97F8W +7CAbZdULLIIgVlC2plv+W3y1tLQNQEP4rS7FrzMVuTeZCw3W0XawQMvIOwckLEfE +AHMGXrFjevvipOr9pOD5uzi9kJFQGsw2kl7+W2o9mZUlkFGlgVFemH/T5WUaz/BJ +ha1HLdsgIOOJQlLV+bj7bFTbNkkVEdY4hr4c+9JHWr6vRhe/7zrRCP5PIidnqpQ2 +e5O/26qzz1IyRRA4v/KO5b35BTp5dJjPeeOknLz+vBptMiU7uXpUtT0NmsojSw0f +SOli9Kl9RSLL+7E6y8k6qU8uWxfTIRsVWsmBZQkdByY4Ua1UtMv67YdRlaxgwe/M +xpu2k+aSGZVcUBrvOf3GFT9I6pL+orac4+gYBGIJJw== +=LG31 +-----END PGP SIGNATURE----- diff --git a/strongswan-4.5.1.tar.bz2 b/strongswan-4.5.1.tar.bz2 deleted file mode 100644 index d2458f6..0000000 --- a/strongswan-4.5.1.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:252d7369d94aa2d79e6fad078853b07ca897ea811ab1e1a2b008bcec0d1e758a -size 3254264 diff --git a/strongswan-4.5.1.tar.bz2.sig b/strongswan-4.5.1.tar.bz2.sig deleted file mode 100644 index d2e7cb7..0000000 --- a/strongswan-4.5.1.tar.bz2.sig +++ /dev/null @@ -1,14 +0,0 @@ ------BEGIN PGP SIGNATURE----- -Version: GnuPG v1.4.10 (GNU/Linux) - -iQGcBAABAgAGBQJNVFbWAAoJEN9CwXCzTbp3NRoL/jeGdXy0VcT+MRhLP9aKWC3w -b8xAKl8mX0LqzkFL4o1nmiy+hAZXogVZiBqcmgCzyhD1QicpZEGMiKRpcXDxGkkS -1UrSj6zPWSN4lTJus7AoEDo0FdQ/mpPqXDU/4GLSQn7rZcAML6O6cp9h0yuQqM+4 -SewztJ7VzT1OIhNEx5GjJSJkOGJGt/NhbaFNvUSpjw2OOEwFXVDara5z2hv7DVyX -hDWRsVry2JR/dg4z9hY5WsRUgYjVry/cBQ32B2XStGUX/sy9LSUmhWsJRjfdAppt -I+04n2cKpKHHy8CoNOlmdq5bllMQ1BbnZCFtpScPg7Mf5Qzxg3qKAb7MzczdGQPQ -iHGirW1lA9En4DRCbauqVIaVNYslWpp8qliWGqTDEDzZcFs9aujNXyVteY5tXvEJ -XG5sODlfRwyEZOi0bywgyHgnCeCl2DMBA3xKs5m5lInH98CWFXG1PrJoJq7XDe4D -i00IESUJmdE9x5L0uA21vYUiLbmZs/ZOBXQdcx69Vg== -=Q4kv ------END PGP SIGNATURE----- diff --git a/strongswan-4.5.1-rpmlintrc b/strongswan-4.5.2-rpmlintrc similarity index 100% rename from strongswan-4.5.1-rpmlintrc rename to strongswan-4.5.2-rpmlintrc diff --git a/strongswan.changes b/strongswan.changes index 54a6e46..cd0cec6 100644 --- a/strongswan.changes +++ b/strongswan.changes @@ -1,3 +1,38 @@ +------------------------------------------------------------------- +Sun May 29 16:37:00 UTC 2011 - jcnengel@googlemail.com + +- Updated to strongSwan 4.5.2 release, changes overview since 4.5.1: + * The whitelist plugin for the IKEv2 daemon maintains an in-memory identity + whitelist. Any connection attempt of peers not whitelisted will get rejected. + The 'ipsec whitelist' utility provides a simple command line frontend for + whitelist administration. + * The duplicheck plugin provides a specialized form of duplicate checking, + doing a liveness check on the old SA and optionally notify a third party + application about detected duplicates. + * The coupling plugin permanently couples two or more devices by limiting + authentication to previously used certificates. + * In the case that the peer config and child config don't have the same name + (usually in SQL database defined connections), ipsec up|route + starts|routes all associated child configs and ipsec up|route + only starts|routes the specific child config. + * fixed the encoding and parsing of X.509 certificate policy statements (CPS). + * Duncan Salerno contributed the eap-sim-pcsc plugin implementing a + pcsc-lite based SIM card backend. + * The eap-peap plugin implements the EAP PEAP protocol. Interoperates + successfully with a FreeRADIUS server and Windows 7 Agile VPN clients. + * The IKEv2 daemon charon rereads strongswan.conf on SIGHUP and instructs + all plugins to reload. Currently only the eap-radius and the attr plugins + support configuration reloading. + * Added userland support to the IKEv2 daemon for Extended Sequence Numbers + support coming with Linux 2.6.39. To enable ESN on a connection, add + the 'esn' keyword to the proposal. The default proposal uses 32-bit sequence + numbers only ('noesn'), and the same value is used if no ESN mode is + specified. To negotiate ESN support with the peer, include both, e.g. + esp=aes128-sha1-esn-noesn. + * In addition to ESN, Linux 2.6.39 gained support for replay windows larger + than 32 packets. The new global strongswan.conf option 'charon.replay_window' + configures the size of the replay window, in packets. + ------------------------------------------------------------------- Mon Mar 14 10:59:32 UTC 2011 - mt@suse.de diff --git a/strongswan.spec b/strongswan.spec index 1a7863f..c2cbfdb 100644 --- a/strongswan.spec +++ b/strongswan.spec @@ -1,5 +1,5 @@ # -# spec file for package strongswan (Version 4.5.1) +# spec file for package strongswan (Version 4.5.2) # # Copyright (c) 2010 SUSE LINUX Products GmbH, Nuernberg, Germany. # @@ -19,7 +19,7 @@ Name: strongswan -%define upstream_version 4.5.1 +%define upstream_version 4.5.2 %define strongswan_docdir %{_docdir}/%{name} %define strongswan_plugins %{_libexecdir}/ipsec/plugins %define with_mysql 1 @@ -27,7 +27,7 @@ Name: strongswan %define with_gcrypt 0%{suse_version} >= 1110 %define with_nm 0%{suse_version} >= 1110 %define with_tests 0 -Version: 4.5.1 +Version: 4.5.2 Release: 0 License: GPLv2+ Group: Productivity/Networking/Security