diff --git a/_service b/_service index 33e352a..ce88279 100644 --- a/_service +++ b/_service @@ -1,3 +1,3 @@ - /strongswan-4.5.2.tar.bz2.sigdownload.strongswan.org -/strongswan-4.5.2.tar.bz2download.strongswan.org \ No newline at end of file + /strongswan-4.5.3.tar.bz2.sigdownload.strongswan.org +/strongswan-4.5.3.tar.bz2download.strongswan.org diff --git a/_service:download_url:strongswan-4.5.2.tar.bz2 b/_service:download_url:strongswan-4.5.2.tar.bz2 deleted file mode 100644 index 8da6943..0000000 --- a/_service:download_url:strongswan-4.5.2.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:f13b5db946393dacc8590db7397b3ddd56eb37619f93a482a9c6cf9d556e105a -size 3271219 diff --git a/_service:download_url:strongswan-4.5.2.tar.bz2.sig b/_service:download_url:strongswan-4.5.2.tar.bz2.sig deleted file mode 100644 index 6089e7f..0000000 --- a/_service:download_url:strongswan-4.5.2.tar.bz2.sig +++ /dev/null @@ -1,14 +0,0 @@ ------BEGIN PGP SIGNATURE----- -Version: GnuPG v1.4.11 (GNU/Linux) - -iQGcBAABAgAGBQJNzvEVAAoJEN9CwXCzTbp3iKMMAJ2jhS0kbzGn/E3osePgMJHH -lVbhKag6rnIQfNS9lelBrdJLI/3xV6b88geqvcCgcK2X545X4PUcQtZm08N75qLH -Vjku1qKcKjrPa65glD0nkRYg4MS9dN+obYiPl+S6HhrDO05pvddhSx2a7YA97F8W -7CAbZdULLIIgVlC2plv+W3y1tLQNQEP4rS7FrzMVuTeZCw3W0XawQMvIOwckLEfE -AHMGXrFjevvipOr9pOD5uzi9kJFQGsw2kl7+W2o9mZUlkFGlgVFemH/T5WUaz/BJ -ha1HLdsgIOOJQlLV+bj7bFTbNkkVEdY4hr4c+9JHWr6vRhe/7zrRCP5PIidnqpQ2 -e5O/26qzz1IyRRA4v/KO5b35BTp5dJjPeeOknLz+vBptMiU7uXpUtT0NmsojSw0f -SOli9Kl9RSLL+7E6y8k6qU8uWxfTIRsVWsmBZQkdByY4Ua1UtMv67YdRlaxgwe/M -xpu2k+aSGZVcUBrvOf3GFT9I6pL+orac4+gYBGIJJw== -=LG31 ------END PGP SIGNATURE----- diff --git a/_service:download_url:strongswan-4.5.3.tar.bz2 b/_service:download_url:strongswan-4.5.3.tar.bz2 new file mode 100644 index 0000000..190cb12 --- /dev/null +++ b/_service:download_url:strongswan-4.5.3.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:a59fa0d9820fb06a3c848f4537b9256d2067265ad10e1b007b79f3b16279f1ff +size 3299522 diff --git a/_service:download_url:strongswan-4.5.3.tar.bz2.sig b/_service:download_url:strongswan-4.5.3.tar.bz2.sig new file mode 100644 index 0000000..1087a44 --- /dev/null +++ b/_service:download_url:strongswan-4.5.3.tar.bz2.sig @@ -0,0 +1,14 @@ +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v1.4.11 (GNU/Linux) + +iQGcBAABAgAGBQJOOFNGAAoJEN9CwXCzTbp37JUL/jmWmoYQ4qcSQtCfyLbW761a +8HvTeoAB+gE8srcOCdnSy/i+ebVp4My3VwwivQwCHWHcbC29RjZsytRxsItqN3UR +4LCEMQ9PA6oIHl7EPumc24RfcWd4TBrlxyk/TeOYOyT0GAjvPF+w0T73pEBMQHGF +qHQXziblGfB9pxxyVJpvPq7yW+wS7nIj+8B7evitC5TimW5D3rGN1eav+da16ynl +RJuGtRlxKTy/dnC+WzbJtyxGITcnl2lPao3SilazKDx55OEMboxSTfX3x0QZ2Y2z +jIV3UzmTh7ZTqOpGrxhMr8lPiuB9w9PWCzfno0WB99suzo7IQtjyfYRifa0A/b3S +Wtp4OLdBwgStnlQdXhk2INhBSMVH3FRGZOwzr7Eb2SLK2v0BDYn3/rPSZMd2bivO +zRQeYE9LfuUpJT2BTB69YsAg3pvU55g2mU7GD8cojkxcT60HHKl4ykzwR0dTJjyK +CwV6JYoWDGkZqwrRfwJrf9o6Xlk4KdyyQGRRm/8hqg== +=7D0s +-----END PGP SIGNATURE----- diff --git a/strongswan-4.5.2-rpmlintrc b/strongswan-4.5.3-rpmlintrc similarity index 100% rename from strongswan-4.5.2-rpmlintrc rename to strongswan-4.5.3-rpmlintrc diff --git a/strongswan.changes b/strongswan.changes index cd0cec6..c30245d 100644 --- a/strongswan.changes +++ b/strongswan.changes @@ -1,3 +1,32 @@ +------------------------------------------------------------------- +Thu Sep 8 12:42:51 UTC 2011 - mt@suse.com + +- Updated to strongSwan 4.5.2 release, changes overview since 4.5.2: + * Our private libraries (e.g. libstrongswan) are not installed directly in + prefix/lib anymore. Instead a subdirectory is used (prefix/lib/ipsec/ by + default). The plugins directory is also moved from libexec/ipsec/ to that + directory. + * The dynamic IMC/IMV libraries were moved from the plugins directory to + a new imcvs directory in the prefix/lib/ipsec/ subdirectory. + * Job priorities were introduced to prevent thread starvation caused by too + many threads handling blocking operations (such as CRL fetching). + * Two new strongswan.conf options allow to fine-tune performance on IKEv2 + gateways by dropping IKE_SA_INIT requests on high load. + * IKEv2 charon daemon supports PASS and DROP shunt policies + preventing traffic to go through IPsec connections. Installation of the + shunt policies either via the XFRM netfilter or PFKEYv2 IPsec kernel + interfaces. + * The history of policies installed in the kernel is now tracked so that e.g. + trap policies are correctly updated when reauthenticated SAs are terminated. + * IMC/IMV Scanner pair implementing the RFC 5792 PA-TNC (IF-M) protocol. + Using "netstat -l" the IMC scans open listening ports on the TNC client + and sends a port list to the IMV which based on a port policy decides if + the client is admitted to the network. + * IMC/IMV Test pair implementing the RFC 5792 PA-TNC (IF-M) protocol. + * The IKEv2 close action does not use the same value as the ipsec.conf dpdaction + setting, but the value defined by its own closeaction keyword. The action + is triggered if the remote peer closes a CHILD_SA unexpectedly. + ------------------------------------------------------------------- Sun May 29 16:37:00 UTC 2011 - jcnengel@googlemail.com diff --git a/strongswan.spec b/strongswan.spec index ac6987c..29039eb 100644 --- a/strongswan.spec +++ b/strongswan.spec @@ -19,7 +19,9 @@ Name: strongswan -%define upstream_version 4.5.2 +Version: 4.5.3 +Release: 0 +%define upstream_version %{version} %define strongswan_docdir %{_docdir}/%{name} %define strongswan_plugins %{_libexecdir}/ipsec/plugins %define with_mysql 1 @@ -27,8 +29,6 @@ Name: strongswan %define with_gcrypt 0%{suse_version} >= 1110 %define with_nm 0%{suse_version} >= 1110 %define with_tests 0 -Version: 4.5.2 -Release: 1 License: GPLv2+ Group: Productivity/Networking/Security Summary: OpenSource IPsec-based VPN Solution