forked from pool/strongswan
- Updated to strongSwan 4.6.3 release:
- The tnc-pdp plugin implements a RADIUS server interface allowing a strongSwan TNC server to act as a Policy Decision Point. - The eap-radius authentication backend enforces Session-Timeout attributes using RFC4478 repeated authentication and acts upon RADIUS Dynamic Authorization extensions, RFC 5176. Currently supported are disconnect requests and CoA messages containing a Session-Timeout. - The eap-radius plugin can forward arbitrary RADIUS attributes from and to clients using custom IKEv2 notify payloads. The new radattr plugin reads attributes to include from files and prints received attributes to the console. - Added support for untruncated MD5 and SHA1 HMACs in ESP as used in RFC 4595. - The cmac plugin implements the AES-CMAC-96 and AES-CMAC-PRF-128 algorithms as defined in RFC 4494 and RFC 4615, respectively. - The resolve plugin automatically installs nameservers via resolvconf(8), if it is installed, instead of modifying /etc/resolv.conf directly. - The IKEv2 charon daemon supports now raw RSA public keys in RFC 3110 DNSKEY and PKCS#1 file format. - The farp plugin sends ARP responses for any tunneled address, not only virtual IPs. - Charon resolves hosts again during additional keying tries. - Fixed switching back to original address pair during MOBIKE. - When resending IKE_SA_INIT with a COOKIE charon reuses the previous DH value, as specified in RFC 5996. This has an effect on the lifecycle of diffie_hellman_t, see source:src/libcharon/sa/keymat.h#39 for details. - COOKIEs are now kept enabled a bit longer to avoid certain race OBS-URL: https://build.opensuse.org/package/show/network:vpn/strongswan?expand=0&rev=44
This commit is contained in:
parent
2298bd91e0
commit
cf29eb7ccf
@ -1,14 +0,0 @@
|
|||||||
Index: strongswan-4.5.3/src/libcharon/plugins/nm/nm_service.h
|
|
||||||
===================================================================
|
|
||||||
--- strongswan-4.5.3.orig/src/libcharon/plugins/nm/nm_service.h
|
|
||||||
+++ strongswan-4.5.3/src/libcharon/plugins/nm/nm_service.h
|
|
||||||
@@ -21,8 +21,7 @@
|
|
||||||
#ifndef NM_SERVICE_H_
|
|
||||||
#define NM_SERVICE_H_
|
|
||||||
|
|
||||||
-#include <glib/gtypes.h>
|
|
||||||
-#include <glib-object.h>
|
|
||||||
+#include <glib.h>
|
|
||||||
#include <nm-vpn-plugin.h>
|
|
||||||
|
|
||||||
#include "nm_creds.h"
|
|
@ -1,3 +0,0 @@
|
|||||||
version https://git-lfs.github.com/spec/v1
|
|
||||||
oid sha256:a5ecb3fc60a94ded9197532c7ebf42e8e321223311e4a4834ea15219aa1625e4
|
|
||||||
size 3499818
|
|
@ -1,14 +0,0 @@
|
|||||||
-----BEGIN PGP SIGNATURE-----
|
|
||||||
Version: GnuPG v1.4.11 (GNU/Linux)
|
|
||||||
|
|
||||||
iQGcBAABAgAGBQJPQmCUAAoJEN9CwXCzTbp3bR0MAKDSSAnebTDOnDV9chiEcFhU
|
|
||||||
DarFqphtzQftugh6I+inoGlKWxtWCaGxc3+KLFNvu8KqFn9YbjhM0UEVuzudAgHU
|
|
||||||
32BcSfA/yp/LEMppICRXFLMpwqPMKMgK/KBYkMGWOtDU1HjOd3CNVr5qWoK1KltK
|
|
||||||
4u4wLTVcCbfLfK2LsMDcpx0zeijyYQ3kDTz4xgoY77N8qa9fE4jW7NbCIydy8kTn
|
|
||||||
P+ZHH+MD3Ai2YN27ZqR6zVv7ocmrpWDNEeVXqQprQ1JK3ITaPxOF8h2uX/SRIU01
|
|
||||||
cp64BXWU5vDm9Z+7QqgcFvIBKUJgutt0qngXylo04DwPrnKH6tqVMTASUju2aYB1
|
|
||||||
SWT6B0G4EjVIh3bHbKexBLcPBfpBJEGzNAn5NPY4eYGaKVEn3ryYSTReBCB3jeAk
|
|
||||||
f+TUqDs6viT7BmrT6sUkYERiHogq36Y9sRUCvwTRITf4xCDb/EjIahRnOCffSzsA
|
|
||||||
bsoXIuUws8tO4AL8nkaFaA6lzKOM0ks2BXCYjGh+eQ==
|
|
||||||
=CsWA
|
|
||||||
-----END PGP SIGNATURE-----
|
|
3
strongswan-4.6.3.tar.bz2
Normal file
3
strongswan-4.6.3.tar.bz2
Normal file
@ -0,0 +1,3 @@
|
|||||||
|
version https://git-lfs.github.com/spec/v1
|
||||||
|
oid sha256:a2443f9b22b64932cf7600723aee4f2fce51ba56e0216ae5f31dbb3470903d24
|
||||||
|
size 3555738
|
14
strongswan-4.6.3.tar.bz2.sig
Normal file
14
strongswan-4.6.3.tar.bz2.sig
Normal file
@ -0,0 +1,14 @@
|
|||||||
|
-----BEGIN PGP SIGNATURE-----
|
||||||
|
Version: GnuPG v1.4.11 (GNU/Linux)
|
||||||
|
|
||||||
|
iQGcBAABAgAGBQJPntqnAAoJEN9CwXCzTbp3UlcL/RX4foD5Y7qkvihoTU78a0E7
|
||||||
|
4T3ytLY/WIzx1xELxZhkqHeS0gN/j0bthPW+4TvEG0XH4g1JF2MqT0e4D0vFdOmT
|
||||||
|
BwUIhEC1LQHyM4CaJQpSGzIMs8YcR8HYQiHNRLjzNQcj30tpBhnchcWCikiC/MZO
|
||||||
|
YaFtZozbGnqcj6DVGjX8ymBxfpwT/+WGJ4ZIwGJwvLXc1XEtIo1zMcyX76LKHk/x
|
||||||
|
6E12pDL5/4s68XJ9/2Uk6M9lQUQOnQT4SGJvTjZ4YACc08yQbR/2mU/puCWw9pBX
|
||||||
|
qQIKn7abmgj1/wwbqwYf0pSuUrlSwWLsVJVqpPYgHEydd8IoeSgZke8JacIR9ztW
|
||||||
|
aiAtqFNRKo/rj/BuCxyt90sMBi1IPznRSB1IBYKSwp9EvuKtAlIoCmH4bHq/6w0O
|
||||||
|
4ad0rTaXhwqTjGtpQR/UsXcdtaq0pB4uauOz6bsGFUflMPXDrE6yABiuGPowCJiK
|
||||||
|
SVR9gtBHHYvzo5sRJLcemXswO93tI48/IpZRnHAmyw==
|
||||||
|
=vGXG
|
||||||
|
-----END PGP SIGNATURE-----
|
@ -1,3 +1,43 @@
|
|||||||
|
-------------------------------------------------------------------
|
||||||
|
Thu May 10 09:15:38 UTC 2012 - mt@suse.com
|
||||||
|
|
||||||
|
- Updated to strongSwan 4.6.3 release:
|
||||||
|
- The tnc-pdp plugin implements a RADIUS server interface allowing
|
||||||
|
a strongSwan TNC server to act as a Policy Decision Point.
|
||||||
|
- The eap-radius authentication backend enforces Session-Timeout
|
||||||
|
attributes using RFC4478 repeated authentication and acts upon
|
||||||
|
RADIUS Dynamic Authorization extensions, RFC 5176. Currently
|
||||||
|
supported are disconnect requests and CoA messages containing
|
||||||
|
a Session-Timeout.
|
||||||
|
- The eap-radius plugin can forward arbitrary RADIUS attributes
|
||||||
|
from and to clients using custom IKEv2 notify payloads. The new
|
||||||
|
radattr plugin reads attributes to include from files and prints
|
||||||
|
received attributes to the console.
|
||||||
|
- Added support for untruncated MD5 and SHA1 HMACs in ESP as used
|
||||||
|
in RFC 4595.
|
||||||
|
- The cmac plugin implements the AES-CMAC-96 and AES-CMAC-PRF-128
|
||||||
|
algorithms as defined in RFC 4494 and RFC 4615, respectively.
|
||||||
|
- The resolve plugin automatically installs nameservers via
|
||||||
|
resolvconf(8), if it is installed, instead of modifying
|
||||||
|
/etc/resolv.conf directly.
|
||||||
|
- The IKEv2 charon daemon supports now raw RSA public keys in RFC
|
||||||
|
3110 DNSKEY and PKCS#1 file format.
|
||||||
|
- The farp plugin sends ARP responses for any tunneled address,
|
||||||
|
not only virtual IPs.
|
||||||
|
- Charon resolves hosts again during additional keying tries.
|
||||||
|
- Fixed switching back to original address pair during MOBIKE.
|
||||||
|
- When resending IKE_SA_INIT with a COOKIE charon reuses the previous
|
||||||
|
DH value, as specified in RFC 5996.
|
||||||
|
This has an effect on the lifecycle of diffie_hellman_t, see
|
||||||
|
source:src/libcharon/sa/keymat.h#39 for details.
|
||||||
|
- COOKIEs are now kept enabled a bit longer to avoid certain race
|
||||||
|
conditions the commit message to 1b7debcc has some details.
|
||||||
|
- The new stroke user-creds command allows to set username/password
|
||||||
|
for a connection.
|
||||||
|
- strongswan.conf option added to set identifier for syslog(3) logging.
|
||||||
|
- Added a workaround for null-terminated XAuth secrets (as sent by
|
||||||
|
Android 4).
|
||||||
|
|
||||||
-------------------------------------------------------------------
|
-------------------------------------------------------------------
|
||||||
Sat Mar 3 00:10:34 UTC 2012 - tabraham@novell.com
|
Sat Mar 3 00:10:34 UTC 2012 - tabraham@novell.com
|
||||||
|
|
||||||
|
@ -16,9 +16,8 @@
|
|||||||
#
|
#
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
Name: strongswan
|
Name: strongswan
|
||||||
Version: 4.6.2
|
Version: 4.6.3
|
||||||
Release: 0
|
Release: 0
|
||||||
%define upstream_version %{version}
|
%define upstream_version %{version}
|
||||||
%define strongswan_docdir %{_docdir}/%{name}
|
%define strongswan_docdir %{_docdir}/%{name}
|
||||||
@ -43,7 +42,6 @@ Source3: %{name}-%{version}-rpmlintrc
|
|||||||
Source4: README.SUSE
|
Source4: README.SUSE
|
||||||
Patch1: %{name}_modprobe_syslog.patch
|
Patch1: %{name}_modprobe_syslog.patch
|
||||||
Patch2: %{name}-%{version}-fmt-warnings.patch
|
Patch2: %{name}-%{version}-fmt-warnings.patch
|
||||||
Patch3: %{name}-%{version}-glib.patch
|
|
||||||
BuildRoot: %{_tmppath}/%{name}-%{version}-build
|
BuildRoot: %{_tmppath}/%{name}-%{version}-build
|
||||||
BuildRequires: bison
|
BuildRequires: bison
|
||||||
BuildRequires: curl-devel
|
BuildRequires: curl-devel
|
||||||
@ -110,6 +108,7 @@ Authors:
|
|||||||
%package doc
|
%package doc
|
||||||
BuildArch: noarch
|
BuildArch: noarch
|
||||||
Summary: OpenSource IPsec-based VPN Solution
|
Summary: OpenSource IPsec-based VPN Solution
|
||||||
|
Group: Productivity/Networking/Security
|
||||||
|
|
||||||
%description doc
|
%description doc
|
||||||
StrongSwan is an OpenSource IPsec-based VPN Solution for Linux
|
StrongSwan is an OpenSource IPsec-based VPN Solution for Linux
|
||||||
@ -125,6 +124,7 @@ Authors:
|
|||||||
|
|
||||||
%package libs0
|
%package libs0
|
||||||
Summary: OpenSource IPsec-based VPN Solution
|
Summary: OpenSource IPsec-based VPN Solution
|
||||||
|
Group: Productivity/Networking/Security
|
||||||
Conflicts: strongswan < %{version}
|
Conflicts: strongswan < %{version}
|
||||||
|
|
||||||
%description libs0
|
%description libs0
|
||||||
@ -134,11 +134,13 @@ This package provides the strongswan library and plugins.
|
|||||||
|
|
||||||
%package ikev1
|
%package ikev1
|
||||||
Summary: OpenSource IPsec-based VPN Solution
|
Summary: OpenSource IPsec-based VPN Solution
|
||||||
|
Group: Productivity/Networking/Security
|
||||||
Requires: iproute2
|
Requires: iproute2
|
||||||
Requires: strongswan-libs0 = %{version}
|
|
||||||
Requires: strongswan-ipsec = %{version}
|
Requires: strongswan-ipsec = %{version}
|
||||||
Provides: strongswan-daemon = %{version} ikev1
|
Requires: strongswan-libs0 = %{version}
|
||||||
|
Provides: ikev1
|
||||||
Provides: pluto
|
Provides: pluto
|
||||||
|
Provides: strongswan-daemon = %{version}
|
||||||
Conflicts: freeswan openswan strongswan < %{version}
|
Conflicts: freeswan openswan strongswan < %{version}
|
||||||
|
|
||||||
%description ikev1
|
%description ikev1
|
||||||
@ -148,10 +150,12 @@ This package provides the pluto IKEv1 daemon.
|
|||||||
|
|
||||||
%package ikev2
|
%package ikev2
|
||||||
Summary: OpenSource IPsec-based VPN Solution
|
Summary: OpenSource IPsec-based VPN Solution
|
||||||
|
Group: Productivity/Networking/Security
|
||||||
Requires: iproute2
|
Requires: iproute2
|
||||||
Requires: strongswan-libs0 = %{version}
|
|
||||||
Requires: strongswan-daemon-starter = %{version}
|
Requires: strongswan-daemon-starter = %{version}
|
||||||
Provides: strongswan-daemon = %{version} ikev2
|
Requires: strongswan-libs0 = %{version}
|
||||||
|
Provides: ikev2
|
||||||
|
Provides: strongswan-daemon = %{version}
|
||||||
Conflicts: openswan strongswan < %{version}
|
Conflicts: openswan strongswan < %{version}
|
||||||
|
|
||||||
%description ikev2
|
%description ikev2
|
||||||
@ -161,11 +165,14 @@ This package provides the charon IKEv2 daemon.
|
|||||||
|
|
||||||
%package ipsec
|
%package ipsec
|
||||||
Summary: OpenSource IPsec-based VPN Solution
|
Summary: OpenSource IPsec-based VPN Solution
|
||||||
|
Group: Productivity/Networking/Security
|
||||||
PreReq: grep %insserv_prereq %fillup_prereq
|
PreReq: grep %insserv_prereq %fillup_prereq
|
||||||
Requires: strongswan-libs0 = %{version}
|
|
||||||
Requires: strongswan-daemon = %{version}
|
Requires: strongswan-daemon = %{version}
|
||||||
|
Requires: strongswan-libs0 = %{version}
|
||||||
|
Provides: VPN
|
||||||
|
Provides: ipsec
|
||||||
|
Provides: strongswan = %{version}
|
||||||
Provides: strongswan-daemon-starter = %{version}
|
Provides: strongswan-daemon-starter = %{version}
|
||||||
Provides: strongswan = %{version} ipsec VPN
|
|
||||||
Obsoletes: strongswan < %{version}
|
Obsoletes: strongswan < %{version}
|
||||||
Conflicts: freeswan openswan
|
Conflicts: freeswan openswan
|
||||||
|
|
||||||
@ -180,6 +187,7 @@ to maintain both, IKEv1 and IKEv2 daemons, using /etc/ipsec.conf and
|
|||||||
|
|
||||||
%package mysql
|
%package mysql
|
||||||
Summary: OpenSource IPsec-based VPN Solution
|
Summary: OpenSource IPsec-based VPN Solution
|
||||||
|
Group: Productivity/Networking/Security
|
||||||
Requires: strongswan-libs0 = %{version}
|
Requires: strongswan-libs0 = %{version}
|
||||||
|
|
||||||
%description mysql
|
%description mysql
|
||||||
@ -193,6 +201,7 @@ This package provides the strongswan mysql plugin.
|
|||||||
|
|
||||||
%package sqlite
|
%package sqlite
|
||||||
Summary: OpenSource IPsec-based VPN Solution
|
Summary: OpenSource IPsec-based VPN Solution
|
||||||
|
Group: Productivity/Networking/Security
|
||||||
Requires: strongswan-libs0 = %{version}
|
Requires: strongswan-libs0 = %{version}
|
||||||
|
|
||||||
%description sqlite
|
%description sqlite
|
||||||
@ -206,8 +215,9 @@ This package provides the strongswan sqlite plugin.
|
|||||||
|
|
||||||
%package nm
|
%package nm
|
||||||
Summary: OpenSource IPsec-based VPN Solution
|
Summary: OpenSource IPsec-based VPN Solution
|
||||||
Requires: strongswan-libs0 = %{version}
|
Group: Productivity/Networking/Security
|
||||||
Requires: strongswan-ikev2 = %{version}
|
Requires: strongswan-ikev2 = %{version}
|
||||||
|
Requires: strongswan-libs0 = %{version}
|
||||||
Provides: strongswan-daemon-starter = %{version}
|
Provides: strongswan-daemon-starter = %{version}
|
||||||
|
|
||||||
%description nm
|
%description nm
|
||||||
@ -224,6 +234,7 @@ NetworkManager-strongswan graphical user interface.
|
|||||||
%package tests
|
%package tests
|
||||||
|
|
||||||
Summary: OpenSource IPsec-based VPN Solution
|
Summary: OpenSource IPsec-based VPN Solution
|
||||||
|
Group: Productivity/Networking/Security
|
||||||
Requires: strongswan-libs0 = %{version}
|
Requires: strongswan-libs0 = %{version}
|
||||||
|
|
||||||
%description tests
|
%description tests
|
||||||
@ -238,7 +249,6 @@ and the load testing plugin for IKEv2 daemon.
|
|||||||
%setup -q -n %{name}-%{upstream_version}
|
%setup -q -n %{name}-%{upstream_version}
|
||||||
%patch1 -p0
|
%patch1 -p0
|
||||||
%patch2 -p0
|
%patch2 -p0
|
||||||
%patch3 -p1
|
|
||||||
sed -e 's|@libexecdir@|%_libexecdir|g' \
|
sed -e 's|@libexecdir@|%_libexecdir|g' \
|
||||||
< $RPM_SOURCE_DIR/strongswan.init.in \
|
< $RPM_SOURCE_DIR/strongswan.init.in \
|
||||||
> strongswan.init
|
> strongswan.init
|
||||||
@ -318,7 +328,7 @@ cat << EOT > ${RPM_BUILD_ROOT}%{_sysconfdir}/ipsec.secrets
|
|||||||
#
|
#
|
||||||
EOT
|
EOT
|
||||||
#
|
#
|
||||||
rm -f $RPM_BUILD_ROOT%{strongswan_libdir}/lib{charon,hydra,strongswan,simaka}.so
|
rm -f $RPM_BUILD_ROOT%{strongswan_libdir}/lib{charon,hydra,radius,strongswan,simaka}.so
|
||||||
find $RPM_BUILD_ROOT%{strongswan_libdir} \
|
find $RPM_BUILD_ROOT%{strongswan_libdir} \
|
||||||
-name "*.a" -o -name "*.la" | xargs -r rm -f
|
-name "*.a" -o -name "*.la" | xargs -r rm -f
|
||||||
#
|
#
|
||||||
@ -441,6 +451,8 @@ fi
|
|||||||
%{strongswan_libdir}/libhydra.so.0.0.0
|
%{strongswan_libdir}/libhydra.so.0.0.0
|
||||||
%{strongswan_libdir}/libcharon.so.0
|
%{strongswan_libdir}/libcharon.so.0
|
||||||
%{strongswan_libdir}/libcharon.so.0.0.0
|
%{strongswan_libdir}/libcharon.so.0.0.0
|
||||||
|
%{strongswan_libdir}/libradius.so.0
|
||||||
|
%{strongswan_libdir}/libradius.so.0.0.0
|
||||||
%{strongswan_libdir}/libsimaka.so.0
|
%{strongswan_libdir}/libsimaka.so.0
|
||||||
%{strongswan_libdir}/libsimaka.so.0.0.0
|
%{strongswan_libdir}/libsimaka.so.0.0.0
|
||||||
%{strongswan_libdir}/libstrongswan.so.0
|
%{strongswan_libdir}/libstrongswan.so.0
|
||||||
@ -452,6 +464,7 @@ fi
|
|||||||
%{strongswan_plugins}/libstrongswan-attr.so
|
%{strongswan_plugins}/libstrongswan-attr.so
|
||||||
%{strongswan_plugins}/libstrongswan-attr-sql.so
|
%{strongswan_plugins}/libstrongswan-attr-sql.so
|
||||||
%{strongswan_plugins}/libstrongswan-blowfish.so
|
%{strongswan_plugins}/libstrongswan-blowfish.so
|
||||||
|
%{strongswan_plugins}/libstrongswan-cmac.so
|
||||||
%{strongswan_plugins}/libstrongswan-constraints.so
|
%{strongswan_plugins}/libstrongswan-constraints.so
|
||||||
%{strongswan_plugins}/libstrongswan-curl.so
|
%{strongswan_plugins}/libstrongswan-curl.so
|
||||||
%{strongswan_plugins}/libstrongswan-des.so
|
%{strongswan_plugins}/libstrongswan-des.so
|
||||||
@ -478,7 +491,6 @@ fi
|
|||||||
%{strongswan_plugins}/libstrongswan-ha.so
|
%{strongswan_plugins}/libstrongswan-ha.so
|
||||||
%{strongswan_plugins}/libstrongswan-hmac.so
|
%{strongswan_plugins}/libstrongswan-hmac.so
|
||||||
%{strongswan_plugins}/libstrongswan-kernel-netlink.so
|
%{strongswan_plugins}/libstrongswan-kernel-netlink.so
|
||||||
%{strongswan_plugins}/libstrongswan-kernel-netlink.so
|
|
||||||
%{strongswan_plugins}/libstrongswan-ldap.so
|
%{strongswan_plugins}/libstrongswan-ldap.so
|
||||||
%{strongswan_plugins}/libstrongswan-md4.so
|
%{strongswan_plugins}/libstrongswan-md4.so
|
||||||
%{strongswan_plugins}/libstrongswan-md5.so
|
%{strongswan_plugins}/libstrongswan-md5.so
|
||||||
|
Loading…
Reference in New Issue
Block a user