SHA256
1
0
forked from pool/strongswan

Accepting request 72126 from home:j-engel:branches:network:vpn

Update StrongSWAN to 4.5.2

OBS-URL: https://build.opensuse.org/request/show/72126
OBS-URL: https://build.opensuse.org/package/show/network:vpn/strongswan?expand=0&rev=26
This commit is contained in:
Marius Tomaschewski 2011-05-30 17:23:31 +00:00 committed by Git OBS Bridge
parent 9dc0c277ab
commit eeeeb9f61e
8 changed files with 58 additions and 20 deletions

3
_service Normal file
View File

@ -0,0 +1,3 @@
<services>
<service name="download_url"><param name="path">/strongswan-4.5.2.tar.bz2.sig</param><param name="host">download.strongswan.org</param></service>
<service name="download_url"><param name="path">/strongswan-4.5.2.tar.bz2</param><param name="host">download.strongswan.org</param></service></services>

View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:f13b5db946393dacc8590db7397b3ddd56eb37619f93a482a9c6cf9d556e105a
size 3271219

View File

@ -0,0 +1,14 @@
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)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=LG31
-----END PGP SIGNATURE-----

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:252d7369d94aa2d79e6fad078853b07ca897ea811ab1e1a2b008bcec0d1e758a
size 3254264

View File

@ -1,14 +0,0 @@
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
iQGcBAABAgAGBQJNVFbWAAoJEN9CwXCzTbp3NRoL/jeGdXy0VcT+MRhLP9aKWC3w
b8xAKl8mX0LqzkFL4o1nmiy+hAZXogVZiBqcmgCzyhD1QicpZEGMiKRpcXDxGkkS
1UrSj6zPWSN4lTJus7AoEDo0FdQ/mpPqXDU/4GLSQn7rZcAML6O6cp9h0yuQqM+4
SewztJ7VzT1OIhNEx5GjJSJkOGJGt/NhbaFNvUSpjw2OOEwFXVDara5z2hv7DVyX
hDWRsVry2JR/dg4z9hY5WsRUgYjVry/cBQ32B2XStGUX/sy9LSUmhWsJRjfdAppt
I+04n2cKpKHHy8CoNOlmdq5bllMQ1BbnZCFtpScPg7Mf5Qzxg3qKAb7MzczdGQPQ
iHGirW1lA9En4DRCbauqVIaVNYslWpp8qliWGqTDEDzZcFs9aujNXyVteY5tXvEJ
XG5sODlfRwyEZOi0bywgyHgnCeCl2DMBA3xKs5m5lInH98CWFXG1PrJoJq7XDe4D
i00IESUJmdE9x5L0uA21vYUiLbmZs/ZOBXQdcx69Vg==
=Q4kv
-----END PGP SIGNATURE-----

View File

@ -1,3 +1,38 @@
-------------------------------------------------------------------
Sun May 29 16:37:00 UTC 2011 - jcnengel@googlemail.com
- Updated to strongSwan 4.5.2 release, changes overview since 4.5.1:
* The whitelist plugin for the IKEv2 daemon maintains an in-memory identity
whitelist. Any connection attempt of peers not whitelisted will get rejected.
The 'ipsec whitelist' utility provides a simple command line frontend for
whitelist administration.
* The duplicheck plugin provides a specialized form of duplicate checking,
doing a liveness check on the old SA and optionally notify a third party
application about detected duplicates.
* The coupling plugin permanently couples two or more devices by limiting
authentication to previously used certificates.
* In the case that the peer config and child config don't have the same name
(usually in SQL database defined connections), ipsec up|route <peer config>
starts|routes all associated child configs and ipsec up|route <child config>
only starts|routes the specific child config.
* fixed the encoding and parsing of X.509 certificate policy statements (CPS).
* Duncan Salerno contributed the eap-sim-pcsc plugin implementing a
pcsc-lite based SIM card backend.
* The eap-peap plugin implements the EAP PEAP protocol. Interoperates
successfully with a FreeRADIUS server and Windows 7 Agile VPN clients.
* The IKEv2 daemon charon rereads strongswan.conf on SIGHUP and instructs
all plugins to reload. Currently only the eap-radius and the attr plugins
support configuration reloading.
* Added userland support to the IKEv2 daemon for Extended Sequence Numbers
support coming with Linux 2.6.39. To enable ESN on a connection, add
the 'esn' keyword to the proposal. The default proposal uses 32-bit sequence
numbers only ('noesn'), and the same value is used if no ESN mode is
specified. To negotiate ESN support with the peer, include both, e.g.
esp=aes128-sha1-esn-noesn.
* In addition to ESN, Linux 2.6.39 gained support for replay windows larger
than 32 packets. The new global strongswan.conf option 'charon.replay_window'
configures the size of the replay window, in packets.
-------------------------------------------------------------------
Mon Mar 14 10:59:32 UTC 2011 - mt@suse.de

View File

@ -1,5 +1,5 @@
#
# spec file for package strongswan (Version 4.5.1)
# spec file for package strongswan (Version 4.5.2)
#
# Copyright (c) 2010 SUSE LINUX Products GmbH, Nuernberg, Germany.
#
@ -19,7 +19,7 @@
Name: strongswan
%define upstream_version 4.5.1
%define upstream_version 4.5.2
%define strongswan_docdir %{_docdir}/%{name}
%define strongswan_plugins %{_libexecdir}/ipsec/plugins
%define with_mysql 1
@ -27,7 +27,7 @@ Name: strongswan
%define with_gcrypt 0%{suse_version} >= 1110
%define with_nm 0%{suse_version} >= 1110
%define with_tests 0
Version: 4.5.1
Version: 4.5.2
Release: 0
License: GPLv2+
Group: Productivity/Networking/Security