Hello community, here is the log from the commit of package strongswan for openSUSE:Factory checked in at 2012-02-16 15:01:43 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/strongswan (Old) and /work/SRC/openSUSE:Factory/.strongswan.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "strongswan", Maintainer is "m...@suse.com" Changes: -------- --- /work/SRC/openSUSE:Factory/strongswan/strongswan.changes 2011-12-25 17:42:14.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.strongswan.new/strongswan.changes 2012-02-16 15:02:26.000000000 +0100 @@ -1,0 +2,53 @@ +Wed Feb 15 13:31:40 UTC 2012 - m...@suse.com + +- Updated to strongSwan 4.6.1 release: + Changes in 4.6.1: + - Because of changing checksums before and after installation which caused + the integrity tests to fail we avoided directly linking libsimaka, + libtls and libtnccs to those libcharon plugins which make use of these + dynamiclibraries. + Instead we linked the libraries to the charon daemon. Unfortunately + Ubuntu 11.10 activated the --as-needed ld option which discards explicit + links to dynamic libraries that are not actually used by the charon + daemon itself, thus causing failures during the loading of the plugins + which depend on these libraries for resolving external symbols. + - Therefore our approach of computing integrity checksums for plugins had + to be changed radically by moving the hash generation from the + compilation to the post-installation phase. + Changes in 4.6.0: + - The new libstrongswan certexpire plugin collects expiration information + of all used certificates and exports them to CSV files. It either + directly exports them or uses cron style scheduling for batch exports. + - Starter passes unresolved hostnames to charon, allowing it to do name + resolution not before the connection attempt. This is especially useful + with connections between hosts using dynamic IP addresses. + Thanks to Mirko Parthey for the initial patch. + - The android plugin can now be used without the Android frontend patch + and provides DNS server registration and logging to logcat. + - Pluto and starter (plus stroke and whack) have been ported to Android. + - Support for ECDSA private and public key operations has been added to + the pkcs11 plugin. The plugin now also provides DH and ECDH via PKCS#11 + and can use tokens as random number generators (RNG). By default only + private key operations are enabled, more advanced features have to be + enabled by their option in strongswan.conf. This also applies to public + key operations (even for keys not stored on the token) which were + enabled by default before. + - The libstrongswan plugin system now supports detailed plugin + dependencies. Many plugins have been extended to export its capabilities + and requirements. This allows the plugin loader to resolve plugin + loading order automatically, and in future releases, to dynamically load + the required features on demand. + Existing third party plugins are source (but not binary) compatible if + they properly initialize the new get_features() plugin function to NULL. + - The tnc-ifmap plugin implements a TNC IF-MAP 2.0 client which can + deliver metadata about IKE_SAs via a SOAP interface to a MAP server. + The tnc-ifmap plugin requires the Apache Axis2/C library. +- Merged patches, changed strongswan-doc to be a noarch package. +- Fixed rpmlint runlevel & fsf warnings, updated rpmlintrc + +------------------------------------------------------------------- +Mon Feb 6 10:27:00 UTC 2012 - a...@suse.de + +- Only glib.h can be included, fix compilation. + +------------------------------------------------------------------- Old: ---- strongswan-4.5.3-fmt-warnings.patch strongswan-4.5.3-rpmlintrc strongswan-4.5.3.tar.bz2 strongswan-4.5.3.tar.bz2.sig New: ---- strongswan-4.6.1-fmt-warnings.patch strongswan-4.6.1-glib.patch strongswan-4.6.1-rpmlintrc strongswan-4.6.1.tar.bz2 strongswan-4.6.1.tar.bz2.sig ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ strongswan.spec ++++++ --- /var/tmp/diff_new_pack.XrqVjV/_old 2012-02-16 15:02:27.000000000 +0100 +++ /var/tmp/diff_new_pack.XrqVjV/_new 2012-02-16 15:02:27.000000000 +0100 @@ -1,7 +1,7 @@ # # spec file for package strongswan # -# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -15,8 +15,10 @@ # Please submit bugfixes or comments via http://bugs.opensuse.org/ # + + Name: strongswan -Version: 4.5.3 +Version: 4.6.1 Release: 0 %define upstream_version %{version} %define strongswan_docdir %{_docdir}/%{name} @@ -41,6 +43,7 @@ Source4: README.SUSE Patch1: %{name}_modprobe_syslog.patch Patch2: %{name}-%{version}-fmt-warnings.patch +Patch3: %{name}-%{version}-glib.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildRequires: bison BuildRequires: curl-devel @@ -105,6 +108,7 @@ and others %package doc +BuildArch: noarch Summary: OpenSource IPsec-based VPN Solution %description doc @@ -234,6 +238,7 @@ %setup -q -n %{name}-%{upstream_version} %patch1 -p0 %patch2 -p0 +%patch3 -p1 sed -e 's|@libexecdir@|%_libexecdir|g' \ < $RPM_SOURCE_DIR/strongswan.init.in \ > strongswan.init @@ -313,7 +318,7 @@ # EOT # -rm -f $RPM_BUILD_ROOT%{strongswan_libdir}/lib{charon,hydra,strongswan}.so +rm -f $RPM_BUILD_ROOT%{strongswan_libdir}/lib{charon,hydra,strongswan,simaka}.so find $RPM_BUILD_ROOT%{strongswan_libdir} \ -name "*.a" -o -name "*.la" | xargs -r rm -f # @@ -436,6 +441,8 @@ %{strongswan_libdir}/libhydra.so.0.0.0 %{strongswan_libdir}/libcharon.so.0 %{strongswan_libdir}/libcharon.so.0.0.0 +%{strongswan_libdir}/libsimaka.so.0 +%{strongswan_libdir}/libsimaka.so.0.0.0 %{strongswan_libdir}/libstrongswan.so.0 %{strongswan_libdir}/libstrongswan.so.0.0.0 %dir %{strongswan_plugins} @@ -471,6 +478,7 @@ %{strongswan_plugins}/libstrongswan-ha.so %{strongswan_plugins}/libstrongswan-hmac.so %{strongswan_plugins}/libstrongswan-kernel-netlink.so +%{strongswan_plugins}/libstrongswan-kernel-netlink.so %{strongswan_plugins}/libstrongswan-ldap.so %{strongswan_plugins}/libstrongswan-md4.so %{strongswan_plugins}/libstrongswan-md5.so ++++++ strongswan-4.5.3-fmt-warnings.patch -> strongswan-4.6.1-fmt-warnings.patch ++++++ --- /work/SRC/openSUSE:Factory/strongswan/strongswan-4.5.3-fmt-warnings.patch 2011-09-23 12:46:59.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.strongswan.new/strongswan-4.6.1-fmt-warnings.patch 2012-02-16 15:02:25.000000000 +0100 @@ -1,14 +1,14 @@ --- src/checksum/checksum_builder.c -+++ src/checksum/checksum_builder.c 2011/09/08 15:45:10 ++++ src/checksum/checksum_builder.c 2012/02/15 13:08:35 @@ -64,9 +64,9 @@ static void build_checksum(char *path, c fprintf(stderr, "dlopen failed: %s\n", dlerror()); } } -- printf("\t{\"%-20s%7u, 0x%08x, %6u, 0x%08x},\n", -+ printf("\t{\"%-20s%7zu, 0x%08x, %6zu, 0x%08x},\n", +- printf("\t{\"%-25s%7u, 0x%08x, %6u, 0x%08x},\n", ++ printf("\t{\"%-25s%7zu, 0x%08x, %6zu, 0x%08x},\n", name, fsize, fsum, ssize, ssum); -- fprintf(stderr, "\"%-20s%7u / 0x%08x %6u / 0x%08x\n", -+ fprintf(stderr, "\"%-20s%7zu / 0x%08x %6zu / 0x%08x\n", +- fprintf(stderr, "\"%-25s%7u / 0x%08x %6u / 0x%08x\n", ++ fprintf(stderr, "\"%-25s%7zu / 0x%08x %6zu / 0x%08x\n", name, fsize, fsum, ssize, ssum); } ++++++ strongswan-4.6.1-glib.patch ++++++ Index: strongswan-4.5.3/src/libcharon/plugins/nm/nm_service.h =================================================================== --- strongswan-4.5.3.orig/src/libcharon/plugins/nm/nm_service.h +++ strongswan-4.5.3/src/libcharon/plugins/nm/nm_service.h @@ -21,8 +21,7 @@ #ifndef NM_SERVICE_H_ #define NM_SERVICE_H_ -#include <glib/gtypes.h> -#include <glib-object.h> +#include <glib.h> #include <nm-vpn-plugin.h> #include "nm_creds.h" ++++++ strongswan-4.5.3-rpmlintrc -> strongswan-4.6.1-rpmlintrc ++++++ --- /work/SRC/openSUSE:Factory/strongswan/strongswan-4.5.3-rpmlintrc 2011-09-23 12:46:59.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.strongswan.new/strongswan-4.6.1-rpmlintrc 2012-02-16 15:02:25.000000000 +0100 @@ -3,3 +3,7 @@ addFilter("strongswan.* incoherent-init-script-name ipsec") # - readme only, triggers full ipsec + ikev1&ikev2 install addFilter("strongswan.* no-binary") +# - link to init script, covered by service(8) +addFilter("strongswan.* no-manual-page-for-binary rcipsec") +# - no, restating tunnels on update may break the update +addFilter("strongswan.*restart_on_update-postun /etc/init.d/ipsec") ++++++ strongswan-4.5.3.tar.bz2 -> strongswan-4.6.1.tar.bz2 ++++++ ++++ 74413 lines of diff (skipped) ++++++ strongswan.init.in ++++++ --- /var/tmp/diff_new_pack.XrqVjV/_old 2012-02-16 15:02:32.000000000 +0100 +++ /var/tmp/diff_new_pack.XrqVjV/_new 2012-02-16 15:02:32.000000000 +0100 @@ -17,7 +17,7 @@ # # You should have received a copy of the GNU Lesser General Public # License along with this library; if not, write to the Free Software -# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307, +# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, # USA. # # /etc/init.d/ipsec @@ -41,7 +41,7 @@ # Should-Start: $time # Required-Stop: $syslog $remote_fs $named # Should-Stop: $time -# Default-Start: 3 4 5 +# Default-Start: 3 5 # Default-Stop: 0 1 2 6 # Short-Description: StrongSwan IPsec # Description: StrongSwan IPsec provides encrypted and authenticated -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
