Hello community,
here is the log from the commit of package strongswan for openSUSE:Factory
checked in at 2012-05-10 14:34:18
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/strongswan (Old)
and /work/SRC/openSUSE:Factory/.strongswan.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "strongswan", Maintainer is "m...@suse.com"
Changes:
--------
--- /work/SRC/openSUSE:Factory/strongswan/strongswan.changes 2012-03-16
13:26:16.000000000 +0100
+++ /work/SRC/openSUSE:Factory/.strongswan.new/strongswan.changes
2012-05-10 14:34:47.000000000 +0200
@@ -1,0 +2,40 @@
+Thu May 10 09:15:38 UTC 2012 - m...@suse.com
+
+- Updated to strongSwan 4.6.3 release:
+ - The tnc-pdp plugin implements a RADIUS server interface allowing
+ a strongSwan TNC server to act as a Policy Decision Point.
+ - The eap-radius authentication backend enforces Session-Timeout
+ attributes using RFC4478 repeated authentication and acts upon
+ RADIUS Dynamic Authorization extensions, RFC 5176. Currently
+ supported are disconnect requests and CoA messages containing
+ a Session-Timeout.
+ - The eap-radius plugin can forward arbitrary RADIUS attributes
+ from and to clients using custom IKEv2 notify payloads. The new
+ radattr plugin reads attributes to include from files and prints
+ received attributes to the console.
+ - Added support for untruncated MD5 and SHA1 HMACs in ESP as used
+ in RFC 4595.
+ - The cmac plugin implements the AES-CMAC-96 and AES-CMAC-PRF-128
+ algorithms as defined in RFC 4494 and RFC 4615, respectively.
+ - The resolve plugin automatically installs nameservers via
+ resolvconf(8), if it is installed, instead of modifying
+ /etc/resolv.conf directly.
+ - The IKEv2 charon daemon supports now raw RSA public keys in RFC
+ 3110 DNSKEY and PKCS#1 file format.
+ - The farp plugin sends ARP responses for any tunneled address,
+ not only virtual IPs.
+ - Charon resolves hosts again during additional keying tries.
+ - Fixed switching back to original address pair during MOBIKE.
+ - When resending IKE_SA_INIT with a COOKIE charon reuses the previous
+ DH value, as specified in RFC 5996.
+ This has an effect on the lifecycle of diffie_hellman_t, see
+ source:src/libcharon/sa/keymat.h#39 for details.
+ - COOKIEs are now kept enabled a bit longer to avoid certain race
+ conditions the commit message to 1b7debcc has some details.
+ - The new stroke user-creds command allows to set username/password
+ for a connection.
+ - strongswan.conf option added to set identifier for syslog(3) logging.
+ - Added a workaround for null-terminated XAuth secrets (as sent by
+ Android 4).
+
+-------------------------------------------------------------------
Old:
----
strongswan-4.6.2-fmt-warnings.patch
strongswan-4.6.2-glib.patch
strongswan-4.6.2-rpmlintrc
strongswan-4.6.2.tar.bz2
strongswan-4.6.2.tar.bz2.sig
New:
----
strongswan-4.6.3-fmt-warnings.patch
strongswan-4.6.3-rpmlintrc
strongswan-4.6.3.tar.bz2
strongswan-4.6.3.tar.bz2.sig
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ strongswan.spec ++++++
--- /var/tmp/diff_new_pack.qC4Jx2/_old 2012-05-10 14:34:48.000000000 +0200
+++ /var/tmp/diff_new_pack.qC4Jx2/_new 2012-05-10 14:34:48.000000000 +0200
@@ -16,9 +16,8 @@
#
-
Name: strongswan
-Version: 4.6.2
+Version: 4.6.3
Release: 0
%define upstream_version %{version}
%define strongswan_docdir %{_docdir}/%{name}
@@ -43,7 +42,6 @@
Source4: README.SUSE
Patch1: %{name}_modprobe_syslog.patch
Patch2: %{name}-%{version}-fmt-warnings.patch
-Patch3: %{name}-%{version}-glib.patch
BuildRoot: %{_tmppath}/%{name}-%{version}-build
BuildRequires: bison
BuildRequires: curl-devel
@@ -110,6 +108,7 @@
%package doc
BuildArch: noarch
Summary: OpenSource IPsec-based VPN Solution
+Group: Productivity/Networking/Security
%description doc
StrongSwan is an OpenSource IPsec-based VPN Solution for Linux
@@ -125,6 +124,7 @@
%package libs0
Summary: OpenSource IPsec-based VPN Solution
+Group: Productivity/Networking/Security
Conflicts: strongswan < %{version}
%description libs0
@@ -134,11 +134,13 @@
%package ikev1
Summary: OpenSource IPsec-based VPN Solution
+Group: Productivity/Networking/Security
Requires: iproute2
-Requires: strongswan-libs0 = %{version}
Requires: strongswan-ipsec = %{version}
-Provides: strongswan-daemon = %{version} ikev1
+Requires: strongswan-libs0 = %{version}
+Provides: ikev1
Provides: pluto
+Provides: strongswan-daemon = %{version}
Conflicts: freeswan openswan strongswan < %{version}
%description ikev1
@@ -148,10 +150,12 @@
%package ikev2
Summary: OpenSource IPsec-based VPN Solution
+Group: Productivity/Networking/Security
Requires: iproute2
-Requires: strongswan-libs0 = %{version}
Requires: strongswan-daemon-starter = %{version}
-Provides: strongswan-daemon = %{version} ikev2
+Requires: strongswan-libs0 = %{version}
+Provides: ikev2
+Provides: strongswan-daemon = %{version}
Conflicts: openswan strongswan < %{version}
%description ikev2
@@ -161,11 +165,14 @@
%package ipsec
Summary: OpenSource IPsec-based VPN Solution
+Group: Productivity/Networking/Security
PreReq: grep %insserv_prereq %fillup_prereq
-Requires: strongswan-libs0 = %{version}
Requires: strongswan-daemon = %{version}
+Requires: strongswan-libs0 = %{version}
+Provides: VPN
+Provides: ipsec
+Provides: strongswan = %{version}
Provides: strongswan-daemon-starter = %{version}
-Provides: strongswan = %{version} ipsec VPN
Obsoletes: strongswan < %{version}
Conflicts: freeswan openswan
@@ -180,6 +187,7 @@
%package mysql
Summary: OpenSource IPsec-based VPN Solution
+Group: Productivity/Networking/Security
Requires: strongswan-libs0 = %{version}
%description mysql
@@ -193,6 +201,7 @@
%package sqlite
Summary: OpenSource IPsec-based VPN Solution
+Group: Productivity/Networking/Security
Requires: strongswan-libs0 = %{version}
%description sqlite
@@ -206,8 +215,9 @@
%package nm
Summary: OpenSource IPsec-based VPN Solution
-Requires: strongswan-libs0 = %{version}
+Group: Productivity/Networking/Security
Requires: strongswan-ikev2 = %{version}
+Requires: strongswan-libs0 = %{version}
Provides: strongswan-daemon-starter = %{version}
%description nm
@@ -224,6 +234,7 @@
%package tests
Summary: OpenSource IPsec-based VPN Solution
+Group: Productivity/Networking/Security
Requires: strongswan-libs0 = %{version}
%description tests
@@ -238,7 +249,6 @@
%setup -q -n %{name}-%{upstream_version}
%patch1 -p0
%patch2 -p0
-%patch3 -p1
sed -e 's|@libexecdir@|%_libexecdir|g' \
< $RPM_SOURCE_DIR/strongswan.init.in \
> strongswan.init
@@ -318,7 +328,7 @@
#
EOT
#
-rm -f
$RPM_BUILD_ROOT%{strongswan_libdir}/lib{charon,hydra,strongswan,simaka}.so
+rm -f
$RPM_BUILD_ROOT%{strongswan_libdir}/lib{charon,hydra,radius,strongswan,simaka}.so
find $RPM_BUILD_ROOT%{strongswan_libdir} \
-name "*.a" -o -name "*.la" | xargs -r rm -f
#
@@ -441,6 +451,8 @@
%{strongswan_libdir}/libhydra.so.0.0.0
%{strongswan_libdir}/libcharon.so.0
%{strongswan_libdir}/libcharon.so.0.0.0
+%{strongswan_libdir}/libradius.so.0
+%{strongswan_libdir}/libradius.so.0.0.0
%{strongswan_libdir}/libsimaka.so.0
%{strongswan_libdir}/libsimaka.so.0.0.0
%{strongswan_libdir}/libstrongswan.so.0
@@ -452,6 +464,7 @@
%{strongswan_plugins}/libstrongswan-attr.so
%{strongswan_plugins}/libstrongswan-attr-sql.so
%{strongswan_plugins}/libstrongswan-blowfish.so
+%{strongswan_plugins}/libstrongswan-cmac.so
%{strongswan_plugins}/libstrongswan-constraints.so
%{strongswan_plugins}/libstrongswan-curl.so
%{strongswan_plugins}/libstrongswan-des.so
@@ -478,7 +491,6 @@
%{strongswan_plugins}/libstrongswan-ha.so
%{strongswan_plugins}/libstrongswan-hmac.so
%{strongswan_plugins}/libstrongswan-kernel-netlink.so
-%{strongswan_plugins}/libstrongswan-kernel-netlink.so
%{strongswan_plugins}/libstrongswan-ldap.so
%{strongswan_plugins}/libstrongswan-md4.so
%{strongswan_plugins}/libstrongswan-md5.so
++++++ strongswan-4.6.2-fmt-warnings.patch ->
strongswan-4.6.3-fmt-warnings.patch ++++++
++++++ strongswan-4.6.2-rpmlintrc -> strongswan-4.6.3-rpmlintrc ++++++
++++++ strongswan-4.6.2.tar.bz2 -> strongswan-4.6.3.tar.bz2 ++++++
++++ 30396 lines of diff (skipped)
--
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org
