Signed-off-by: Christoph Fritz <[email protected]> --- rules/strongswan.in | 46 +++++++++++ rules/strongswan.make | 217 +++++++++++++++++++++++++++++++++++++++++++++++++ 2 files changed, 263 insertions(+) create mode 100644 rules/strongswan.in create mode 100644 rules/strongswan.make
diff --git a/rules/strongswan.in b/rules/strongswan.in new file mode 100644 index 0000000..85c8215 --- /dev/null +++ b/rules/strongswan.in @@ -0,0 +1,46 @@ +## SECTION=networking + +menuconfig STRONGSWAN + bool + prompt "strongswan " + select LIBGMP + select LIBCURL if STRONGSWAN_LIBCURL + help + strongSwan is a complete IPsec implementation. + Please keep in mind to configure the kernel accordingly to fulfill + strongSwan's needs. See 'Required Kernel Modules' here: + http://wiki.strongswan.org/projects/strongswan/wiki/KernelModules + +if STRONGSWAN + config STRONGSWAN_STATIC + bool + default n + prompt "build static libraries" + help + Libraries will also be built statically. + + config STRONGSWAN_LIBCURL + bool + default y + prompt "CURL fetcher plugin to fetch files" + help + If you intend to dynamically fetch Certificate Revocation Lists + (CRLs) from an HTTP server or as an alternative want to use + the Online Certificate Status Protocol (OCSP) say yes. + + config STRONGSWAN_AFALG + bool + default y + prompt "AF_ALG crypto interface to Linux Crypto API" + help + Linux 2.6.38 introduced the AF_ALG Crypto API which makes the + crypto algorithms of the kernel available in userland. + If your strongswan configuration depends on this, be sure to + enable the appropriate crypto algorithm in your kernel. + For test configurations see af-alg-* categories here: + http://www.strongswan.org/uml/testresults4/index.html + For a list of cipher suite keywords see: + http://wiki.strongswan.org/projects/strongswan/wiki/IKEv2CipherSuites + http://wiki.strongswan.org/projects/strongswan/wiki/IKEv1CipherSuites +endif + diff --git a/rules/strongswan.make b/rules/strongswan.make new file mode 100644 index 0000000..4c78fa7 --- /dev/null +++ b/rules/strongswan.make @@ -0,0 +1,217 @@ +# -*-makefile-*- +# +# Copyright (C) 2013 by Christoph Fritz <[email protected]> +# +# +# See CREDITS for details about who has contributed to this project. +# +# For further information about the PTXdist project and license conditions +# see the README file. +# + +# +# We provide this package +# +PACKAGES-$(PTXCONF_STRONGSWAN) += strongswan + +# +# Paths and names +# +STRONGSWAN_VERSION := 5.0.2 +STRONGSWAN_MD5 := 77dc16443fd141f46183d3a4f60986ef +STRONGSWAN := strongswan-$(STRONGSWAN_VERSION) +STRONGSWAN_SUFFIX := tar.bz2 +STRONGSWAN_URL := http://download.strongswan.org/$(STRONGSWAN).$(STRONGSWAN_SUFFIX) +STRONGSWAN_SOURCE := $(SRCDIR)/$(STRONGSWAN).$(STRONGSWAN_SUFFIX) +STRONGSWAN_DIR := $(BUILDDIR)/$(STRONGSWAN) +STRONGSWAN_LICENSE := GPL + +# ---------------------------------------------------------------------------- +# Prepare +# ---------------------------------------------------------------------------- + +STRONGSWAN_CONF_TOOL := autoconf +STRONGSWAN_CONF_OPT := \ + $(CROSS_AUTOCONF_USR) \ + --enable-aes \ + --enable-des \ + --disable-blowfish \ + --enable-md5 \ + --enable-sha1 \ + --enable-sha2 \ + --enable-gmp \ + --disable-soup \ + --disable-ldap \ + --disable-md4 \ + --enable-fips-prf \ + --disable-rdrand \ + --enable-random \ + --enable-nonce \ + --enable-x509 \ + --enable-revocation \ + --enable-constraints \ + --enable-pubkey \ + --enable-pkcs1 \ + --enable-pkcs7 \ + --enable-pkcs8 \ + --enable-pgp \ + --enable-dnskey \ + --enable-pem \ + --enable-hmac \ + --enable-cmac \ + --enable-xcbc \ + --disable-test-vectors \ + --disable-mysql \ + --disable-sqlite \ + --enable-stroke \ + --disable-medsrv \ + --disable-medcli \ + --disable-smp \ + --disable-sql \ + --disable-leak-detective \ + --disable-lock-profiler \ + --disable-unit-tester \ + --disable-load-tester \ + --disable-eap-sim \ + --disable-eap-sim-file \ + --disable-eap-sim-pcsc \ + --disable-eap-simaka-sql \ + --disable-eap-simaka-pseudonym \ + --disable-eap-simaka-reauth \ + --disable-eap-identity \ + --disable-eap-md5 \ + --disable-eap-gtc \ + --disable-eap-mschapv2 \ + --disable-eap-tls \ + --disable-eap-ttls \ + --disable-eap-peap \ + --disable-eap-tnc \ + --disable-eap-dynamic \ + --disable-eap-radius \ + --enable-xauth-generic \ + --disable-xauth-eap \ + --disable-xauth-pam \ + --disable-tnc-ifmap \ + --disable-tnc-pdp \ + --disable-tnc-imc \ + --disable-tnc-imv \ + --disable-tnccs-11 \ + --disable-tnccs-20 \ + --disable-tnccs-dynamic \ + --disable-imc-test \ + --disable-imv-test \ + --disable-imc-scanner \ + --disable-imv-scanner \ + --disable-imc-os \ + --disable-imv-os \ + --disable-imc-attestation \ + --disable-imv-attestation \ + --enable-kernel-netlink \ + --disable-kernel-pfkey \ + --disable-kernel-pfroute \ + --disable-kernel-klips \ + --disable-libipsec \ + --enable-socket-default \ + --disable-socket-dynamic \ + --disable-farp \ + --disable-dumm \ + --disable-fast \ + --disable-manager \ + --disable-mediation \ + --disable-integrity-test \ + --enable-load-warning \ + --enable-ikev1 \ + --enable-ikev2 \ + --enable-charon \ + --enable-tools \ + --enable-scripts \ + --disable-conftest \ + --enable-updown \ + --enable-attr \ + --disable-attr-sql \ + --disable-dhcp \ + --enable-resolve \ + --disable-padlock \ + --disable-openssl \ + --disable-gcrypt \ + --disable-agent \ + --disable-pkcs11 \ + --disable-ctr \ + --disable-ccm \ + --disable-gcm \ + --disable-addrblock \ + --disable-unity \ + --disable-uci \ + --disable-android \ + --disable-android-log \ + --disable-maemo \ + --disable-nm \ + --disable-ha \ + --disable-whitelist \ + --disable-lookip \ + --disable-error-notify \ + --disable-certexpire \ + --disable-led \ + --disable-duplicheck \ + --disable-coupling \ + --disable-radattr \ + --disable-vstr \ + --disable-monolithic \ + --disable-bfd-backtraces \ + --enable-dependency-tracking \ + --enable-shared \ + --enable-fast-install \ + --enable-libtool-lock \ + --with-user=root \ + --with-group=root + +ifdef PTXCONF_STRONGSWAN_STATIC +STRONGSWAN_CONF_OPT += --enable-static +else +STRONGSWAN_CONF_OPT += --disable-static +endif + +ifdef PTXCONF_STRONGSWAN_LIBCURL +STRONGSWAN_CONF_OPT += --enable-curl +else +STRONGSWAN_CONF_OPT += --disable-curl +endif + +ifdef PTXCONF_STRONGSWAN_AFALG +STRONGSWAN_CONF_OPT += --enable-af-alg +else +STRONGSWAN_CONF_OPT += --disable-af-alg +endif + +STRONGSWAN_CONF_OPT += --with-ipseclibdir=/usr/lib + +# ---------------------------------------------------------------------------- +# Target-Install +# ---------------------------------------------------------------------------- + +$(STATEDIR)/strongswan.targetinstall: + @$(call targetinfo) + + @$(call install_init, strongswan) + @$(call install_fixup, strongswan,PRIORITY,optional) + @$(call install_fixup, strongswan,SECTION,base) + @$(call install_fixup, strongswan,AUTHOR,"Christoph Fritz <[email protected]>") + @$(call install_fixup, strongswan,DESCRIPTION,missing) + + @$(call install_tree, strongswan, 0, 0, $(STRONGSWAN_PKGDIR)/usr/sbin, /usr/sbin) + @$(call install_tree, strongswan, 0, 0, $(STRONGSWAN_PKGDIR)/usr/libexec, /usr/libexec) + @$(call install_tree, strongswan, 0, 0, $(STRONGSWAN_PKGDIR)/usr/lib, /usr/lib) + @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/aacerts) + @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/acerts) + @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/cacerts) + @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/certs) + @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/crls) + @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/ocspcerts) + @$(call install_copy, strongswan, 0, 0, 0600, /etc/ipsec.d/private) + @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/reqs) + + @$(call install_finish, strongswan) + + @$(call touch) + +# vim: syntax=make -- 1.7.10.4 -- ptxdist mailing list [email protected]
