summaryrefslogtreecommitdiffstats
path: root/package/strongswan
Commit message (Collapse)AuthorAgeFilesLines
* strongswan: bump to version 5.3.5Gustavo Zacarias2015-11-262-4/+4
| | | | | | | | Fixes only one connection regresssion in 5.3.4, see https://wiki.strongswan.org/issues/1213 Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* strongswan: security bump to version 5.3.4Gustavo Zacarias2015-11-162-4/+4
| | | | | | | | | | | Fixes: CVE-2015-8023 - authentication bypass vulnerability in the eap-mschapv2 plugin that was caused by insufficient verification of the internal state when handling EAP-MSCHAPv2 Success messages received by the client. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* strongswan: bump to version 5.3.3Gustavo Zacarias2015-09-072-3/+5
| | | | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Reviewed-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Tested-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* strongswan: security bump to version 5.3.2Gustavo Zacarias2015-06-092-3/+3
| | | | | | | | | | | Fixes: CVE-2015-4171 - rogue servers with a valid certificate accepted by the client to trick it into disclosing its username and even password (if the client accepts EAP-GTC). Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* strongswan: security bump to version 5.3.1Gustavo Zacarias2015-06-022-3/+3
| | | | | | | | | | | | Fixes: CVE-2015-3991 - denial-of-service and potential remote code execution vulnerability triggered by IKEv1/IKEv2 messages that contain payloads for the respective other IKE version. other IKE version Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* packages: remove non-IPv6 dependencies and tweaksGustavo Zacarias2015-04-222-5/+2
| | | | | | | | Now that IPv6 is mandatory remove package dependencies and conditionals for it. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* strongswan: bump to version 5.3.0Gustavo Zacarias2015-04-082-3/+15
| | | | | | | | | | Enable connmark and forecast plugins when iptables is selected. And always enable the led plugin, though it's not new to 5.3.0. [Thomas: also update hash file.] Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* strongswan: kill unnecessary whitespaceGustavo Zacarias2015-04-081-46/+46
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* strongswan: security bump to version 5.2.2Gustavo Zacarias2015-01-063-7/+20
| | | | | | | | | | Fixes CVE-2014-9221 - denial-of-service vulnerability triggered by an IKEv2 Key Exchange payload that contains the Diffie-Hellman group 1025. Also add hash file. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* Rename BR2_PREFER_STATIC_LIB to BR2_STATIC_LIBSThomas Petazzoni2014-12-111-1/+1
| | | | | | | | | | | | | | | | | | | | | | | Since a while, the semantic of BR2_PREFER_STATIC_LIB has been changed from "prefer static libraries when possible" to "use only static libraries". The former semantic didn't make much sense, since the user had absolutely no control/idea of which package would use static libraries, and which packages would not. Therefore, for quite some time, we have been starting to enforce that BR2_PREFER_STATIC_LIB should really build everything with static libraries. As a consequence, this patch renames BR2_PREFER_STATIC_LIB to BR2_STATIC_LIBS, and adjust the Config.in option accordingly. This also helps preparing the addition of other options to select shared, shared+static or just static. Note that we have verified that this commit can be reproduced by simply doing a global rename of BR2_PREFER_STATIC_LIB to BR2_STATIC_LIBS plus adding BR2_PREFER_STATIC_LIB to Config.in.legacy. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr>
* package: indentation cleanupJerzy Grzegorek2014-10-261-48/+48
| | | | | Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* packages: rename FOO_CONF_OPT into FOO_CONF_OPTSThomas De Schampheleire2014-10-041-2/+2
| | | | | | | | | | | | To be consistent with the recent change of FOO_MAKE_OPT into FOO_MAKE_OPTS, make the same change for FOO_CONF_OPT. Sed command used: find * -type f | xargs sed -i 's#_CONF_OPT\>#&S#g' Signed-off-by: Thomas De Schampheleire <thomas.de.schampheleire@gmail.com> Reviewed-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* strongswan: bump to version 5.1.3Gustavo Zacarias2014-06-026-190/+1
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* strongswan: only show comment if applicablePeter Korsgaard2014-03-111-0/+1
| | | | | | strongswan needs USE_MMU, so only show comment if that is available. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* pcsc-lite: not available for static buildsVicente Olivert Riera2014-03-111-0/+1
| | | | | | | | | | | | This package requires dlopen and checks for it in the configure phase. If it's not present, then the build process is stopped. Fixes: http://autobuild.buildroot.net/results/34b/34b83c3ea4a8aac6aeda225e5859bd318b13a676/ [Peter: propagate deps to reverse dependencies, merge toolchain comments] Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* strongswan: needs threadsGustavo Zacarias2014-02-251-0/+4
| | | | | | | | Fixes: http://autobuild.buildroot.net/results/e23/e2394705545dad8e33ffc558df518014c15f5271/ Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* package: fixup dependencies after mysql_client -> mysql renamePeter Korsgaard2014-01-222-2/+2
| | | | Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* strongswan: add security patchesGustavo Zacarias2013-11-013-0/+83
| | | | | | | Security patches to fix CVE-2013-5018, CVE-2013-6075 and CVE-2013-6076. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* Config.in files: unify comments of toolchain option dependenciesThomas De Schampheleire2013-10-141-1/+1
| | | | | | | | This patch lines up the comments in Config.in files that clarify which toolchain options the package depends on. Signed-off-by: Thomas De Schampheleire <thomas.de.schampheleire@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* strongswan: fix build failure when host == target architectureThomas Petazzoni2013-08-301-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | The strongswan configure.in uses the AC_LIB_PREFIX macro, which adds --with-lib-prefix and --without-lib-prefix options, and which, by default assumes that adding ${prefix}/lib to LDFLAGS and ${prefix}/include to CPPFLAGS is a good idea. Obviously, when cross-compiling, it is definitely not a good idea. In the specific case of strongswan, the result is that when testing if the backtrace() function was available, the small C program was being built and linked with -L/usr/lib. So when the host architecture and target architecture are identical, it may find the backtrace() function in the host C library, without looking at the target C library: configure:16457: /home/test/outputs/a637f916962b6136dd6dd4f4b9ff4e1cab568ef3/output/host/usr/bin/x86_64-unknown-linux-uclibc-gcc -o conftest -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -pipe -Os -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -L/usr/lib conftest.c >&5 /home/test/outputs/a637f916962b6136dd6dd4f4b9ff4e1cab568ef3/output/host/opt/ext-toolchain/bin/../lib/gcc/x86_64-unknown-linux-uclibc/4.6.3/../../../../x86_64-unknown-linux-uclibc/bin/ld: warning: libc.so.0, needed by /home/test/outputs/a637f916962b6136dd6dd4f4b9ff4e1cab568ef3/output/host/opt/ext-toolchain/bin/../lib/gcc/x86_64-unknown-linux-uclibc/4.6.3/../../../../x86_64-unknown-linux-uclibc/lib/../lib64/libgcc_s.so, may conflict with libc.so.6 Passing --without-lib-prefix prevents this default behavior from happening, and no stupid value is added to CPPFLAGS or LDFLAGS. Fixes: http://autobuild.buildroot.net/results/a637f916962b6136dd6dd4f4b9ff4e1cab568ef3/ Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* strongswan: fix typo in tnccs_20 dependenciesJérôme Pouiller2013-08-221-0/+26
| | | | | | | | | | | | | It looks like there is a typing error in dependencies of tnccs_20 in strongswan configure script. Add a patch to solve it. Resolve issues detected here: http://autobuild.buildroot.net/results/b069e304c42660e7f7eba0b358f95dbaf879df64 http://autobuild.buildroot.net/results/7355ddbaa213f4fcfd1b6d37b25bed1aab525723 Signed-off-by: Jérôme Pouiller <jezz@sysmic.org> Tested-by: Thomas De Schampheleire <thomas.de.schampheleire@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* strongswan: fix build error 'no rule to make target libtls.la'Thomas De Schampheleire2013-08-102-0/+80
| | | | | | | | | | | | In some strongswan configurations, an implicit dependency could be missing. This commit patches strongswan to force this dependency when needed. Fixes several autobuild failures, like: http://autobuild.buildroot.net/results/643f5b33973d5b12ffe6d84254bf3be9ed81d0ad/ http://autobuild.buildroot.net/results/24bcdcb83119e416c92458fa9ff2f5269957a743/ Signed-off-by: Thomas De Schampheleire <thomas.de.schampheleire@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* strongswan: needs host-pkgconfThomas De Schampheleire2013-08-101-0/+1
| | | | | | Signed-off-by: Thomas De Schampheleire <thomas.de.schampheleire@gmail.com> Tested-by: Jérôme Pouiller <jezz@sysmic.org> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* strongswan: scripts need charon or toolsGustavo Zacarias2013-07-311-0/+1
| | | | | | | | Fixes: http://autobuild.buildroot.net/results/007/007e75362cbe4693e36d5a7ab96c539d1f3b00fc/ Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* strongswan: security bump to version 5.0.4Gustavo Zacarias2013-07-311-1/+1
| | | | | | | Fixes CVE-2013-2944. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* strongswan: new packageJérôme Pouiller2013-07-292-0/+183
strongSwan is an OpenSource IPsec implementation for the Linux operating system. It is based on the discontinued FreeS/WAN project and the X.509 patch. Signed-off-by: Jérôme Pouiller <jezz@sysmic.org> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
OpenPOWER on IntegriCloud