2181a05305
Changes since the 0.6 branch:
0.7.1 - 23 July 2008
o Fixes a memory leak when invalid proposal received
o Some fixes in DPD
o do not set default gss id if xauth is used
o fixed hybrid enabled builds
o fixed compilation on FreeBSD8
o cleanup in network port value manipulation
o gets ports from SADB_X_EXT_NAT_T_[SD]PORT if present in purge_ipsec_sp
i()
o Generates a log if cert validation has been disabled by configuration
o better handling for pfkey socket read errors
o Fixes in yacc / bison stuff
o new plog() macro (reduced CPU usage when logging is disabled)
o Try to works better with huge SPD/SAD
o Corrected modecfg option syntax
o Many other various fixes...
0.7 - 09 August 2007
o Xauth with pre-shared key PSK
o Xauth with certificates
o SHA2 support
o pkcs7 support
o system accounting (utmp)
o Darwin support
o configuration can be reloaded
o Support for UNIQUE generated policies
o Support for semi anonymous sainfos
o Support for ph1id to remoteid matching
o Plain RSA authentication
o Native LDAP support for Xauth and modecfg
o Group membership checks for Xauth and sainfo selection
o Camellia cipher support
o IKE Fragment force option
o Modecfg SplitNet attribute support
o Modecfg SplitDNS attribute support ( server side )
o Modecfg Default Domain attribute support
o Modecfg DNS/WINS server multiple attribute support
85 lines
3 KiB
Makefile
85 lines
3 KiB
Makefile
# $NetBSD: Makefile,v 1.28 2008/08/16 06:55:18 manu Exp $
|
|
|
|
DISTNAME= ipsec-tools-0.7.1
|
|
CATEGORIES= security
|
|
MASTER_SITES= ${MASTER_SITE_NETBSD:=ipsec-tools/}
|
|
EXTRACT_SUFX= .tar.bz2
|
|
|
|
MAINTAINER= manu@NetBSD.org
|
|
HOMEPAGE= http://ipsec-tools.sourceforge.net/
|
|
COMMENT= IPsec-tools racoon IKE daemon
|
|
|
|
ONLY_FOR_PLATFORM= NetBSD-[3-9].*-* Linux-2.[6-9].*-*
|
|
|
|
USE_PKGLOCALEDIR= yes
|
|
USE_LIBTOOL= yes
|
|
GNU_CONFIGURE= yes
|
|
|
|
PKG_OPTIONS_VAR= PKG_OPTIONS.ipsec-tools
|
|
PKG_SUPPORTED_OPTIONS= radius
|
|
PKG_SUGGESTED_OPTIONS= radius
|
|
|
|
.include "../../mk/bsd.options.mk"
|
|
|
|
.if !empty(PKG_OPTIONS:Mradius)
|
|
. include "../../net/libradius/buildlink3.mk"
|
|
CONFIGURE_ARGS+= --with-libradius
|
|
LIBS+= ${BUILDLINK_LDADD.libradius}
|
|
.endif
|
|
|
|
.if exists(/usr/include/security/pam_modules.h)
|
|
CONFIGURE_ARGS+= --with-libpam
|
|
.endif
|
|
|
|
CONFIGURE_ARGS+= --enable-frag --enable-hybrid
|
|
CONFIGURE_ARGS+= --enable-adminport --enable-dpd
|
|
CONFIGURE_ARGS+= --enable-natt=kernel
|
|
|
|
CONFIGURE_ARGS+= --localstatedir=${VARBASE:Q}
|
|
PLIST_SUBST+= VARBASE=${VARBASE:Q}
|
|
|
|
PKG_SYSCONFSUBDIR= racoon
|
|
CONFIGURE_ARGS+= --sysconfdir=${PKG_SYSCONFDIR:Q}
|
|
|
|
SAMPLE_DIR= ${WRKSRC}/src/racoon/samples
|
|
EXAMPLE_DIR= ${PREFIX}/share/examples/ipsec-tools
|
|
|
|
pre-configure:
|
|
${RM} -f ${WRKSRC}/src/racoon/cfparse.c
|
|
${RM} -f ${WRKSRC}/src/racoon/cftoken.c
|
|
.if (${OPSYS} == "NetBSD")
|
|
${MKDIR} ${BUILDLINK_DIR}/include/netinet6
|
|
${EGREP} -v 'extern.*ipsec_.*_policy' /usr/include/netinet6/ipsec.h \
|
|
>${BUILDLINK_DIR}/include/netinet6/ipsec.h
|
|
.endif
|
|
|
|
post-install:
|
|
${INSTALL_DATA_DIR} ${EXAMPLE_DIR}
|
|
${INSTALL_DATA_DIR} ${EXAMPLE_DIR}/roadwarrior
|
|
${INSTALL_DATA_DIR} ${EXAMPLE_DIR}/roadwarrior/client
|
|
${INSTALL_DATA_DIR} ${EXAMPLE_DIR}/roadwarrior/server
|
|
${INSTALL_DATA} ${SAMPLE_DIR}/psk.txt ${EXAMPLE_DIR}
|
|
${INSTALL_DATA} ${SAMPLE_DIR}/psk.txt.in ${EXAMPLE_DIR}
|
|
${INSTALL_DATA} ${SAMPLE_DIR}/psk.txt.sample ${EXAMPLE_DIR}
|
|
${INSTALL_DATA} ${SAMPLE_DIR}/racoon.conf ${EXAMPLE_DIR}
|
|
${INSTALL_DATA} ${SAMPLE_DIR}/racoon.conf.in ${EXAMPLE_DIR}
|
|
${INSTALL_DATA} ${SAMPLE_DIR}/racoon.conf.sample ${EXAMPLE_DIR}
|
|
${INSTALL_DATA} ${SAMPLE_DIR}/racoon.conf.sample-gssapi ${EXAMPLE_DIR}
|
|
${INSTALL_DATA} ${SAMPLE_DIR}/racoon.conf.sample-inherit ${EXAMPLE_DIR}
|
|
${INSTALL_DATA} ${SAMPLE_DIR}/racoon.conf.sample-natt ${EXAMPLE_DIR}
|
|
${INSTALL_DATA} ${SAMPLE_DIR}/racoon.conf.sample-plainrsa ${EXAMPLE_DIR}
|
|
${INSTALL_DATA} ${SAMPLE_DIR}/roadwarrior/README \
|
|
${EXAMPLE_DIR}/roadwarrior
|
|
${INSTALL_DATA} ${SAMPLE_DIR}/roadwarrior/client/racoon.conf \
|
|
${EXAMPLE_DIR}/roadwarrior/client
|
|
${INSTALL_DATA} ${SAMPLE_DIR}/roadwarrior/client/phase1-up.sh \
|
|
${EXAMPLE_DIR}/roadwarrior/client
|
|
${INSTALL_DATA} ${SAMPLE_DIR}/roadwarrior/client/phase1-down.sh \
|
|
${EXAMPLE_DIR}/roadwarrior/client
|
|
${INSTALL_DATA} ${SAMPLE_DIR}/roadwarrior/server/racoon.conf \
|
|
${EXAMPLE_DIR}/roadwarrior/server
|
|
${INSTALL_DATA} ${SAMPLE_DIR}/roadwarrior/server/racoon.conf-radius \
|
|
${EXAMPLE_DIR}/roadwarrior/server
|
|
|
|
.include "../../security/openssl/buildlink3.mk"
|
|
.include "../../mk/bsd.pkg.mk"
|