ad256bbfa7
strongswan: fix typo
...
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be >
(cherry picked from commit 4660504c61
2017-09-02 12:29:35 +03:00
a700729158
strongswan: add curve25519 plugin
...
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be >
(cherry picked from commit a268689adc
2017-09-02 12:29:13 +03:00
1143cb9b2c
strongswan: bump to 5.5.3
...
Fixes CVE-2017-9022, CVE-2017-9023.
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be >
(cherry picked from commit 960006be50
2017-09-02 12:28:42 +03:00
384e89b3d7
strongswan: bump to 5.5.2
...
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be >
(cherry picked from commit 18b076ab93
2017-09-02 12:26:26 +03:00
59313e6480
strongswan: enable IKEv2 Mediation Extension
...
Closes #3905 .
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be >
2017-02-05 19:41:50 +01:00
37f4ba2377
strongswan: take over maintainership
...
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be >
2016-10-31 11:01:30 +02:00
7d0ee222df
strongswan: bump to 5.5.1
...
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be >
2016-10-31 11:01:30 +02:00
fc67bf7c2b
strongswan: preserve /etc/strongswan.d during upgrade
...
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be >
2016-10-31 11:01:30 +02:00
1138d6fee0
strongswan: bump to 5.5.0 ( #2976 )
...
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be >
2016-07-18 17:33:46 +02:00
108197ddcf
strongswan: bump to 5.4.0
...
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be >
2016-07-06 19:54:40 +02:00
475be1df93
strongswan: add forecast plugin
...
Closes #1868 .
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be >
2016-07-06 19:54:40 +02:00
06cf48b15e
strongswan: fix alignment in connmark plugin
...
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be >
2016-07-06 19:54:40 +02:00
064d166efd
strongswan: run sleep with integer argument
...
The default busybox config used by OpenWrt does not enable floating
point number support for the sleep applet. This can cause an error when
stopping or restarting strongswan:
sleep: invalid number '0.1'
Replace the float with an integer to fix this.
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be >
2016-07-06 19:54:40 +02:00
6d2c0fd06f
net: Fix typos (found by codespell)
...
Signed-off-by: Stefan Weil <sw@weilnetz.de >
2016-04-10 12:51:10 +02:00
393a788cc0
strongswan: bump to 5.3.5
...
Signed-off-by: Steven Barth <steven@midlink.org >
2016-01-20 14:45:46 +01:00
e8d9c06e2e
strongswan: preserve /etc/ipsec.d during upgrade
...
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be >
2016-01-19 15:36:15 +01:00
f3d1722bb2
strongswan: add upstream patch for bug in 5.3.4
...
See https://wiki.strongswan.org/issues/1213
Removed the changes to charon-xpc.c because they didn't apply and are
only used on OS X anyway.
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be >
2015-11-28 12:38:40 -05:00
8bf976096e
strongswan: update to 5.3.4
...
Fixes CVE-2015-8023
Signed-off-by: Steven Barth <steven@midlink.org >
2015-11-23 14:25:41 +01:00
f705b3c0bf
strongswan: gmpdh plugin, package and strongswan-isakmp metapackage
...
gmpdh plugin implements DH Groups (same as normal GMP plugin), but links to GMP statically and is stripped of all RSA based stuff. Binary size for plugin is ~20kbytes with no dependency on libgmp (200+ kbytes after squash), easilly fitting into flash space restricted devices.
strongswan-isakmp metapackage defines a minimal set of strongswan plugins (including gmpdh) for ISAKMP / IKEv1 PSK tunnels. Will fit even 4mb routers (like tplink wr841n) with disabled IPv6 support and packages (so its a trade - IPv6 or ipsec tunnels).
Signed-of-by: Mikalai Miadzvedz <brainsucker.na@gmail.com >
2015-11-19 00:45:41 +03:00
7bb0dc34f3
strongswan: bump to 5.3.3
...
Signed-off-by: Steven Barth <steven@midlink.org >
2015-09-07 11:06:37 +02:00
734d3e2284
strongswan: make kmod-ipsec6 dependency conditional
...
Makes kmod-ipsec6 requirement dependent on IPv6 support for packages.
This allows to disable unnecessary IPv6 kernel modules, saving
considerable amount of space.
Signed-off-by: Marcin Jurkowski <marcin1j@gmail.com >
2015-09-01 15:06:52 +02:00
54ff3f0996
strongswan: add a couple more plugins
...
Signed-off-by: Dirk Feytons <dirk.feytons@gmail.com >
2015-08-27 14:09:18 +02:00
2b3784cdb1
strongswan: dont overwrite ipsec.conf and ipsec.user during upgrade
...
Signed-off-by: Ulrich Weber <uw@ocedo.com >
2015-08-25 10:12:58 +02:00
fbf5c6c5b4
strongswan: split out libtls.so as a separate package.
...
When only strongswan-minimal is selected, libtls.so will not be built
yet package strongswan will still try to copy the file causing build
failure.
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com >
2015-08-20 10:21:15 +08:00
9298d1d445
strongswan: Added strongswan-mod-eap-tls
...
Signed-off-by: Adam Lebsack <alebsack@gmail.com >
2015-07-20 17:06:02 +02:00
2865b5aa09
strongswan: fix musl builds, reenable lost modules
...
Signed-off-by: Steven Barth <steven@midlink.org >
2015-06-19 18:38:44 +02:00
267174b747
strongswan: bump to 5.3.2
...
Signed-off-by: Steven Barth <steven@midlink.org >
2015-06-08 18:09:58 +02:00
433a621c42
strongswan: update to 5.3.1, cleanup broken modules
...
Signed-off-by: Steven Barth <steven@midlink.org >
2015-06-08 07:48:41 +02:00
b8ab944d23
strongswan: add missing dependency
...
Signed-off-by: Steven Barth <steven@midlink.org >
2015-04-07 12:07:27 +02:00
41222e6c1a
strongswan: bump to 5.3.0
...
Signed-off-by: Steven Barth <steven@midlink.org >
2015-04-06 12:23:27 +02:00
7e68031372
strongswan: fix IKEv1 support
...
Signed-off-by: Steven Barth <steven@midlink.org >
2015-03-09 13:40:29 +01:00
b0ae832197
strongswan: bump to 5.2.2
...
Signed-off-by: Steven Barth <steven@midlink.org >
2015-01-11 20:27:06 +01:00
dc902eecd0
strongswan: correctly install plugin include configs
...
Signed-off-by: Steven Barth <steven@midlink.org >
2014-12-04 11:37:42 +01:00
774bb44494
strongswan: update to 5.2.1
...
Signed-off-by: Steven Barth <steven@midlink.org >
2014-10-20 09:16:44 +02:00
bd52d64fdb
strongswan: import, update, adopt
...
Signed-off-by: Steven Barth <steven@midlink.org >
2014-08-17 10:11:02 +02:00
Stijn Tintel