130e63931f
Release Notes: https://github.com/libreswan/libreswan/releases/tag/v4.10 Fixes: CVE-2023-23009 Signed-off-by: Nick Hainke <vincent@systemli.org>
122 lines
3.5 KiB
Makefile
122 lines
3.5 KiB
Makefile
#
|
|
# Copyright (C) 2019 Lucian Cristian <lucian.cristian@gmail.com>
|
|
#
|
|
# This is free software, licensed under the GNU General Public License v2.
|
|
# See /LICENSE for more information.
|
|
|
|
include $(TOPDIR)/rules.mk
|
|
|
|
PKG_NAME:=libreswan
|
|
PKG_VERSION:=4.10
|
|
PKG_RELEASE:=1
|
|
|
|
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
|
|
PKG_SOURCE_URL:=https://download.libreswan.org/
|
|
PKG_HASH:=5a9400c25a8edba07420426fb55dcbaafdaa3702e5b0f2c19205a6c567248a7b
|
|
|
|
PKG_MAINTAINER:=Lucian Cristian <lucian.cristian@gmail.com>
|
|
PKG_LICENSE:=GPL-2.0-or-later
|
|
PKG_LICENSE_FILES:=COPYING LICENSE
|
|
PKG_CPE_ID:=cpe:/a:libreswan:libreswan
|
|
|
|
PKG_BUILD_PARALLEL:=1
|
|
PKG_INSTALL:=1
|
|
PKG_BUILD_FLAGS:=lto
|
|
|
|
include $(INCLUDE_DIR)/package.mk
|
|
|
|
define Package/libreswan/Default
|
|
TITLE:=Libreswan
|
|
URL:=https://libreswan.org/
|
|
endef
|
|
|
|
define Package/libreswan/Default/description
|
|
Libreswan is a free software implementation of the most widely supported and
|
|
standardized VPN protocol based on ("IPsec") and the Internet Key Exchange
|
|
("IKE"). These standards are produced and maintained by the Internet
|
|
Engineering Task Force ("IETF").
|
|
endef
|
|
|
|
define Package/libreswan
|
|
$(call Package/libreswan/Default)
|
|
SUBMENU:=VPN
|
|
SECTION:=net
|
|
CATEGORY:=Network
|
|
DEPENDS:= +IPV6:kmod-ip6-vti +IPV6:kmod-ipsec6 +ip-full +iptables-mod-ipsec \
|
|
+kmod-crypto-aead +kmod-crypto-authenc +kmod-crypto-gcm \
|
|
+kmod-crypto-hash +kmod-crypto-rng +kmod-ip-vti +kmod-ipsec \
|
|
+kmod-ipsec4 +kmod-ipt-ipsec +kmod-xfrm-interface +libevent2 +libevent2-pthreads \
|
|
+libldns +librt +libunbound +nss-utils +nspr +libcap-ng
|
|
PROVIDES:=openswan
|
|
CONFLICTS:=strongswan
|
|
TITLE+= IPsec Server
|
|
endef
|
|
|
|
define Package/libreswan/description
|
|
$(call Package/libreswan/Default/description)
|
|
Libreswan is a free software implementation of the most widely supported and
|
|
standardized VPN protocol based on ("IPsec") and the Internet Key Exchange
|
|
("IKE"). These standards are produced and maintained by the Internet
|
|
Engineering Task Force ("IETF").
|
|
endef
|
|
|
|
define Package/libreswan/conffiles
|
|
/etc/ipsec.d
|
|
/etc/ipsec.conf
|
|
/etc/ipsec.secrets
|
|
endef
|
|
TARGET_LDFLAGS += -Wl,--gc-sections,--as-needed
|
|
|
|
MAKE_FLAGS+= \
|
|
WERROR_CFLAGS=" " \
|
|
NSS_REQ_AVA_COPY=false \
|
|
USE_LINUX_AUDIT=false \
|
|
USE_LABELED_IPSEC=false \
|
|
USE_NM=false \
|
|
USE_NSS_KDF=true \
|
|
USE_LIBCURL=false \
|
|
USE_GLIBC_KERN_FLIP_HEADERS=true \
|
|
USE_AUTHPAM=false \
|
|
USE_LIBCAP_NG=true \
|
|
USE_SYSTEMD_WATCHDOG=false \
|
|
USE_SECCOMP=false\
|
|
USE_XFRM_INTERFACE_IFLA_HEADER=false \
|
|
PREFIX="/usr" \
|
|
FINALRUNDIR="/var/run/pluto" \
|
|
FINALNSSDIR="/etc/ipsec.d" \
|
|
DEFAULT_DNSSEC_ROOTKEY_FILE=/etc/unbound/root.key \
|
|
MODPROBEARGS="-q" \
|
|
OSDEP=linux \
|
|
BUILDENV=linux \
|
|
LINUX_VARIANT="openwrt" \
|
|
ARCH="$(LINUX_KARCH)" \
|
|
|
|
define Build/Prepare
|
|
$(call Build/Prepare/Default)
|
|
$(SED) 's,include $$$$(top_srcdir)/mk/manpages.mk,,g' \
|
|
$(PKG_BUILD_DIR)/mk/program.mk
|
|
endef
|
|
|
|
define Build/Compile
|
|
$(call Build/Compile/Default,all)
|
|
endef
|
|
|
|
define Package/libreswan/install
|
|
$(INSTALL_DIR) \
|
|
$(1)/etc/init.d \
|
|
$(1)/etc/ipsec.d/policies \
|
|
$(1)/usr/libexec/ipsec \
|
|
$(1)/usr/sbin
|
|
|
|
$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/sbin/ipsec \
|
|
$(1)/usr/sbin/ipsec
|
|
$(INSTALL_BIN) ./files/ipsec.init $(1)/etc/init.d/ipsec
|
|
$(INSTALL_DATA) ./files/ipsec.conf $(1)/etc/ipsec.conf
|
|
$(INSTALL_DATA) ./files/ipsec.secrets $(1)/etc/ipsec.secrets
|
|
$(INSTALL_DATA) $(PKG_INSTALL_DIR)/etc/ipsec.d/policies/* \
|
|
$(1)/etc/ipsec.d/policies/
|
|
$(CP) $(PKG_INSTALL_DIR)/usr/libexec/ipsec/* \
|
|
$(1)/usr/libexec/ipsec/
|
|
endef
|
|
|
|
$(eval $(call BuildPackage,libreswan))
|