* [ptxdist] [PATCH] strongswan: add package
@ 2013-02-20 21:22 Christoph Fritz
2013-03-04 17:04 ` Michael Olbrich
0 siblings, 1 reply; 11+ messages in thread
From: Christoph Fritz @ 2013-02-20 21:22 UTC (permalink / raw)
To: ptxdist
Signed-off-by: Christoph Fritz <chf.fritz@googlemail.com>
---
rules/strongswan.in | 9 ++++
rules/strongswan.make | 123 +++++++++++++++++++++++++++++++++++++++++++++++++
2 files changed, 132 insertions(+)
create mode 100644 rules/strongswan.in
create mode 100644 rules/strongswan.make
diff --git a/rules/strongswan.in b/rules/strongswan.in
new file mode 100644
index 0000000..34ad948
--- /dev/null
+++ b/rules/strongswan.in
@@ -0,0 +1,9 @@
+## SECTION=networking
+
+config STRONGSWAN
+ bool
+ prompt "strongswan"
+ select LIBGMP
+ select LIBCURL
+ help
+ strongSwan is a complete IPsec implementation.
diff --git a/rules/strongswan.make b/rules/strongswan.make
new file mode 100644
index 0000000..9127ea9
--- /dev/null
+++ b/rules/strongswan.make
@@ -0,0 +1,123 @@
+# -*-makefile-*-
+#
+# Copyright (C) 2013 by Christoph Fritz <chf.fritz@googlemail.com>
+#
+#
+# See CREDITS for details about who has contributed to this project.
+#
+# For further information about the PTXdist project and license conditions
+# see the README file.
+#
+# preliminary testing version for strongswan
+#
+
+#
+# We provide this package
+#
+PACKAGES-$(PTXCONF_STRONGSWAN) += strongswan
+
+#
+# Paths and names
+#
+STRONGSWAN_VERSION := 5.0.2
+STRONGSWAN_MD5 := 77dc16443fd141f46183d3a4f60986ef
+STRONGSWAN := strongswan-$(STRONGSWAN_VERSION)
+STRONGSWAN_SUFFIX := tar.bz2
+STRONGSWAN_URL := http://download.strongswan.org/$(STRONGSWAN).$(STRONGSWAN_SUFFIX)
+STRONGSWAN_SOURCE := $(SRCDIR)/$(STRONGSWAN).$(STRONGSWAN_SUFFIX)
+STRONGSWAN_DIR := $(BUILDDIR)/$(STRONGSWAN)
+STRONGSWAN_LICENSE := GPL
+
+# ----------------------------------------------------------------------------
+# Get
+# ----------------------------------------------------------------------------
+
+#$(STRONGSWAN_SOURCE):
+# @$(call targetinfo)
+# @$(call get, STRONGSWAN)
+
+# ----------------------------------------------------------------------------
+# Prepare
+# ----------------------------------------------------------------------------
+
+#STRONGSWAN_CONF_ENV := $(CROSS_ENV)
+
+#
+# autoconf
+#
+STRONGSWAN_CONF_TOOL := autoconf
+STRONGSWAN_CONF_OPT := $(CROSS_AUTOCONF_USR) \
+ --enable-monolithic \
+ --enable-curl \
+ --enable-blowfish \
+ --enable-xauth-eap \
+ --enable-mediation \
+ --enable-ccm \
+ --enable-gcm \
+ --enable-addrblock \
+ --enable-unity \
+ --enable-whitelist \
+ --enable-error-notify \
+ --enable-certexpire \
+ --enable-coupling \
+ --enable-md4 \
+ --enable-eap-md5 \
+ --enable-eap-mschapv2 \
+ --enable-eap-identity \
+ --enable-eap-dynamic \
+ --enable-eap-gtc
+
+#$(STATEDIR)/strongswan.prepare:
+# @$(call targetinfo)
+# @$(call clean, $(STRONGSWAN_DIR)/config.cache)
+# cd $(STRONGSWAN_DIR) && \
+# $(STRONGSWAN_PATH) $(STRONGSWAN_ENV) \
+# ./configure $(STRONGSWAN_CONF_OPT)
+# @$(call touch)
+
+# ----------------------------------------------------------------------------
+# Compile
+# ----------------------------------------------------------------------------
+
+#$(STATEDIR)/strongswan.compile:
+# @$(call targetinfo)
+# @$(call world/compile, STRONGSWAN)
+# @$(call touch)
+
+# ----------------------------------------------------------------------------
+# Install
+# ----------------------------------------------------------------------------
+
+#$(STATEDIR)/strongswan.install:
+# @$(call targetinfo)
+# @$(call world/install, STRONGSWAN)
+# @$(call touch)
+
+# ----------------------------------------------------------------------------
+# Target-Install
+# ----------------------------------------------------------------------------
+
+$(STATEDIR)/strongswan.targetinstall:
+ @$(call targetinfo)
+
+ @$(call install_init, strongswan)
+ @$(call install_fixup, strongswan,PRIORITY,optional)
+ @$(call install_fixup, strongswan,SECTION,base)
+ @$(call install_fixup, strongswan,AUTHOR,"Christoph Fritz <chf.fritz@googlemail.com>")
+ @$(call install_fixup, strongswan,DESCRIPTION,missing)
+
+ @$(call install_tree, strongswan, 0, 0, $(STRONGSWAN_PKGDIR)/, /)
+
+ @$(call install_finish, strongswan)
+
+ @$(call touch)
+
+# ----------------------------------------------------------------------------
+# Clean
+# ----------------------------------------------------------------------------
+
+#$(STATEDIR)/strongswan.clean:
+# @$(call targetinfo)
+# @$(call clean_pkg, STRONGSWAN)
+
+# vim: syntax=make
--
1.7.10.4
--
ptxdist mailing list
ptxdist@pengutronix.de
^ permalink raw reply [flat|nested] 11+ messages in thread
* Re: [ptxdist] [PATCH] strongswan: add package
2013-02-20 21:22 [ptxdist] [PATCH] strongswan: add package Christoph Fritz
@ 2013-03-04 17:04 ` Michael Olbrich
2013-03-05 19:37 ` [ptxdist] [PATCH v2] " Christoph Fritz
0 siblings, 1 reply; 11+ messages in thread
From: Michael Olbrich @ 2013-03-04 17:04 UTC (permalink / raw)
To: ptxdist
On Wed, Feb 20, 2013 at 10:22:27PM +0100, Christoph Fritz wrote:
>
> Signed-off-by: Christoph Fritz <chf.fritz@googlemail.com>
> ---
> rules/strongswan.in | 9 ++++
> rules/strongswan.make | 123 +++++++++++++++++++++++++++++++++++++++++++++++++
> 2 files changed, 132 insertions(+)
> create mode 100644 rules/strongswan.in
> create mode 100644 rules/strongswan.make
>
> diff --git a/rules/strongswan.in b/rules/strongswan.in
> new file mode 100644
> index 0000000..34ad948
> --- /dev/null
> +++ b/rules/strongswan.in
> @@ -0,0 +1,9 @@
> +## SECTION=networking
> +
> +config STRONGSWAN
> + bool
> + prompt "strongswan"
> + select LIBGMP
> + select LIBCURL
> + help
> + strongSwan is a complete IPsec implementation.
> diff --git a/rules/strongswan.make b/rules/strongswan.make
> new file mode 100644
> index 0000000..9127ea9
> --- /dev/null
> +++ b/rules/strongswan.make
> @@ -0,0 +1,123 @@
> +# -*-makefile-*-
> +#
> +# Copyright (C) 2013 by Christoph Fritz <chf.fritz@googlemail.com>
> +#
> +#
> +# See CREDITS for details about who has contributed to this project.
> +#
> +# For further information about the PTXdist project and license conditions
> +# see the README file.
> +#
> +# preliminary testing version for strongswan
> +#
> +
> +#
> +# We provide this package
> +#
> +PACKAGES-$(PTXCONF_STRONGSWAN) += strongswan
> +
> +#
> +# Paths and names
> +#
> +STRONGSWAN_VERSION := 5.0.2
> +STRONGSWAN_MD5 := 77dc16443fd141f46183d3a4f60986ef
> +STRONGSWAN := strongswan-$(STRONGSWAN_VERSION)
> +STRONGSWAN_SUFFIX := tar.bz2
> +STRONGSWAN_URL := http://download.strongswan.org/$(STRONGSWAN).$(STRONGSWAN_SUFFIX)
> +STRONGSWAN_SOURCE := $(SRCDIR)/$(STRONGSWAN).$(STRONGSWAN_SUFFIX)
> +STRONGSWAN_DIR := $(BUILDDIR)/$(STRONGSWAN)
> +STRONGSWAN_LICENSE := GPL
> +
> +# ----------------------------------------------------------------------------
> +# Get
> +# ----------------------------------------------------------------------------
> +
> +#$(STRONGSWAN_SOURCE):
> +# @$(call targetinfo)
> +# @$(call get, STRONGSWAN)
remove the whole section.
> +
> +# ----------------------------------------------------------------------------
> +# Prepare
> +# ----------------------------------------------------------------------------
> +
> +#STRONGSWAN_CONF_ENV := $(CROSS_ENV)
remove.
> +
> +#
> +# autoconf
> +#
> +STRONGSWAN_CONF_TOOL := autoconf
> +STRONGSWAN_CONF_OPT := \
$(CROSS_AUTOCONF_USR) \
break.
> + --enable-monolithic \
> + --enable-curl \
> + --enable-blowfish \
> + --enable-xauth-eap \
> + --enable-mediation \
> + --enable-ccm \
> + --enable-gcm \
> + --enable-addrblock \
> + --enable-unity \
> + --enable-whitelist \
> + --enable-error-notify \
> + --enable-certexpire \
> + --enable-coupling \
> + --enable-md4 \
> + --enable-eap-md5 \
> + --enable-eap-mschapv2 \
> + --enable-eap-identity \
> + --enable-eap-dynamic \
> + --enable-eap-gtc
> +
remove from here ...
> +#$(STATEDIR)/strongswan.prepare:
> +# @$(call targetinfo)
> +# @$(call clean, $(STRONGSWAN_DIR)/config.cache)
> +# cd $(STRONGSWAN_DIR) && \
> +# $(STRONGSWAN_PATH) $(STRONGSWAN_ENV) \
> +# ./configure $(STRONGSWAN_CONF_OPT)
> +# @$(call touch)
> +
> +# ----------------------------------------------------------------------------
> +# Compile
> +# ----------------------------------------------------------------------------
> +
> +#$(STATEDIR)/strongswan.compile:
> +# @$(call targetinfo)
> +# @$(call world/compile, STRONGSWAN)
> +# @$(call touch)
> +
> +# ----------------------------------------------------------------------------
> +# Install
> +# ----------------------------------------------------------------------------
> +
> +#$(STATEDIR)/strongswan.install:
> +# @$(call targetinfo)
> +# @$(call world/install, STRONGSWAN)
> +# @$(call touch)
> +
... to here
> +# ----------------------------------------------------------------------------
> +# Target-Install
> +# ----------------------------------------------------------------------------
> +
> +$(STATEDIR)/strongswan.targetinstall:
> + @$(call targetinfo)
> +
> + @$(call install_init, strongswan)
> + @$(call install_fixup, strongswan,PRIORITY,optional)
> + @$(call install_fixup, strongswan,SECTION,base)
> + @$(call install_fixup, strongswan,AUTHOR,"Christoph Fritz <chf.fritz@googlemail.com>")
> + @$(call install_fixup, strongswan,DESCRIPTION,missing)
> +
> + @$(call install_tree, strongswan, 0, 0, $(STRONGSWAN_PKGDIR)/, /)
I havn't tested this yet, but I very much doubt, that you need all files.
So please install the individual programs, libs, etc. with
install_copy/install_lib/etc.
> +
> + @$(call install_finish, strongswan)
> +
> + @$(call touch)
> +
> +# ----------------------------------------------------------------------------
> +# Clean
> +# ----------------------------------------------------------------------------
> +
> +#$(STATEDIR)/strongswan.clean:
> +# @$(call targetinfo)
> +# @$(call clean_pkg, STRONGSWAN)
remove.
Michael
> +
> +# vim: syntax=make
> --
> 1.7.10.4
>
>
>
>
> --
> ptxdist mailing list
> ptxdist@pengutronix.de
>
--
Pengutronix e.K. | |
Industrial Linux Solutions | http://www.pengutronix.de/ |
Peiner Str. 6-8, 31137 Hildesheim, Germany | Phone: +49-5121-206917-0 |
Amtsgericht Hildesheim, HRA 2686 | Fax: +49-5121-206917-5555 |
--
ptxdist mailing list
ptxdist@pengutronix.de
^ permalink raw reply [flat|nested] 11+ messages in thread
* [ptxdist] [PATCH v2] strongswan: add package
2013-03-04 17:04 ` Michael Olbrich
@ 2013-03-05 19:37 ` Christoph Fritz
2013-03-06 8:21 ` Michael Olbrich
0 siblings, 1 reply; 11+ messages in thread
From: Christoph Fritz @ 2013-03-05 19:37 UTC (permalink / raw)
To: ptxdist, Michael Olbrich
Signed-off-by: Christoph Fritz <chf.fritz@googlemail.com>
---
rules/strongswan.in | 10 ++++++++
rules/strongswan.make | 62 +++++++++++++++++++++++++++++++++++++++++++++++++
2 files changed, 72 insertions(+)
create mode 100644 rules/strongswan.in
create mode 100644 rules/strongswan.make
diff --git a/rules/strongswan.in b/rules/strongswan.in
new file mode 100644
index 0000000..1e93801
--- /dev/null
+++ b/rules/strongswan.in
@@ -0,0 +1,10 @@
+## SECTION=networking
+
+config STRONGSWAN
+ bool
+ prompt "strongswan"
+ help
+ strongSwan is a complete IPsec implementation.
+ Please keep in mind to configure the kernel accordingly to fulfill
+ strongSwan's needs. See 'Required Kernel Modules' here:
+ http://wiki.strongswan.org/projects/strongswan/wiki/KernelModules
diff --git a/rules/strongswan.make b/rules/strongswan.make
new file mode 100644
index 0000000..9c82672
--- /dev/null
+++ b/rules/strongswan.make
@@ -0,0 +1,62 @@
+# -*-makefile-*-
+#
+# Copyright (C) 2013 by Christoph Fritz <chf.fritz@googlemail.com>
+#
+#
+# See CREDITS for details about who has contributed to this project.
+#
+# For further information about the PTXdist project and license conditions
+# see the README file.
+#
+
+#
+# We provide this package
+#
+PACKAGES-$(PTXCONF_STRONGSWAN) += strongswan
+
+#
+# Paths and names
+#
+STRONGSWAN_VERSION := 5.0.2
+STRONGSWAN_MD5 := 77dc16443fd141f46183d3a4f60986ef
+STRONGSWAN := strongswan-$(STRONGSWAN_VERSION)
+STRONGSWAN_SUFFIX := tar.bz2
+STRONGSWAN_URL := http://download.strongswan.org/$(STRONGSWAN).$(STRONGSWAN_SUFFIX)
+STRONGSWAN_SOURCE := $(SRCDIR)/$(STRONGSWAN).$(STRONGSWAN_SUFFIX)
+STRONGSWAN_DIR := $(BUILDDIR)/$(STRONGSWAN)
+STRONGSWAN_LICENSE := GPL
+
+# ----------------------------------------------------------------------------
+# Prepare
+# ----------------------------------------------------------------------------
+
+STRONGSWAN_CONF_TOOL := autoconf
+STRONGSWAN_CONF_OPT := \
+ $(CROSS_AUTOCONF_USR) \
+ --with-ipseclibdir=/usr/lib
+
+# ----------------------------------------------------------------------------
+# Target-Install
+# ----------------------------------------------------------------------------
+
+$(STATEDIR)/strongswan.targetinstall:
+ @$(call targetinfo)
+
+ @$(call install_init, strongswan)
+ @$(call install_fixup, strongswan,PRIORITY,optional)
+ @$(call install_fixup, strongswan,SECTION,base)
+ @$(call install_fixup, strongswan,AUTHOR,"Christoph Fritz <chf.fritz@googlemail.com>")
+ @$(call install_fixup, strongswan,DESCRIPTION,missing)
+
+ @$(call install_tree, strongswan, 0, 0, $(STRONGSWAN_PKGDIR)/usr/sbin, /usr/sbin)
+ @$(call install_tree, strongswan, 0, 0, $(STRONGSWAN_PKGDIR)/usr/libexec, /usr/libexec)
+ @$(call install_tree, strongswan, 0, 0, $(STRONGSWAN_PKGDIR)/usr/lib, /usr/lib)
+ @$(call install_copy, strongswan, 0, 0, 0600, /etc/ipsec.d/private)
+ @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/certs)
+ @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/cacerts)
+
+ @$(call install_finish, strongswan)
+
+ @$(call touch)
+
+# vim: syntax=make
--
1.7.10.4
--
ptxdist mailing list
ptxdist@pengutronix.de
^ permalink raw reply [flat|nested] 11+ messages in thread
* Re: [ptxdist] [PATCH v2] strongswan: add package
2013-03-05 19:37 ` [ptxdist] [PATCH v2] " Christoph Fritz
@ 2013-03-06 8:21 ` Michael Olbrich
2013-03-06 10:10 ` Christoph Fritz
0 siblings, 1 reply; 11+ messages in thread
From: Michael Olbrich @ 2013-03-06 8:21 UTC (permalink / raw)
To: ptxdist
On Tue, Mar 05, 2013 at 08:37:02PM +0100, Christoph Fritz wrote:
>
> Signed-off-by: Christoph Fritz <chf.fritz@googlemail.com>
> ---
> rules/strongswan.in | 10 ++++++++
> rules/strongswan.make | 62 +++++++++++++++++++++++++++++++++++++++++++++++++
> 2 files changed, 72 insertions(+)
> create mode 100644 rules/strongswan.in
> create mode 100644 rules/strongswan.make
>
> diff --git a/rules/strongswan.in b/rules/strongswan.in
> new file mode 100644
> index 0000000..1e93801
> --- /dev/null
> +++ b/rules/strongswan.in
> @@ -0,0 +1,10 @@
> +## SECTION=networking
> +
> +config STRONGSWAN
> + bool
> + prompt "strongswan"
> + help
> + strongSwan is a complete IPsec implementation.
> + Please keep in mind to configure the kernel accordingly to fulfill
> + strongSwan's needs. See 'Required Kernel Modules' here:
> + http://wiki.strongswan.org/projects/strongswan/wiki/KernelModules
> diff --git a/rules/strongswan.make b/rules/strongswan.make
> new file mode 100644
> index 0000000..9c82672
> --- /dev/null
> +++ b/rules/strongswan.make
> @@ -0,0 +1,62 @@
> +# -*-makefile-*-
> +#
> +# Copyright (C) 2013 by Christoph Fritz <chf.fritz@googlemail.com>
> +#
> +#
> +# See CREDITS for details about who has contributed to this project.
> +#
> +# For further information about the PTXdist project and license conditions
> +# see the README file.
> +#
> +
> +#
> +# We provide this package
> +#
> +PACKAGES-$(PTXCONF_STRONGSWAN) += strongswan
> +
> +#
> +# Paths and names
> +#
> +STRONGSWAN_VERSION := 5.0.2
> +STRONGSWAN_MD5 := 77dc16443fd141f46183d3a4f60986ef
> +STRONGSWAN := strongswan-$(STRONGSWAN_VERSION)
> +STRONGSWAN_SUFFIX := tar.bz2
> +STRONGSWAN_URL := http://download.strongswan.org/$(STRONGSWAN).$(STRONGSWAN_SUFFIX)
> +STRONGSWAN_SOURCE := $(SRCDIR)/$(STRONGSWAN).$(STRONGSWAN_SUFFIX)
> +STRONGSWAN_DIR := $(BUILDDIR)/$(STRONGSWAN)
> +STRONGSWAN_LICENSE := GPL
> +
> +# ----------------------------------------------------------------------------
> +# Prepare
> +# ----------------------------------------------------------------------------
> +
> +STRONGSWAN_CONF_TOOL := autoconf
> +STRONGSWAN_CONF_OPT := \
> + $(CROSS_AUTOCONF_USR) \
> + --with-ipseclibdir=/usr/lib
I'm not sure if you misunderstood something, but I didn't mean that you
should remove the configure options.
You should explicitly specify all the options from the "Optional Features"
section from "./configure --help".
A good starting point usually is to add a kconfig options for all features
that have external dependencies (don't forget the 'select' in
strongswan.in) and choose a reasonable default for all others.
It's also a good idea to run "readelf -d <binary>" to check if you missed
any dependencies.
Michael
> +
> +# ----------------------------------------------------------------------------
> +# Target-Install
> +# ----------------------------------------------------------------------------
> +
> +$(STATEDIR)/strongswan.targetinstall:
> + @$(call targetinfo)
> +
> + @$(call install_init, strongswan)
> + @$(call install_fixup, strongswan,PRIORITY,optional)
> + @$(call install_fixup, strongswan,SECTION,base)
> + @$(call install_fixup, strongswan,AUTHOR,"Christoph Fritz <chf.fritz@googlemail.com>")
> + @$(call install_fixup, strongswan,DESCRIPTION,missing)
> +
> + @$(call install_tree, strongswan, 0, 0, $(STRONGSWAN_PKGDIR)/usr/sbin, /usr/sbin)
> + @$(call install_tree, strongswan, 0, 0, $(STRONGSWAN_PKGDIR)/usr/libexec, /usr/libexec)
> + @$(call install_tree, strongswan, 0, 0, $(STRONGSWAN_PKGDIR)/usr/lib, /usr/lib)
> + @$(call install_copy, strongswan, 0, 0, 0600, /etc/ipsec.d/private)
> + @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/certs)
> + @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/cacerts)
> +
> + @$(call install_finish, strongswan)
> +
> + @$(call touch)
> +
> +# vim: syntax=make
> --
> 1.7.10.4
>
>
>
>
> --
> ptxdist mailing list
> ptxdist@pengutronix.de
>
--
Pengutronix e.K. | |
Industrial Linux Solutions | http://www.pengutronix.de/ |
Peiner Str. 6-8, 31137 Hildesheim, Germany | Phone: +49-5121-206917-0 |
Amtsgericht Hildesheim, HRA 2686 | Fax: +49-5121-206917-5555 |
--
ptxdist mailing list
ptxdist@pengutronix.de
^ permalink raw reply [flat|nested] 11+ messages in thread
* Re: [ptxdist] [PATCH v2] strongswan: add package
2013-03-06 8:21 ` Michael Olbrich
@ 2013-03-06 10:10 ` Christoph Fritz
2013-03-06 12:50 ` Robert Schwebel
0 siblings, 1 reply; 11+ messages in thread
From: Christoph Fritz @ 2013-03-06 10:10 UTC (permalink / raw)
To: ptxdist
On Wed, 2013-03-06 at 09:21 +0100, Michael Olbrich wrote:
> On Tue, Mar 05, 2013 at 08:37:02PM +0100, Christoph Fritz wrote:
> > +# ----------------------------------------------------------------------------
> > +# Prepare
> > +# ----------------------------------------------------------------------------
> > +
> > +STRONGSWAN_CONF_TOOL := autoconf
> > +STRONGSWAN_CONF_OPT := \
> > + $(CROSS_AUTOCONF_USR) \
> > + --with-ipseclibdir=/usr/lib
>
> I'm not sure if you misunderstood something, but I didn't mean that you
> should remove the configure options.
Thanks for the notice. I got you right. But v2 of this patch is no
"preliminary testing version" any more and the configure script is doing
a fine job with a good handful of plugins to connect to enough peer
configurations.
It's a bit versatile you may think, but this fits my needs best.
> You should explicitly specify all the options from the "Optional Features"
> section from "./configure --help".
And then comment out the ones which will never be used, either by
kconfig opt-in nor opt-out?
> A good starting point usually is to add a kconfig options for all features
> that have external dependencies (don't forget the 'select' in
> strongswan.in) and choose a reasonable default for all others.
Let me reroll this.
>
> It's also a good idea to run "readelf -d <binary>" to check if you missed
> any dependencies.
I already did this by using ldd.
Thanks
-- Christoph
--
ptxdist mailing list
ptxdist@pengutronix.de
^ permalink raw reply [flat|nested] 11+ messages in thread
* Re: [ptxdist] [PATCH v2] strongswan: add package
2013-03-06 10:10 ` Christoph Fritz
@ 2013-03-06 12:50 ` Robert Schwebel
2013-03-06 22:54 ` [ptxdist] [PATCH v3] " Christoph Fritz
0 siblings, 1 reply; 11+ messages in thread
From: Robert Schwebel @ 2013-03-06 12:50 UTC (permalink / raw)
To: ptxdist
Hi Christoph,
On Wed, Mar 06, 2013 at 11:10:30AM +0100, Christoph Fritz wrote:
> > I'm not sure if you misunderstood something, but I didn't mean that you
> > should remove the configure options.
>
> Thanks for the notice. I got you right.
No :-)
> > You should explicitly specify all the options from the "Optional
> > Features" section from "./configure --help".
>
> And then comment out the ones which will never be used, either by
> kconfig opt-in nor opt-out?
No, but instead set them to the variant you have tested. The issue is
that, with a lot of configure options, not setting them explicitly means
that configure autodetects them. That may lead to different results,
i.e. based on the build order or other host influences. So you should
always specify all options - either according to the configuration, or
with a fixed value.
rsc
--
Pengutronix e.K. | |
Industrial Linux Solutions | http://www.pengutronix.de/ |
Peiner Str. 6-8, 31137 Hildesheim, Germany | Phone: +49-5121-206917-0 |
Amtsgericht Hildesheim, HRA 2686 | Fax: +49-5121-206917-5555 |
--
ptxdist mailing list
ptxdist@pengutronix.de
^ permalink raw reply [flat|nested] 11+ messages in thread
* [ptxdist] [PATCH v3] strongswan: add package
2013-03-06 12:50 ` Robert Schwebel
@ 2013-03-06 22:54 ` Christoph Fritz
2013-03-20 11:44 ` Christoph Fritz
2013-03-20 13:49 ` Michael Olbrich
0 siblings, 2 replies; 11+ messages in thread
From: Christoph Fritz @ 2013-03-06 22:54 UTC (permalink / raw)
To: ptxdist, Robert Schwebel
Signed-off-by: Christoph Fritz <chf.fritz@googlemail.com>
---
rules/strongswan.in | 46 +++++++++++
rules/strongswan.make | 217 +++++++++++++++++++++++++++++++++++++++++++++++++
2 files changed, 263 insertions(+)
create mode 100644 rules/strongswan.in
create mode 100644 rules/strongswan.make
diff --git a/rules/strongswan.in b/rules/strongswan.in
new file mode 100644
index 0000000..85c8215
--- /dev/null
+++ b/rules/strongswan.in
@@ -0,0 +1,46 @@
+## SECTION=networking
+
+menuconfig STRONGSWAN
+ bool
+ prompt "strongswan "
+ select LIBGMP
+ select LIBCURL if STRONGSWAN_LIBCURL
+ help
+ strongSwan is a complete IPsec implementation.
+ Please keep in mind to configure the kernel accordingly to fulfill
+ strongSwan's needs. See 'Required Kernel Modules' here:
+ http://wiki.strongswan.org/projects/strongswan/wiki/KernelModules
+
+if STRONGSWAN
+ config STRONGSWAN_STATIC
+ bool
+ default n
+ prompt "build static libraries"
+ help
+ Libraries will also be built statically.
+
+ config STRONGSWAN_LIBCURL
+ bool
+ default y
+ prompt "CURL fetcher plugin to fetch files"
+ help
+ If you intend to dynamically fetch Certificate Revocation Lists
+ (CRLs) from an HTTP server or as an alternative want to use
+ the Online Certificate Status Protocol (OCSP) say yes.
+
+ config STRONGSWAN_AFALG
+ bool
+ default y
+ prompt "AF_ALG crypto interface to Linux Crypto API"
+ help
+ Linux 2.6.38 introduced the AF_ALG Crypto API which makes the
+ crypto algorithms of the kernel available in userland.
+ If your strongswan configuration depends on this, be sure to
+ enable the appropriate crypto algorithm in your kernel.
+ For test configurations see af-alg-* categories here:
+ http://www.strongswan.org/uml/testresults4/index.html
+ For a list of cipher suite keywords see:
+ http://wiki.strongswan.org/projects/strongswan/wiki/IKEv2CipherSuites
+ http://wiki.strongswan.org/projects/strongswan/wiki/IKEv1CipherSuites
+endif
+
diff --git a/rules/strongswan.make b/rules/strongswan.make
new file mode 100644
index 0000000..4c78fa7
--- /dev/null
+++ b/rules/strongswan.make
@@ -0,0 +1,217 @@
+# -*-makefile-*-
+#
+# Copyright (C) 2013 by Christoph Fritz <chf.fritz@googlemail.com>
+#
+#
+# See CREDITS for details about who has contributed to this project.
+#
+# For further information about the PTXdist project and license conditions
+# see the README file.
+#
+
+#
+# We provide this package
+#
+PACKAGES-$(PTXCONF_STRONGSWAN) += strongswan
+
+#
+# Paths and names
+#
+STRONGSWAN_VERSION := 5.0.2
+STRONGSWAN_MD5 := 77dc16443fd141f46183d3a4f60986ef
+STRONGSWAN := strongswan-$(STRONGSWAN_VERSION)
+STRONGSWAN_SUFFIX := tar.bz2
+STRONGSWAN_URL := http://download.strongswan.org/$(STRONGSWAN).$(STRONGSWAN_SUFFIX)
+STRONGSWAN_SOURCE := $(SRCDIR)/$(STRONGSWAN).$(STRONGSWAN_SUFFIX)
+STRONGSWAN_DIR := $(BUILDDIR)/$(STRONGSWAN)
+STRONGSWAN_LICENSE := GPL
+
+# ----------------------------------------------------------------------------
+# Prepare
+# ----------------------------------------------------------------------------
+
+STRONGSWAN_CONF_TOOL := autoconf
+STRONGSWAN_CONF_OPT := \
+ $(CROSS_AUTOCONF_USR) \
+ --enable-aes \
+ --enable-des \
+ --disable-blowfish \
+ --enable-md5 \
+ --enable-sha1 \
+ --enable-sha2 \
+ --enable-gmp \
+ --disable-soup \
+ --disable-ldap \
+ --disable-md4 \
+ --enable-fips-prf \
+ --disable-rdrand \
+ --enable-random \
+ --enable-nonce \
+ --enable-x509 \
+ --enable-revocation \
+ --enable-constraints \
+ --enable-pubkey \
+ --enable-pkcs1 \
+ --enable-pkcs7 \
+ --enable-pkcs8 \
+ --enable-pgp \
+ --enable-dnskey \
+ --enable-pem \
+ --enable-hmac \
+ --enable-cmac \
+ --enable-xcbc \
+ --disable-test-vectors \
+ --disable-mysql \
+ --disable-sqlite \
+ --enable-stroke \
+ --disable-medsrv \
+ --disable-medcli \
+ --disable-smp \
+ --disable-sql \
+ --disable-leak-detective \
+ --disable-lock-profiler \
+ --disable-unit-tester \
+ --disable-load-tester \
+ --disable-eap-sim \
+ --disable-eap-sim-file \
+ --disable-eap-sim-pcsc \
+ --disable-eap-simaka-sql \
+ --disable-eap-simaka-pseudonym \
+ --disable-eap-simaka-reauth \
+ --disable-eap-identity \
+ --disable-eap-md5 \
+ --disable-eap-gtc \
+ --disable-eap-mschapv2 \
+ --disable-eap-tls \
+ --disable-eap-ttls \
+ --disable-eap-peap \
+ --disable-eap-tnc \
+ --disable-eap-dynamic \
+ --disable-eap-radius \
+ --enable-xauth-generic \
+ --disable-xauth-eap \
+ --disable-xauth-pam \
+ --disable-tnc-ifmap \
+ --disable-tnc-pdp \
+ --disable-tnc-imc \
+ --disable-tnc-imv \
+ --disable-tnccs-11 \
+ --disable-tnccs-20 \
+ --disable-tnccs-dynamic \
+ --disable-imc-test \
+ --disable-imv-test \
+ --disable-imc-scanner \
+ --disable-imv-scanner \
+ --disable-imc-os \
+ --disable-imv-os \
+ --disable-imc-attestation \
+ --disable-imv-attestation \
+ --enable-kernel-netlink \
+ --disable-kernel-pfkey \
+ --disable-kernel-pfroute \
+ --disable-kernel-klips \
+ --disable-libipsec \
+ --enable-socket-default \
+ --disable-socket-dynamic \
+ --disable-farp \
+ --disable-dumm \
+ --disable-fast \
+ --disable-manager \
+ --disable-mediation \
+ --disable-integrity-test \
+ --enable-load-warning \
+ --enable-ikev1 \
+ --enable-ikev2 \
+ --enable-charon \
+ --enable-tools \
+ --enable-scripts \
+ --disable-conftest \
+ --enable-updown \
+ --enable-attr \
+ --disable-attr-sql \
+ --disable-dhcp \
+ --enable-resolve \
+ --disable-padlock \
+ --disable-openssl \
+ --disable-gcrypt \
+ --disable-agent \
+ --disable-pkcs11 \
+ --disable-ctr \
+ --disable-ccm \
+ --disable-gcm \
+ --disable-addrblock \
+ --disable-unity \
+ --disable-uci \
+ --disable-android \
+ --disable-android-log \
+ --disable-maemo \
+ --disable-nm \
+ --disable-ha \
+ --disable-whitelist \
+ --disable-lookip \
+ --disable-error-notify \
+ --disable-certexpire \
+ --disable-led \
+ --disable-duplicheck \
+ --disable-coupling \
+ --disable-radattr \
+ --disable-vstr \
+ --disable-monolithic \
+ --disable-bfd-backtraces \
+ --enable-dependency-tracking \
+ --enable-shared \
+ --enable-fast-install \
+ --enable-libtool-lock \
+ --with-user=root \
+ --with-group=root
+
+ifdef PTXCONF_STRONGSWAN_STATIC
+STRONGSWAN_CONF_OPT += --enable-static
+else
+STRONGSWAN_CONF_OPT += --disable-static
+endif
+
+ifdef PTXCONF_STRONGSWAN_LIBCURL
+STRONGSWAN_CONF_OPT += --enable-curl
+else
+STRONGSWAN_CONF_OPT += --disable-curl
+endif
+
+ifdef PTXCONF_STRONGSWAN_AFALG
+STRONGSWAN_CONF_OPT += --enable-af-alg
+else
+STRONGSWAN_CONF_OPT += --disable-af-alg
+endif
+
+STRONGSWAN_CONF_OPT += --with-ipseclibdir=/usr/lib
+
+# ----------------------------------------------------------------------------
+# Target-Install
+# ----------------------------------------------------------------------------
+
+$(STATEDIR)/strongswan.targetinstall:
+ @$(call targetinfo)
+
+ @$(call install_init, strongswan)
+ @$(call install_fixup, strongswan,PRIORITY,optional)
+ @$(call install_fixup, strongswan,SECTION,base)
+ @$(call install_fixup, strongswan,AUTHOR,"Christoph Fritz <chf.fritz@googlemail.com>")
+ @$(call install_fixup, strongswan,DESCRIPTION,missing)
+
+ @$(call install_tree, strongswan, 0, 0, $(STRONGSWAN_PKGDIR)/usr/sbin, /usr/sbin)
+ @$(call install_tree, strongswan, 0, 0, $(STRONGSWAN_PKGDIR)/usr/libexec, /usr/libexec)
+ @$(call install_tree, strongswan, 0, 0, $(STRONGSWAN_PKGDIR)/usr/lib, /usr/lib)
+ @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/aacerts)
+ @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/acerts)
+ @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/cacerts)
+ @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/certs)
+ @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/crls)
+ @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/ocspcerts)
+ @$(call install_copy, strongswan, 0, 0, 0600, /etc/ipsec.d/private)
+ @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/reqs)
+
+ @$(call install_finish, strongswan)
+
+ @$(call touch)
+
+# vim: syntax=make
--
1.7.10.4
--
ptxdist mailing list
ptxdist@pengutronix.de
^ permalink raw reply [flat|nested] 11+ messages in thread
* Re: [ptxdist] [PATCH v3] strongswan: add package
2013-03-06 22:54 ` [ptxdist] [PATCH v3] " Christoph Fritz
@ 2013-03-20 11:44 ` Christoph Fritz
2013-03-20 13:49 ` Michael Olbrich
1 sibling, 0 replies; 11+ messages in thread
From: Christoph Fritz @ 2013-03-20 11:44 UTC (permalink / raw)
To: ptxdist, Michael Olbrich; +Cc: Robert Schwebel
On Wed, 2013-03-06 at 23:54 +0100, Christoph Fritz wrote:
> Signed-off-by: Christoph Fritz <chf.fritz@googlemail.com>
> ---
> rules/strongswan.in | 46 +++++++++++
> rules/strongswan.make | 217 +++++++++++++++++++++++++++++++++++++++++++++++++
> 2 files changed, 263 insertions(+)
> create mode 100644 rules/strongswan.in
> create mode 100644 rules/strongswan.make
*ping*
> diff --git a/rules/strongswan.in b/rules/strongswan.in
> new file mode 100644
> index 0000000..85c8215
> --- /dev/null
> +++ b/rules/strongswan.in
> @@ -0,0 +1,46 @@
> +## SECTION=networking
> +
> +menuconfig STRONGSWAN
> + bool
> + prompt "strongswan "
> + select LIBGMP
> + select LIBCURL if STRONGSWAN_LIBCURL
> + help
> + strongSwan is a complete IPsec implementation.
> + Please keep in mind to configure the kernel accordingly to fulfill
> + strongSwan's needs. See 'Required Kernel Modules' here:
> + http://wiki.strongswan.org/projects/strongswan/wiki/KernelModules
> +
> +if STRONGSWAN
> + config STRONGSWAN_STATIC
> + bool
> + default n
> + prompt "build static libraries"
> + help
> + Libraries will also be built statically.
> +
> + config STRONGSWAN_LIBCURL
> + bool
> + default y
> + prompt "CURL fetcher plugin to fetch files"
> + help
> + If you intend to dynamically fetch Certificate Revocation Lists
> + (CRLs) from an HTTP server or as an alternative want to use
> + the Online Certificate Status Protocol (OCSP) say yes.
> +
> + config STRONGSWAN_AFALG
> + bool
> + default y
> + prompt "AF_ALG crypto interface to Linux Crypto API"
> + help
> + Linux 2.6.38 introduced the AF_ALG Crypto API which makes the
> + crypto algorithms of the kernel available in userland.
> + If your strongswan configuration depends on this, be sure to
> + enable the appropriate crypto algorithm in your kernel.
> + For test configurations see af-alg-* categories here:
> + http://www.strongswan.org/uml/testresults4/index.html
> + For a list of cipher suite keywords see:
> + http://wiki.strongswan.org/projects/strongswan/wiki/IKEv2CipherSuites
> + http://wiki.strongswan.org/projects/strongswan/wiki/IKEv1CipherSuites
> +endif
> +
> diff --git a/rules/strongswan.make b/rules/strongswan.make
> new file mode 100644
> index 0000000..4c78fa7
> --- /dev/null
> +++ b/rules/strongswan.make
> @@ -0,0 +1,217 @@
> +# -*-makefile-*-
> +#
> +# Copyright (C) 2013 by Christoph Fritz <chf.fritz@googlemail.com>
> +#
> +#
> +# See CREDITS for details about who has contributed to this project.
> +#
> +# For further information about the PTXdist project and license conditions
> +# see the README file.
> +#
> +
> +#
> +# We provide this package
> +#
> +PACKAGES-$(PTXCONF_STRONGSWAN) += strongswan
> +
> +#
> +# Paths and names
> +#
> +STRONGSWAN_VERSION := 5.0.2
> +STRONGSWAN_MD5 := 77dc16443fd141f46183d3a4f60986ef
> +STRONGSWAN := strongswan-$(STRONGSWAN_VERSION)
> +STRONGSWAN_SUFFIX := tar.bz2
> +STRONGSWAN_URL := http://download.strongswan.org/$(STRONGSWAN).$(STRONGSWAN_SUFFIX)
> +STRONGSWAN_SOURCE := $(SRCDIR)/$(STRONGSWAN).$(STRONGSWAN_SUFFIX)
> +STRONGSWAN_DIR := $(BUILDDIR)/$(STRONGSWAN)
> +STRONGSWAN_LICENSE := GPL
> +
> +# ----------------------------------------------------------------------------
> +# Prepare
> +# ----------------------------------------------------------------------------
> +
> +STRONGSWAN_CONF_TOOL := autoconf
> +STRONGSWAN_CONF_OPT := \
> + $(CROSS_AUTOCONF_USR) \
> + --enable-aes \
> + --enable-des \
> + --disable-blowfish \
> + --enable-md5 \
> + --enable-sha1 \
> + --enable-sha2 \
> + --enable-gmp \
> + --disable-soup \
> + --disable-ldap \
> + --disable-md4 \
> + --enable-fips-prf \
> + --disable-rdrand \
> + --enable-random \
> + --enable-nonce \
> + --enable-x509 \
> + --enable-revocation \
> + --enable-constraints \
> + --enable-pubkey \
> + --enable-pkcs1 \
> + --enable-pkcs7 \
> + --enable-pkcs8 \
> + --enable-pgp \
> + --enable-dnskey \
> + --enable-pem \
> + --enable-hmac \
> + --enable-cmac \
> + --enable-xcbc \
> + --disable-test-vectors \
> + --disable-mysql \
> + --disable-sqlite \
> + --enable-stroke \
> + --disable-medsrv \
> + --disable-medcli \
> + --disable-smp \
> + --disable-sql \
> + --disable-leak-detective \
> + --disable-lock-profiler \
> + --disable-unit-tester \
> + --disable-load-tester \
> + --disable-eap-sim \
> + --disable-eap-sim-file \
> + --disable-eap-sim-pcsc \
> + --disable-eap-simaka-sql \
> + --disable-eap-simaka-pseudonym \
> + --disable-eap-simaka-reauth \
> + --disable-eap-identity \
> + --disable-eap-md5 \
> + --disable-eap-gtc \
> + --disable-eap-mschapv2 \
> + --disable-eap-tls \
> + --disable-eap-ttls \
> + --disable-eap-peap \
> + --disable-eap-tnc \
> + --disable-eap-dynamic \
> + --disable-eap-radius \
> + --enable-xauth-generic \
> + --disable-xauth-eap \
> + --disable-xauth-pam \
> + --disable-tnc-ifmap \
> + --disable-tnc-pdp \
> + --disable-tnc-imc \
> + --disable-tnc-imv \
> + --disable-tnccs-11 \
> + --disable-tnccs-20 \
> + --disable-tnccs-dynamic \
> + --disable-imc-test \
> + --disable-imv-test \
> + --disable-imc-scanner \
> + --disable-imv-scanner \
> + --disable-imc-os \
> + --disable-imv-os \
> + --disable-imc-attestation \
> + --disable-imv-attestation \
> + --enable-kernel-netlink \
> + --disable-kernel-pfkey \
> + --disable-kernel-pfroute \
> + --disable-kernel-klips \
> + --disable-libipsec \
> + --enable-socket-default \
> + --disable-socket-dynamic \
> + --disable-farp \
> + --disable-dumm \
> + --disable-fast \
> + --disable-manager \
> + --disable-mediation \
> + --disable-integrity-test \
> + --enable-load-warning \
> + --enable-ikev1 \
> + --enable-ikev2 \
> + --enable-charon \
> + --enable-tools \
> + --enable-scripts \
> + --disable-conftest \
> + --enable-updown \
> + --enable-attr \
> + --disable-attr-sql \
> + --disable-dhcp \
> + --enable-resolve \
> + --disable-padlock \
> + --disable-openssl \
> + --disable-gcrypt \
> + --disable-agent \
> + --disable-pkcs11 \
> + --disable-ctr \
> + --disable-ccm \
> + --disable-gcm \
> + --disable-addrblock \
> + --disable-unity \
> + --disable-uci \
> + --disable-android \
> + --disable-android-log \
> + --disable-maemo \
> + --disable-nm \
> + --disable-ha \
> + --disable-whitelist \
> + --disable-lookip \
> + --disable-error-notify \
> + --disable-certexpire \
> + --disable-led \
> + --disable-duplicheck \
> + --disable-coupling \
> + --disable-radattr \
> + --disable-vstr \
> + --disable-monolithic \
> + --disable-bfd-backtraces \
> + --enable-dependency-tracking \
> + --enable-shared \
> + --enable-fast-install \
> + --enable-libtool-lock \
> + --with-user=root \
> + --with-group=root
> +
> +ifdef PTXCONF_STRONGSWAN_STATIC
> +STRONGSWAN_CONF_OPT += --enable-static
> +else
> +STRONGSWAN_CONF_OPT += --disable-static
> +endif
> +
> +ifdef PTXCONF_STRONGSWAN_LIBCURL
> +STRONGSWAN_CONF_OPT += --enable-curl
> +else
> +STRONGSWAN_CONF_OPT += --disable-curl
> +endif
> +
> +ifdef PTXCONF_STRONGSWAN_AFALG
> +STRONGSWAN_CONF_OPT += --enable-af-alg
> +else
> +STRONGSWAN_CONF_OPT += --disable-af-alg
> +endif
> +
> +STRONGSWAN_CONF_OPT += --with-ipseclibdir=/usr/lib
> +
> +# ----------------------------------------------------------------------------
> +# Target-Install
> +# ----------------------------------------------------------------------------
> +
> +$(STATEDIR)/strongswan.targetinstall:
> + @$(call targetinfo)
> +
> + @$(call install_init, strongswan)
> + @$(call install_fixup, strongswan,PRIORITY,optional)
> + @$(call install_fixup, strongswan,SECTION,base)
> + @$(call install_fixup, strongswan,AUTHOR,"Christoph Fritz <chf.fritz@googlemail.com>")
> + @$(call install_fixup, strongswan,DESCRIPTION,missing)
> +
> + @$(call install_tree, strongswan, 0, 0, $(STRONGSWAN_PKGDIR)/usr/sbin, /usr/sbin)
> + @$(call install_tree, strongswan, 0, 0, $(STRONGSWAN_PKGDIR)/usr/libexec, /usr/libexec)
> + @$(call install_tree, strongswan, 0, 0, $(STRONGSWAN_PKGDIR)/usr/lib, /usr/lib)
> + @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/aacerts)
> + @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/acerts)
> + @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/cacerts)
> + @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/certs)
> + @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/crls)
> + @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/ocspcerts)
> + @$(call install_copy, strongswan, 0, 0, 0600, /etc/ipsec.d/private)
> + @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/reqs)
> +
> + @$(call install_finish, strongswan)
> +
> + @$(call touch)
> +
> +# vim: syntax=make
--
ptxdist mailing list
ptxdist@pengutronix.de
^ permalink raw reply [flat|nested] 11+ messages in thread
* Re: [ptxdist] [PATCH v3] strongswan: add package
2013-03-06 22:54 ` [ptxdist] [PATCH v3] " Christoph Fritz
2013-03-20 11:44 ` Christoph Fritz
@ 2013-03-20 13:49 ` Michael Olbrich
2013-03-26 11:21 ` [ptxdist] [PATCH v4] " Christoph Fritz
1 sibling, 1 reply; 11+ messages in thread
From: Michael Olbrich @ 2013-03-20 13:49 UTC (permalink / raw)
To: ptxdist
On Wed, Mar 06, 2013 at 11:54:02PM +0100, Christoph Fritz wrote:
>
> Signed-off-by: Christoph Fritz <chf.fritz@googlemail.com>
> ---
> rules/strongswan.in | 46 +++++++++++
> rules/strongswan.make | 217 +++++++++++++++++++++++++++++++++++++++++++++++++
> 2 files changed, 263 insertions(+)
> create mode 100644 rules/strongswan.in
> create mode 100644 rules/strongswan.make
>
> diff --git a/rules/strongswan.in b/rules/strongswan.in
> new file mode 100644
> index 0000000..85c8215
> --- /dev/null
> +++ b/rules/strongswan.in
> @@ -0,0 +1,46 @@
> +## SECTION=networking
> +
> +menuconfig STRONGSWAN
> + bool
> + prompt "strongswan "
> + select LIBGMP
> + select LIBCURL if STRONGSWAN_LIBCURL
> + help
> + strongSwan is a complete IPsec implementation.
> + Please keep in mind to configure the kernel accordingly to fulfill
> + strongSwan's needs. See 'Required Kernel Modules' here:
> + http://wiki.strongswan.org/projects/strongswan/wiki/KernelModules
> +
> +if STRONGSWAN
> + config STRONGSWAN_STATIC
> + bool
> + default n
> + prompt "build static libraries"
> + help
> + Libraries will also be built statically.
No option for this, unless there is a special need for static libraries.
Just use --disable-static
> +
> + config STRONGSWAN_LIBCURL
> + bool
> + default y
> + prompt "CURL fetcher plugin to fetch files"
> + help
> + If you intend to dynamically fetch Certificate Revocation Lists
> + (CRLs) from an HTTP server or as an alternative want to use
> + the Online Certificate Status Protocol (OCSP) say yes.
> +
> + config STRONGSWAN_AFALG
> + bool
> + default y
> + prompt "AF_ALG crypto interface to Linux Crypto API"
> + help
> + Linux 2.6.38 introduced the AF_ALG Crypto API which makes the
> + crypto algorithms of the kernel available in userland.
> + If your strongswan configuration depends on this, be sure to
> + enable the appropriate crypto algorithm in your kernel.
> + For test configurations see af-alg-* categories here:
> + http://www.strongswan.org/uml/testresults4/index.html
> + For a list of cipher suite keywords see:
> + http://wiki.strongswan.org/projects/strongswan/wiki/IKEv2CipherSuites
> + http://wiki.strongswan.org/projects/strongswan/wiki/IKEv1CipherSuites
> +endif
> +
> diff --git a/rules/strongswan.make b/rules/strongswan.make
> new file mode 100644
> index 0000000..4c78fa7
> --- /dev/null
> +++ b/rules/strongswan.make
> @@ -0,0 +1,217 @@
> +# -*-makefile-*-
> +#
> +# Copyright (C) 2013 by Christoph Fritz <chf.fritz@googlemail.com>
> +#
> +#
> +# See CREDITS for details about who has contributed to this project.
> +#
> +# For further information about the PTXdist project and license conditions
> +# see the README file.
> +#
> +
> +#
> +# We provide this package
> +#
> +PACKAGES-$(PTXCONF_STRONGSWAN) += strongswan
> +
> +#
> +# Paths and names
> +#
> +STRONGSWAN_VERSION := 5.0.2
> +STRONGSWAN_MD5 := 77dc16443fd141f46183d3a4f60986ef
> +STRONGSWAN := strongswan-$(STRONGSWAN_VERSION)
> +STRONGSWAN_SUFFIX := tar.bz2
> +STRONGSWAN_URL := http://download.strongswan.org/$(STRONGSWAN).$(STRONGSWAN_SUFFIX)
> +STRONGSWAN_SOURCE := $(SRCDIR)/$(STRONGSWAN).$(STRONGSWAN_SUFFIX)
> +STRONGSWAN_DIR := $(BUILDDIR)/$(STRONGSWAN)
> +STRONGSWAN_LICENSE := GPL
> +
> +# ----------------------------------------------------------------------------
> +# Prepare
> +# ----------------------------------------------------------------------------
> +
> +STRONGSWAN_CONF_TOOL := autoconf
> +STRONGSWAN_CONF_OPT := \
> + $(CROSS_AUTOCONF_USR) \
Please sort _exactly_ like in ./configure --help
> + --enable-aes \
> + --enable-des \
> + --disable-blowfish \
> + --enable-md5 \
> + --enable-sha1 \
> + --enable-sha2 \
> + --enable-gmp \
> + --disable-soup \
> + --disable-ldap \
> + --disable-md4 \
> + --enable-fips-prf \
> + --disable-rdrand \
> + --enable-random \
> + --enable-nonce \
> + --enable-x509 \
> + --enable-revocation \
> + --enable-constraints \
> + --enable-pubkey \
> + --enable-pkcs1 \
> + --enable-pkcs7 \
> + --enable-pkcs8 \
> + --enable-pgp \
> + --enable-dnskey \
> + --enable-pem \
> + --enable-hmac \
> + --enable-cmac \
> + --enable-xcbc \
> + --disable-test-vectors \
> + --disable-mysql \
> + --disable-sqlite \
> + --enable-stroke \
> + --disable-medsrv \
> + --disable-medcli \
> + --disable-smp \
> + --disable-sql \
> + --disable-leak-detective \
> + --disable-lock-profiler \
> + --disable-unit-tester \
> + --disable-load-tester \
> + --disable-eap-sim \
> + --disable-eap-sim-file \
> + --disable-eap-sim-pcsc \
> + --disable-eap-simaka-sql \
> + --disable-eap-simaka-pseudonym \
> + --disable-eap-simaka-reauth \
> + --disable-eap-identity \
> + --disable-eap-md5 \
> + --disable-eap-gtc \
> + --disable-eap-mschapv2 \
> + --disable-eap-tls \
> + --disable-eap-ttls \
> + --disable-eap-peap \
> + --disable-eap-tnc \
> + --disable-eap-dynamic \
> + --disable-eap-radius \
> + --enable-xauth-generic \
> + --disable-xauth-eap \
> + --disable-xauth-pam \
> + --disable-tnc-ifmap \
> + --disable-tnc-pdp \
> + --disable-tnc-imc \
> + --disable-tnc-imv \
> + --disable-tnccs-11 \
> + --disable-tnccs-20 \
> + --disable-tnccs-dynamic \
> + --disable-imc-test \
> + --disable-imv-test \
> + --disable-imc-scanner \
> + --disable-imv-scanner \
> + --disable-imc-os \
> + --disable-imv-os \
> + --disable-imc-attestation \
> + --disable-imv-attestation \
> + --enable-kernel-netlink \
> + --disable-kernel-pfkey \
> + --disable-kernel-pfroute \
> + --disable-kernel-klips \
> + --disable-libipsec \
> + --enable-socket-default \
> + --disable-socket-dynamic \
> + --disable-farp \
> + --disable-dumm \
> + --disable-fast \
> + --disable-manager \
> + --disable-mediation \
> + --disable-integrity-test \
> + --enable-load-warning \
> + --enable-ikev1 \
> + --enable-ikev2 \
> + --enable-charon \
> + --enable-tools \
> + --enable-scripts \
> + --disable-conftest \
> + --enable-updown \
> + --enable-attr \
> + --disable-attr-sql \
> + --disable-dhcp \
> + --enable-resolve \
> + --disable-padlock \
> + --disable-openssl \
> + --disable-gcrypt \
> + --disable-agent \
> + --disable-pkcs11 \
> + --disable-ctr \
> + --disable-ccm \
> + --disable-gcm \
> + --disable-addrblock \
> + --disable-unity \
> + --disable-uci \
> + --disable-android \
> + --disable-android-log \
> + --disable-maemo \
> + --disable-nm \
> + --disable-ha \
> + --disable-whitelist \
> + --disable-lookip \
> + --disable-error-notify \
> + --disable-certexpire \
> + --disable-led \
> + --disable-duplicheck \
> + --disable-coupling \
> + --disable-radattr \
> + --disable-vstr \
> + --disable-monolithic \
> + --disable-bfd-backtraces \
> + --enable-dependency-tracking \
> + --enable-shared \
> + --enable-fast-install \
> + --enable-libtool-lock \
remove these 2.
> + --with-user=root \
> + --with-group=root
> +
> +ifdef PTXCONF_STRONGSWAN_STATIC
> +STRONGSWAN_CONF_OPT += --enable-static
> +else
> +STRONGSWAN_CONF_OPT += --disable-static
> +endif
> +
> +ifdef PTXCONF_STRONGSWAN_LIBCURL
> +STRONGSWAN_CONF_OPT += --enable-curl
> +else
> +STRONGSWAN_CONF_OPT += --disable-curl
> +endif
> +
--$(call ptx/endis, PTXCONF_STRONGSWAN_LIBCURL)-curl \
> +ifdef PTXCONF_STRONGSWAN_AFALG
> +STRONGSWAN_CONF_OPT += --enable-af-alg
> +else
> +STRONGSWAN_CONF_OPT += --disable-af-alg
> +endif
--$(call ptx/endis, PTXCONF_STRONGSWAN_AFALG)-af-alg \
use these at the correct place in the list.
> +
> +STRONGSWAN_CONF_OPT += --with-ipseclibdir=/usr/lib
keep this in the list.
> +
> +# ----------------------------------------------------------------------------
> +# Target-Install
> +# ----------------------------------------------------------------------------
> +
> +$(STATEDIR)/strongswan.targetinstall:
> + @$(call targetinfo)
> +
> + @$(call install_init, strongswan)
> + @$(call install_fixup, strongswan,PRIORITY,optional)
> + @$(call install_fixup, strongswan,SECTION,base)
> + @$(call install_fixup, strongswan,AUTHOR,"Christoph Fritz <chf.fritz@googlemail.com>")
> + @$(call install_fixup, strongswan,DESCRIPTION,missing)
What about the configs in /etc?
If you do it like this, then you can provide a custom config in the BSP and
it will fall back to the file installed with the package:
@$(call install_alternative, strongswan, 0, 0, 0644, /etc/strongswan.conf)
Also, make an option and install the systemd unit. See e.g. the urshd
package for an example.
> + @$(call install_tree, strongswan, 0, 0, $(STRONGSWAN_PKGDIR)/usr/sbin, /usr/sbin)
No, this is just one file anyways. Use install copy. Also, you can use '-'
for the source if its just $(STRONGSWAN_PKGDIR)/<destination>.
> + @$(call install_tree, strongswan, 0, 0, $(STRONGSWAN_PKGDIR)/usr/libexec, /usr/libexec)
@$(call install_tree, strongswan, 0, 0, -, /usr/libexec/ipsec)
> + @$(call install_tree, strongswan, 0, 0, $(STRONGSWAN_PKGDIR)/usr/lib, /usr/lib)
No, this also installs .la files.
use install_lib for the normal libs in /usr/lib/. For the plugins make a
list and use forech. See e.g. rules/perl.make for an example.
Michael
> + @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/aacerts)
> + @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/acerts)
> + @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/cacerts)
> + @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/certs)
> + @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/crls)
> + @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/ocspcerts)
> + @$(call install_copy, strongswan, 0, 0, 0600, /etc/ipsec.d/private)
> + @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/reqs)
> +
> + @$(call install_finish, strongswan)
> +
> + @$(call touch)
> +
> +# vim: syntax=make
> --
> 1.7.10.4
>
>
>
>
> --
> ptxdist mailing list
> ptxdist@pengutronix.de
>
--
Pengutronix e.K. | |
Industrial Linux Solutions | http://www.pengutronix.de/ |
Peiner Str. 6-8, 31137 Hildesheim, Germany | Phone: +49-5121-206917-0 |
Amtsgericht Hildesheim, HRA 2686 | Fax: +49-5121-206917-5555 |
--
ptxdist mailing list
ptxdist@pengutronix.de
^ permalink raw reply [flat|nested] 11+ messages in thread
* [ptxdist] [PATCH v4] strongswan: add package
2013-03-20 13:49 ` Michael Olbrich
@ 2013-03-26 11:21 ` Christoph Fritz
2013-03-27 18:10 ` Michael Olbrich
0 siblings, 1 reply; 11+ messages in thread
From: Christoph Fritz @ 2013-03-26 11:21 UTC (permalink / raw)
To: ptxdist
Signed-off-by: Christoph Fritz <chf.fritz@googlemail.com>
---
rules/strongswan.in | 45 +++++++++
rules/strongswan.make | 257 +++++++++++++++++++++++++++++++++++++++++++++++++
2 files changed, 302 insertions(+)
create mode 100644 rules/strongswan.in
create mode 100644 rules/strongswan.make
diff --git a/rules/strongswan.in b/rules/strongswan.in
new file mode 100644
index 0000000..a609a3f
--- /dev/null
+++ b/rules/strongswan.in
@@ -0,0 +1,45 @@
+## SECTION=networking
+
+menuconfig STRONGSWAN
+ bool
+ prompt "strongswan "
+ select LIBGMP
+ select LIBCURL if STRONGSWAN_LIBCURL
+ help
+ strongSwan is a complete IPsec implementation.
+ Please keep in mind to configure the kernel accordingly to fulfill
+ strongSwan's needs. See 'Required Kernel Modules' here:
+ http://wiki.strongswan.org/projects/strongswan/wiki/KernelModules
+
+if STRONGSWAN
+ config STRONGSWAN_LIBCURL
+ bool
+ default y
+ prompt "CURL fetcher plugin to fetch files"
+ help
+ If you intend to dynamically fetch Certificate Revocation Lists
+ (CRLs) from an HTTP server or as an alternative want to use
+ the Online Certificate Status Protocol (OCSP) say yes.
+
+ config STRONGSWAN_AFALG
+ bool
+ default y
+ prompt "AF_ALG crypto interface to Linux Crypto API"
+ help
+ Linux 2.6.38 introduced the AF_ALG Crypto API which makes the
+ crypto algorithms of the kernel available in userland.
+ If your strongswan configuration depends on this, be sure to
+ enable the appropriate crypto algorithm in your kernel.
+ For test configurations see af-alg-* categories here:
+ http://www.strongswan.org/uml/testresults4/index.html
+ For a list of cipher suite keywords see:
+ http://wiki.strongswan.org/projects/strongswan/wiki/IKEv2CipherSuites
+ http://wiki.strongswan.org/projects/strongswan/wiki/IKEv1CipherSuites
+
+ config STRONGSWAN_SYSTEMD_UNIT
+ bool
+ default y
+ depends on SYSTEMD
+ prompt "install systemd service file"
+
+endif
diff --git a/rules/strongswan.make b/rules/strongswan.make
new file mode 100644
index 0000000..a6bfe4c
--- /dev/null
+++ b/rules/strongswan.make
@@ -0,0 +1,257 @@
+# -*-makefile-*-
+#
+# Copyright (C) 2013 by Christoph Fritz <chf.fritz@googlemail.com>
+#
+#
+# See CREDITS for details about who has contributed to this project.
+#
+# For further information about the PTXdist project and license conditions
+# see the README file.
+#
+
+#
+# We provide this package
+#
+PACKAGES-$(PTXCONF_STRONGSWAN) += strongswan
+
+#
+# Paths and names
+#
+STRONGSWAN_VERSION := 5.0.2
+STRONGSWAN_MD5 := 77dc16443fd141f46183d3a4f60986ef
+STRONGSWAN := strongswan-$(STRONGSWAN_VERSION)
+STRONGSWAN_SUFFIX := tar.bz2
+STRONGSWAN_URL := http://download.strongswan.org/$(STRONGSWAN).$(STRONGSWAN_SUFFIX)
+STRONGSWAN_SOURCE := $(SRCDIR)/$(STRONGSWAN).$(STRONGSWAN_SUFFIX)
+STRONGSWAN_DIR := $(BUILDDIR)/$(STRONGSWAN)
+STRONGSWAN_LICENSE := GPL
+
+# ----------------------------------------------------------------------------
+# Prepare
+# ----------------------------------------------------------------------------
+
+STRONGSWAN_CONF_TOOL := autoconf
+STRONGSWAN_CONF_OPT := \
+ $(CROSS_AUTOCONF_USR) \
+ --$(call ptx/endis, PTXCONF_STRONGSWAN_LIBCURL)-curl \
+ --disable-soup \
+ --disable-ldap \
+ --enable-aes \
+ --enable-des \
+ --disable-blowfish \
+ --disable-md4 \
+ --enable-md5 \
+ --enable-sha1 \
+ --enable-sha2 \
+ --enable-fips-prf \
+ --enable-gmp \
+ --disable-rdrand \
+ --enable-random \
+ --enable-nonce \
+ --enable-x509 \
+ --enable-revocation \
+ --enable-constraints \
+ --enable-pubkey \
+ --enable-pkcs1 \
+ --enable-pkcs7 \
+ --enable-pkcs8 \
+ --enable-pgp \
+ --enable-dnskey \
+ --enable-pem \
+ --enable-hmac \
+ --enable-cmac \
+ --enable-xcbc \
+ --$(call ptx/endis, PTXCONF_STRONGSWAN_AFALG)-af-alg \
+ --disable-test-vectors \
+ --disable-mysql \
+ --disable-sqlite \
+ --enable-stroke \
+ --disable-medsrv \
+ --disable-medcli \
+ --disable-smp \
+ --disable-sql \
+ --disable-leak-detective \
+ --disable-lock-profiler \
+ --disable-unit-tester \
+ --disable-load-tester \
+ --disable-eap-sim \
+ --disable-eap-sim-file \
+ --disable-eap-sim-pcsc \
+ --disable-eap-aka \
+ --disable-eap-aka-3gpp2 \
+ --disable-eap-simaka-sql \
+ --disable-eap-simaka-pseudonym \
+ --disable-eap-simaka-reauth \
+ --disable-eap-identity \
+ --disable-eap-md5 \
+ --disable-eap-gtc \
+ --disable-eap-mschapv2 \
+ --disable-eap-tls \
+ --disable-eap-ttls \
+ --disable-eap-peap \
+ --disable-eap-tnc \
+ --disable-eap-dynamic \
+ --disable-eap-radius \
+ --enable-xauth-generic \
+ --disable-xauth-eap \
+ --disable-xauth-pam \
+ --disable-tnc-ifmap \
+ --disable-tnc-pdp \
+ --disable-tnc-imc \
+ --disable-tnc-imv \
+ --disable-tnccs-11 \
+ --disable-tnccs-20 \
+ --disable-tnccs-dynamic \
+ --disable-imc-test \
+ --disable-imv-test \
+ --disable-imc-scanner \
+ --disable-imv-scanner \
+ --disable-imc-os \
+ --disable-imv-os \
+ --disable-imc-attestation \
+ --disable-imv-attestation \
+ --enable-kernel-netlink \
+ --disable-kernel-pfkey \
+ --disable-kernel-pfroute \
+ --disable-kernel-klips \
+ --disable-libipsec \
+ --enable-socket-default \
+ --disable-socket-dynamic \
+ --disable-farp \
+ --disable-dumm \
+ --disable-fast \
+ --disable-manager \
+ --disable-mediation \
+ --disable-integrity-test \
+ --enable-load-warning \
+ --enable-ikev1 \
+ --enable-ikev2 \
+ --enable-charon \
+ --enable-tools \
+ --enable-scripts \
+ --disable-conftest \
+ --enable-updown \
+ --enable-attr \
+ --disable-attr-sql \
+ --disable-dhcp \
+ --enable-resolve \
+ --disable-padlock \
+ --disable-openssl \
+ --disable-gcrypt \
+ --disable-agent \
+ --disable-pkcs11 \
+ --disable-ctr \
+ --disable-ccm \
+ --disable-gcm \
+ --disable-addrblock \
+ --disable-unity \
+ --disable-uci \
+ --disable-android \
+ --disable-android-log \
+ --disable-maemo \
+ --disable-nm \
+ --disable-ha \
+ --disable-whitelist \
+ --disable-lookip \
+ --disable-error-notify \
+ --disable-certexpire \
+ --disable-led \
+ --disable-duplicheck \
+ --disable-coupling \
+ --disable-radattr \
+ --disable-vstr \
+ --disable-monolithic \
+ --disable-bfd-backtraces \
+ --enable-dependency-tracking \
+ --enable-shared \
+ --disable-static \
+ --enable-fast-install \
+ --enable-libtool-lock \
+ --with-ipseclibdir=/usr/lib
+
+# ----------------------------------------------------------------------------
+# Target-Install
+# ----------------------------------------------------------------------------
+
+STRONGSWAN_PLUGINS := \
+ libstrongswan-aes.so \
+ libstrongswan-attr.so \
+ libstrongswan-cmac.so \
+ libstrongswan-constraints.so \
+ libstrongswan-des.so \
+ libstrongswan-dnskey.so \
+ libstrongswan-fips-prf.so \
+ libstrongswan-gmp.so \
+ libstrongswan-hmac.so \
+ libstrongswan-kernel-netlink.so \
+ libstrongswan-md5.so \
+ libstrongswan-nonce.so \
+ libstrongswan-pem.so \
+ libstrongswan-pgp.so \
+ libstrongswan-pkcs1.so \
+ libstrongswan-pkcs7.so \
+ libstrongswan-pkcs8.so \
+ libstrongswan-pubkey.so \
+ libstrongswan-random.so \
+ libstrongswan-resolve.so \
+ libstrongswan-revocation.so \
+ libstrongswan-sha1.so \
+ libstrongswan-sha2.so \
+ libstrongswan-socket-default.so \
+ libstrongswan-stroke.so \
+ libstrongswan-updown.so \
+ libstrongswan-x509.so \
+ libstrongswan-xauth-generic.so \
+ libstrongswan-xcbc.so
+
+ifdef PTXCONF_STRONGSWAN_LIBCUR
+ STRONGSWAN_PLUGINS += libstrongswan-curl.so
+endif
+ifdef PTXCONF_STRONGSWAN_AFALG
+ STRONGSWAN_PLUGINS += libstrongswan-af-alg.so
+endif
+
+$(STATEDIR)/strongswan.targetinstall:
+ @$(call targetinfo)
+
+ @$(call install_init, strongswan)
+ @$(call install_fixup, strongswan,PRIORITY,optional)
+ @$(call install_fixup, strongswan,SECTION,base)
+ @$(call install_fixup, strongswan,AUTHOR,"Christoph Fritz <chf.fritz@googlemail.com>")
+ @$(call install_fixup, strongswan,DESCRIPTION,missing)
+
+ @$(call install_alternative, strongswan, 0, 0, 0644, /etc/strongswan.conf)
+
+ @$(call install_copy, strongswan, 0, 0, 0755, -, /usr/sbin/ipsec)
+
+ @$(call install_tree, strongswan, 0, 0, -, /usr/libexec/ipsec)
+
+ @$(call install_lib, strongswan, 0, 0, 0644, libcharon)
+ @$(call install_lib, strongswan, 0, 0, 0644, libhydra)
+ @$(call install_lib, strongswan, 0, 0, 0644, libstrongswan)
+
+ @$(foreach plugin, $(STRONGSWAN_PLUGINS), \
+ $(call install_copy, strongswan, 0, 0, 0644, -, \
+ /usr/lib/plugins/$(plugin));)
+
+ifdef PTXCONF_STRONGSWAN_SYSTEMD_UNIT
+ @$(call install_alternative, strongswan, 0, 0, 0644, \
+ /lib/systemd/system/strongswan.service)
+ @$(call install_link, strongswan, ../strongswan.service, \
+ /lib/systemd/system/multi-user.target.wants/strongswan.service)
+endif
+
+ @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/aacerts)
+ @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/acerts)
+ @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/cacerts)
+ @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/certs)
+ @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/crls)
+ @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/ocspcerts)
+ @$(call install_copy, strongswan, 0, 0, 0600, /etc/ipsec.d/private)
+ @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/reqs)
+
+ @$(call install_finish, strongswan)
+
+ @$(call touch)
+
+# vim: syntax=make
--
1.7.10.4
--
ptxdist mailing list
ptxdist@pengutronix.de
^ permalink raw reply [flat|nested] 11+ messages in thread
* Re: [ptxdist] [PATCH v4] strongswan: add package
2013-03-26 11:21 ` [ptxdist] [PATCH v4] " Christoph Fritz
@ 2013-03-27 18:10 ` Michael Olbrich
0 siblings, 0 replies; 11+ messages in thread
From: Michael Olbrich @ 2013-03-27 18:10 UTC (permalink / raw)
To: ptxdist
On Tue, Mar 26, 2013 at 12:21:13PM +0100, Christoph Fritz wrote:
>
> Signed-off-by: Christoph Fritz <chf.fritz@googlemail.com>
Thanks, applied with small changes.
Michael
> ---
> rules/strongswan.in | 45 +++++++++
> rules/strongswan.make | 257 +++++++++++++++++++++++++++++++++++++++++++++++++
> 2 files changed, 302 insertions(+)
> create mode 100644 rules/strongswan.in
> create mode 100644 rules/strongswan.make
>
> diff --git a/rules/strongswan.in b/rules/strongswan.in
> new file mode 100644
> index 0000000..a609a3f
> --- /dev/null
> +++ b/rules/strongswan.in
> @@ -0,0 +1,45 @@
> +## SECTION=networking
> +
> +menuconfig STRONGSWAN
> + bool
> + prompt "strongswan "
> + select LIBGMP
> + select LIBCURL if STRONGSWAN_LIBCURL
> + help
> + strongSwan is a complete IPsec implementation.
> + Please keep in mind to configure the kernel accordingly to fulfill
> + strongSwan's needs. See 'Required Kernel Modules' here:
> + http://wiki.strongswan.org/projects/strongswan/wiki/KernelModules
> +
> +if STRONGSWAN
> + config STRONGSWAN_LIBCURL
> + bool
> + default y
> + prompt "CURL fetcher plugin to fetch files"
> + help
> + If you intend to dynamically fetch Certificate Revocation Lists
> + (CRLs) from an HTTP server or as an alternative want to use
> + the Online Certificate Status Protocol (OCSP) say yes.
> +
> + config STRONGSWAN_AFALG
> + bool
> + default y
> + prompt "AF_ALG crypto interface to Linux Crypto API"
> + help
> + Linux 2.6.38 introduced the AF_ALG Crypto API which makes the
> + crypto algorithms of the kernel available in userland.
> + If your strongswan configuration depends on this, be sure to
> + enable the appropriate crypto algorithm in your kernel.
> + For test configurations see af-alg-* categories here:
> + http://www.strongswan.org/uml/testresults4/index.html
> + For a list of cipher suite keywords see:
> + http://wiki.strongswan.org/projects/strongswan/wiki/IKEv2CipherSuites
> + http://wiki.strongswan.org/projects/strongswan/wiki/IKEv1CipherSuites
> +
> + config STRONGSWAN_SYSTEMD_UNIT
> + bool
> + default y
> + depends on SYSTEMD
> + prompt "install systemd service file"
> +
> +endif
> diff --git a/rules/strongswan.make b/rules/strongswan.make
> new file mode 100644
> index 0000000..a6bfe4c
> --- /dev/null
> +++ b/rules/strongswan.make
> @@ -0,0 +1,257 @@
> +# -*-makefile-*-
> +#
> +# Copyright (C) 2013 by Christoph Fritz <chf.fritz@googlemail.com>
> +#
> +#
> +# See CREDITS for details about who has contributed to this project.
> +#
> +# For further information about the PTXdist project and license conditions
> +# see the README file.
> +#
> +
> +#
> +# We provide this package
> +#
> +PACKAGES-$(PTXCONF_STRONGSWAN) += strongswan
> +
> +#
> +# Paths and names
> +#
> +STRONGSWAN_VERSION := 5.0.2
> +STRONGSWAN_MD5 := 77dc16443fd141f46183d3a4f60986ef
> +STRONGSWAN := strongswan-$(STRONGSWAN_VERSION)
> +STRONGSWAN_SUFFIX := tar.bz2
> +STRONGSWAN_URL := http://download.strongswan.org/$(STRONGSWAN).$(STRONGSWAN_SUFFIX)
> +STRONGSWAN_SOURCE := $(SRCDIR)/$(STRONGSWAN).$(STRONGSWAN_SUFFIX)
> +STRONGSWAN_DIR := $(BUILDDIR)/$(STRONGSWAN)
> +STRONGSWAN_LICENSE := GPL
> +
> +# ----------------------------------------------------------------------------
> +# Prepare
> +# ----------------------------------------------------------------------------
> +
> +STRONGSWAN_CONF_TOOL := autoconf
> +STRONGSWAN_CONF_OPT := \
> + $(CROSS_AUTOCONF_USR) \
> + --$(call ptx/endis, PTXCONF_STRONGSWAN_LIBCURL)-curl \
> + --disable-soup \
> + --disable-ldap \
> + --enable-aes \
> + --enable-des \
> + --disable-blowfish \
> + --disable-md4 \
> + --enable-md5 \
> + --enable-sha1 \
> + --enable-sha2 \
> + --enable-fips-prf \
> + --enable-gmp \
> + --disable-rdrand \
> + --enable-random \
> + --enable-nonce \
> + --enable-x509 \
> + --enable-revocation \
> + --enable-constraints \
> + --enable-pubkey \
> + --enable-pkcs1 \
> + --enable-pkcs7 \
> + --enable-pkcs8 \
> + --enable-pgp \
> + --enable-dnskey \
> + --enable-pem \
> + --enable-hmac \
> + --enable-cmac \
> + --enable-xcbc \
> + --$(call ptx/endis, PTXCONF_STRONGSWAN_AFALG)-af-alg \
> + --disable-test-vectors \
> + --disable-mysql \
> + --disable-sqlite \
> + --enable-stroke \
> + --disable-medsrv \
> + --disable-medcli \
> + --disable-smp \
> + --disable-sql \
> + --disable-leak-detective \
> + --disable-lock-profiler \
> + --disable-unit-tester \
> + --disable-load-tester \
> + --disable-eap-sim \
> + --disable-eap-sim-file \
> + --disable-eap-sim-pcsc \
> + --disable-eap-aka \
> + --disable-eap-aka-3gpp2 \
> + --disable-eap-simaka-sql \
> + --disable-eap-simaka-pseudonym \
> + --disable-eap-simaka-reauth \
> + --disable-eap-identity \
> + --disable-eap-md5 \
> + --disable-eap-gtc \
> + --disable-eap-mschapv2 \
> + --disable-eap-tls \
> + --disable-eap-ttls \
> + --disable-eap-peap \
> + --disable-eap-tnc \
> + --disable-eap-dynamic \
> + --disable-eap-radius \
> + --enable-xauth-generic \
> + --disable-xauth-eap \
> + --disable-xauth-pam \
> + --disable-tnc-ifmap \
> + --disable-tnc-pdp \
> + --disable-tnc-imc \
> + --disable-tnc-imv \
> + --disable-tnccs-11 \
> + --disable-tnccs-20 \
> + --disable-tnccs-dynamic \
> + --disable-imc-test \
> + --disable-imv-test \
> + --disable-imc-scanner \
> + --disable-imv-scanner \
> + --disable-imc-os \
> + --disable-imv-os \
> + --disable-imc-attestation \
> + --disable-imv-attestation \
> + --enable-kernel-netlink \
> + --disable-kernel-pfkey \
> + --disable-kernel-pfroute \
> + --disable-kernel-klips \
> + --disable-libipsec \
> + --enable-socket-default \
> + --disable-socket-dynamic \
> + --disable-farp \
> + --disable-dumm \
> + --disable-fast \
> + --disable-manager \
> + --disable-mediation \
> + --disable-integrity-test \
> + --enable-load-warning \
> + --enable-ikev1 \
> + --enable-ikev2 \
> + --enable-charon \
> + --enable-tools \
> + --enable-scripts \
> + --disable-conftest \
> + --enable-updown \
> + --enable-attr \
> + --disable-attr-sql \
> + --disable-dhcp \
> + --enable-resolve \
> + --disable-padlock \
> + --disable-openssl \
> + --disable-gcrypt \
> + --disable-agent \
> + --disable-pkcs11 \
> + --disable-ctr \
> + --disable-ccm \
> + --disable-gcm \
> + --disable-addrblock \
> + --disable-unity \
> + --disable-uci \
> + --disable-android \
> + --disable-android-log \
> + --disable-maemo \
> + --disable-nm \
> + --disable-ha \
> + --disable-whitelist \
> + --disable-lookip \
> + --disable-error-notify \
> + --disable-certexpire \
> + --disable-led \
> + --disable-duplicheck \
> + --disable-coupling \
> + --disable-radattr \
> + --disable-vstr \
> + --disable-monolithic \
> + --disable-bfd-backtraces \
> + --enable-dependency-tracking \
> + --enable-shared \
> + --disable-static \
> + --enable-fast-install \
> + --enable-libtool-lock \
> + --with-ipseclibdir=/usr/lib
> +
> +# ----------------------------------------------------------------------------
> +# Target-Install
> +# ----------------------------------------------------------------------------
> +
> +STRONGSWAN_PLUGINS := \
> + libstrongswan-aes.so \
> + libstrongswan-attr.so \
> + libstrongswan-cmac.so \
> + libstrongswan-constraints.so \
> + libstrongswan-des.so \
> + libstrongswan-dnskey.so \
> + libstrongswan-fips-prf.so \
> + libstrongswan-gmp.so \
> + libstrongswan-hmac.so \
> + libstrongswan-kernel-netlink.so \
> + libstrongswan-md5.so \
> + libstrongswan-nonce.so \
> + libstrongswan-pem.so \
> + libstrongswan-pgp.so \
> + libstrongswan-pkcs1.so \
> + libstrongswan-pkcs7.so \
> + libstrongswan-pkcs8.so \
> + libstrongswan-pubkey.so \
> + libstrongswan-random.so \
> + libstrongswan-resolve.so \
> + libstrongswan-revocation.so \
> + libstrongswan-sha1.so \
> + libstrongswan-sha2.so \
> + libstrongswan-socket-default.so \
> + libstrongswan-stroke.so \
> + libstrongswan-updown.so \
> + libstrongswan-x509.so \
> + libstrongswan-xauth-generic.so \
> + libstrongswan-xcbc.so
> +
> +ifdef PTXCONF_STRONGSWAN_LIBCUR
> + STRONGSWAN_PLUGINS += libstrongswan-curl.so
> +endif
> +ifdef PTXCONF_STRONGSWAN_AFALG
> + STRONGSWAN_PLUGINS += libstrongswan-af-alg.so
> +endif
> +
> +$(STATEDIR)/strongswan.targetinstall:
> + @$(call targetinfo)
> +
> + @$(call install_init, strongswan)
> + @$(call install_fixup, strongswan,PRIORITY,optional)
> + @$(call install_fixup, strongswan,SECTION,base)
> + @$(call install_fixup, strongswan,AUTHOR,"Christoph Fritz <chf.fritz@googlemail.com>")
> + @$(call install_fixup, strongswan,DESCRIPTION,missing)
> +
> + @$(call install_alternative, strongswan, 0, 0, 0644, /etc/strongswan.conf)
> +
> + @$(call install_copy, strongswan, 0, 0, 0755, -, /usr/sbin/ipsec)
> +
> + @$(call install_tree, strongswan, 0, 0, -, /usr/libexec/ipsec)
> +
> + @$(call install_lib, strongswan, 0, 0, 0644, libcharon)
> + @$(call install_lib, strongswan, 0, 0, 0644, libhydra)
> + @$(call install_lib, strongswan, 0, 0, 0644, libstrongswan)
> +
> + @$(foreach plugin, $(STRONGSWAN_PLUGINS), \
> + $(call install_copy, strongswan, 0, 0, 0644, -, \
> + /usr/lib/plugins/$(plugin));)
> +
> +ifdef PTXCONF_STRONGSWAN_SYSTEMD_UNIT
> + @$(call install_alternative, strongswan, 0, 0, 0644, \
> + /lib/systemd/system/strongswan.service)
> + @$(call install_link, strongswan, ../strongswan.service, \
> + /lib/systemd/system/multi-user.target.wants/strongswan.service)
> +endif
> +
> + @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/aacerts)
> + @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/acerts)
> + @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/cacerts)
> + @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/certs)
> + @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/crls)
> + @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/ocspcerts)
> + @$(call install_copy, strongswan, 0, 0, 0600, /etc/ipsec.d/private)
> + @$(call install_copy, strongswan, 0, 0, 0644, /etc/ipsec.d/reqs)
> +
> + @$(call install_finish, strongswan)
> +
> + @$(call touch)
> +
> +# vim: syntax=make
> --
> 1.7.10.4
>
>
>
>
> --
> ptxdist mailing list
> ptxdist@pengutronix.de
>
--
Pengutronix e.K. | |
Industrial Linux Solutions | http://www.pengutronix.de/ |
Peiner Str. 6-8, 31137 Hildesheim, Germany | Phone: +49-5121-206917-0 |
Amtsgericht Hildesheim, HRA 2686 | Fax: +49-5121-206917-5555 |
--
ptxdist mailing list
ptxdist@pengutronix.de
^ permalink raw reply [flat|nested] 11+ messages in thread
end of thread, other threads:[~2013-03-27 18:10 UTC | newest]
Thread overview: 11+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2013-02-20 21:22 [ptxdist] [PATCH] strongswan: add package Christoph Fritz
2013-03-04 17:04 ` Michael Olbrich
2013-03-05 19:37 ` [ptxdist] [PATCH v2] " Christoph Fritz
2013-03-06 8:21 ` Michael Olbrich
2013-03-06 10:10 ` Christoph Fritz
2013-03-06 12:50 ` Robert Schwebel
2013-03-06 22:54 ` [ptxdist] [PATCH v3] " Christoph Fritz
2013-03-20 11:44 ` Christoph Fritz
2013-03-20 13:49 ` Michael Olbrich
2013-03-26 11:21 ` [ptxdist] [PATCH v4] " Christoph Fritz
2013-03-27 18:10 ` Michael Olbrich
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox