[ptxdist] [PATCH 0/2] Strongswan is alive

[ptxdist] [PATCH 0/2] Strongswan is alive

[Bruno Thomsen]

Hi,

Strongswan is used in products that are shipping today with an expected lifetime of >10 years.
We don't use systemd so I am unaware of issues relating to that area.
This has been tested on an iMX28 processor running linux 4.14.39 and compiled with GCC 7.3.1.

/Bruno

Bruno Thomsen (2):
  strongswan: version bump 5.3.5 -> 5.6.1
  strongswan: remove staging

 rules/strongswan.in   |  8 +-------
 rules/strongswan.make | 22 ++++++++++++++++++----
 2 files changed, 19 insertions(+), 11 deletions(-)

-- 
2.17.0


_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de

[ptxdist] [PATCH 1/2] strongswan: version bump 5.3.5 -> 5.6.1

[Bruno Thomsen]

16 new configuration parameters all set as disabled.
1 configuration parameter has been removed.

libhydra has been removed, all plugins and the kernel interface have been integrated into libcharon.

Signed-off-by: Bruno Thomsen <bruno.thomsen@gmail.com>
---
 rules/strongswan.make | 22 ++++++++++++++++++----
 1 file changed, 18 insertions(+), 4 deletions(-)

diff --git a/rules/strongswan.make b/rules/strongswan.make
index 7016b64bd..c4ecce9c6 100644
--- a/rules/strongswan.make
+++ b/rules/strongswan.make
@@ -17,8 +17,8 @@ PACKAGES-$(PTXCONF_STRONGSWAN) += strongswan
 #
 # Paths and names
 #
-STRONGSWAN_VERSION	:= 5.3.5
-STRONGSWAN_MD5		:= a2f9ea185f27e7f8413d4cd2ee61efe4
+STRONGSWAN_VERSION	:= 5.6.1
+STRONGSWAN_MD5		:= cb2241f1b96c524cd15b1c0f50ed9a27
 STRONGSWAN		:= strongswan-$(STRONGSWAN_VERSION)
 STRONGSWAN_SUFFIX	:= tar.bz2
 STRONGSWAN_URL		:= https://download.strongswan.org/$(STRONGSWAN).$(STRONGSWAN_SUFFIX)
@@ -46,9 +46,12 @@ STRONGSWAN_CONF_OPT	:= \
 	--enable-gcm \
 	--disable-gcrypt \
 	--enable-gmp \
+	--disable-curve25519 \
 	--enable-hmac \
 	--disable-md4 \
 	--disable-md5 \
+	--disable-mgf1 \
+	--disable-newhope \
 	--enable-nonce \
 	--disable-ntru \
 	--$(call ptx/endis, PTXCONF_STRONGSWAN_OPENSSL)-openssl \
@@ -89,6 +92,7 @@ STRONGSWAN_CONF_OPT	:= \
 	--disable-eap-sim-file \
 	--disable-eap-sim-pcsc \
 	--disable-eap-aka \
+	--disable-eap-aka-3gpp \
 	--disable-eap-aka-3gpp2 \
 	--disable-eap-simaka-sql \
 	--disable-eap-simaka-pseudonym \
@@ -107,6 +111,7 @@ STRONGSWAN_CONF_OPT	:= \
 	--disable-ipseckey \
 	--disable-keychain \
 	--disable-pkcs11 \
+	--disable-tpm \
 	--enable-revocation \
 	--disable-whitelist \
 	--enable-xauth-generic \
@@ -132,6 +137,7 @@ STRONGSWAN_CONF_OPT	:= \
 	--disable-attr-sql \
 	--disable-dhcp \
 	--disable-osx-attr \
+	--disable-p-cscf \
 	--enable-resolve \
 	--disable-unity \
 	--disable-imc-test \
@@ -144,6 +150,8 @@ STRONGSWAN_CONF_OPT	:= \
 	--disable-imv-attestation \
 	--disable-imc-swid \
 	--disable-imv-swid \
+	--disable-imc-swima \
+	--disable-imv-swima \
 	--disable-imc-hcd \
 	--disable-imv-hcd \
 	--disable-tnc-ifmap \
@@ -154,8 +162,10 @@ STRONGSWAN_CONF_OPT	:= \
 	--disable-tnccs-20 \
 	--disable-tnccs-dynamic \
 	--disable-android-log \
+	--disable-bypass-lan \
 	--disable-certexpire \
 	--disable-connmark \
+	--disable-counters \
 	--disable-forecast \
 	--disable-duplicheck \
 	--disable-error-notify \
@@ -164,7 +174,6 @@ STRONGSWAN_CONF_OPT	:= \
 	--disable-led \
 	--disable-load-tester \
 	--disable-lookip \
-	--disable-maemo \
 	--disable-radattr \
 	--disable-systime-fix \
 	--disable-test-vectors \
@@ -175,6 +184,7 @@ STRONGSWAN_CONF_OPT	:= \
 	--disable-conftest \
 	--disable-dumm \
 	--disable-fast \
+	--disable-fuzzing \
 	--disable-libipsec \
 	--disable-manager \
 	--disable-medcli \
@@ -199,9 +209,14 @@ STRONGSWAN_CONF_OPT	:= \
 	--disable-ruby-gems-install \
 	--disable-python-eggs \
 	--disable-python-eggs-install \
+	--disable-perl-cpan \
+	--disable-perl-cpan-install \
+	--disable-tss-trousers \
+	--disable-tss-tss2 \
 	--disable-coverage \
 	--disable-leak-detective \
 	--disable-lock-profiler \
+	--disable-log-thread-ids \
 	--disable-monolithic \
 	--disable-defaults \
 	--enable-dependency-tracking \
@@ -272,7 +287,6 @@ $(STATEDIR)/strongswan.targetinstall:
 	@$(call install_tree, strongswan, 0, 0, -, /usr/libexec/ipsec)
 
 	@$(call install_lib, strongswan, 0, 0, 0644, libcharon)
-	@$(call install_lib, strongswan, 0, 0, 0644, libhydra)
 	@$(call install_lib, strongswan, 0, 0, 0644, libstrongswan)
 
 	@$(foreach plugin, $(STRONGSWAN_PLUGINS), \
-- 
2.17.0


_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de

[ptxdist] [PATCH 2/2] strongswan: remove staging

[Bruno Thomsen]

strongswan now compiles with gcc 7.3.1 from OSELAS.Toolchain 2018.02.0.

Signed-off-by: Bruno Thomsen <bruno.thomsen@gmail.com>
---
 rules/strongswan.in | 8 +-------
 1 file changed, 1 insertion(+), 7 deletions(-)

diff --git a/rules/strongswan.in b/rules/strongswan.in
index f7ed103e2..e45a95f74 100644
--- a/rules/strongswan.in
+++ b/rules/strongswan.in
@@ -1,6 +1,4 @@
-## SECTION=staging
-## old section:
-### SECTION=networking
+## SECTION=networking
 
 menuconfig STRONGSWAN
 	bool
@@ -15,10 +13,6 @@ menuconfig STRONGSWAN
 	  strongSwan's needs. See 'Required Kernel Modules' here:
 	  http://wiki.strongswan.org/projects/strongswan/wiki/KernelModules
 
-	  STAGING: remove in ptxdist-2019.04.0
-	  Old version that fails to build gcc 7.x. should be updated to a
-	  new version.
-
 if STRONGSWAN
 
 config STRONGSWAN_LIBCURL
-- 
2.17.0


_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de