From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Mon, 05 Dec 2022 09:57:22 +0100 Received: from metis.ext.pengutronix.de ([2001:67c:670:201:290:27ff:fe1d:cc33]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1p27Ht-00BTTa-J6 for lore@lore.pengutronix.de; Mon, 05 Dec 2022 09:57:22 +0100 Received: from localhost ([127.0.0.1] helo=metis.ext.pengutronix.de) by metis.ext.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1p27Ht-0006Lk-Cs; Mon, 05 Dec 2022 09:57:21 +0100 Received: from mail-lj1-x231.google.com ([2a00:1450:4864:20::231]) by metis.ext.pengutronix.de with esmtps (TLS1.3:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.92) (envelope-from ) id 1p27Hd-0006Cd-6Q for ptxdist@pengutronix.de; Mon, 05 Dec 2022 09:57:06 +0100 Received: by mail-lj1-x231.google.com with SMTP id x11so12736750ljh.7 for ; Mon, 05 Dec 2022 00:57:05 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to; bh=FVhhWbghdUd20xXhdVAQK4Hrc84SRE0LNBC0V66LdrU=; b=LSnCOrIOrW7yyuuatJBrtYZVKVBPGuiZ4NDsfBP4MEIWRuc3HiEqijNnHq9FCFu4lS vM3J5FHGzRB7AvrzbNFXalv9foD42tkKGLGE+OklUAU0/7y1On/WP0PwHsEGAc46TWEq g7MCB4239txqtRCQNgacaedR1b2hqveGqFjy+RBQ+zDBAB3KT+GXE0ZeZTSVpKrMZ5Zu fJIZej4SzT2NgOdRWlXIEP/hh+ulqPTigSn/reCNqs1N7D3YIfsHF1bMqAVslb+QBrGF M8VNx6eipraERd5nRXYzE2A097L5cim+Kns88txci3vS0AK5cPKAFMCEvkU9x7NH2Jmm /a5w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=FVhhWbghdUd20xXhdVAQK4Hrc84SRE0LNBC0V66LdrU=; b=7+Q9asCpZGjeovfZ/MBqko4hK4iuFxNhBfY0MaJFSE+GB095IzoxWg09iViRpopIdy XU2hVrXOiO/9Asa6v5Z9h24URGxyo3eYpxe4YrGo1awmlZUI+Lb2abSS1p2nurSIf8fg 0SOvKtaWFjzIS1wRlY6xa8M73L3s8tXpguej+sYP1NIzUenGd62cukxKGNKpNGJd8hCH vxN0Nu28xwBxReSGt8QnQyC8w2RbGBh7xG9W7uSZ7///JK4LiohWQTjNhFDTfHBy2nSq 543b1OWt6xXMIlWJVL8xoFykMOEV/wwO6Mxl3RM9QXJjNOU1y8ZuAb2cUGsEBr7NTeID Y91Q== X-Gm-Message-State: ANoB5pmhXVmpT3YjKHoWybn3SBqsMstIePhHx3qDsisFs8/Onafm0nE6 nwisBInBs6+UyQbMJ1SESaYrywaY5Oo= X-Google-Smtp-Source: AA0mqf4MJbzHsNGu7j2W0qPJCnnefG23lUYPHkniYvqnK1965gkYRlHWOqarap7TTmKDPsSc4maUEw== X-Received: by 2002:a2e:968b:0:b0:27a:76e:748f with SMTP id q11-20020a2e968b000000b0027a076e748fmr209301lji.467.1670230623800; Mon, 05 Dec 2022 00:57:03 -0800 (PST) Received: from laped.devtools.kamstrup.dk ([185.181.22.18]) by smtp.googlemail.com with ESMTPSA id w6-20020a194906000000b00492c463526dsm2068146lfa.186.2022.12.05.00.57.03 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 05 Dec 2022 00:57:03 -0800 (PST) From: Lars Pedersen To: ptxdist@pengutronix.de Date: Mon, 5 Dec 2022 09:56:44 +0100 Message-Id: <20221205085644.221422-2-lapeddk@gmail.com> X-Mailer: git-send-email 2.38.1 In-Reply-To: <20221205085644.221422-1-lapeddk@gmail.com> References: <20221205085644.221422-1-lapeddk@gmail.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.ext.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-2.2 required=4.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FREEMAIL_FROM, RCVD_IN_DNSWL_NONE,SPF_HELO_NONE,SPF_PASS autolearn=ham autolearn_force=no version=3.4.2 Subject: [ptxdist] [PATCH 2/2] strongswan: version bump 5.9.6 -> 5.9.8 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Cc: Lars Pedersen Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.ext.pengutronix.de); SAEximRunCond expanded to false Configure options: * scepclient deprecated and removed * Disabled AddressSanitizer (--disable-asan) * New --with-python-sys-prefix unspecified for GNU default values * New --with-python_prefix unspecified for GNU default values * New --with-python_exec_prefix unspecified for GNU default values * Disabled extended compiler warnings (--disable-warnings) because of compile error: (OSELAS.Toolchain-2021.07.0) cmac.c: In function 'derive_key': cmac.c:236:36: error: writing 1 byte into a region of size 0 [-Werror=stringop-overflow=] 236 | rb.ptr[rb.len - 1] = 0x87; | ~~~~~~~~~~~~~~~~~~~^~~~~~ cc1: all warnings being treated as errors Plugins: * Fixed missing plugin targetinstall of libstrongswan-acert.so * Enabled mgf1 since swanctl and starting strongswan gave following error: plugin 'mgf1': failed to load - mgf1_plugin_create not found and no plugin file available Signed-off-by: Lars Pedersen --- rules/strongswan.make | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/rules/strongswan.make b/rules/strongswan.make index 07a7ade73..f8e8236a5 100644 --- a/rules/strongswan.make +++ b/rules/strongswan.make @@ -15,8 +15,8 @@ PACKAGES-$(PTXCONF_STRONGSWAN) += strongswan # # Paths and names # -STRONGSWAN_VERSION := 5.9.6 -STRONGSWAN_MD5 := 0eeb13eda09fb34e9ab5e2bfcfab1211 +STRONGSWAN_VERSION := 5.9.8 +STRONGSWAN_MD5 := f46b0d3e7aed88824650d0721c887443 STRONGSWAN := strongswan-$(STRONGSWAN_VERSION) STRONGSWAN_SUFFIX := tar.bz2 STRONGSWAN_URL := https://download.strongswan.org/$(STRONGSWAN).$(STRONGSWAN_SUFFIX) @@ -54,7 +54,7 @@ STRONGSWAN_CONF_OPT := \ --enable-hmac \ --disable-md4 \ --disable-md5 \ - --disable-mgf1 \ + --enable-mgf1 \ --disable-newhope \ --enable-nonce \ --disable-ntru \ @@ -194,7 +194,6 @@ STRONGSWAN_CONF_OPT := \ --disable-medsrv \ --disable-nm \ --enable-pki \ - --$(call ptx/disen, PTXCONF_STRONGSWAN_SWANCTL)-scepclient \ --enable-scripts \ --disable-svc \ --$(call ptx/endis, PTXCONF_STRONGSWAN_SYSTEMD_UNIT)-systemd \ @@ -224,6 +223,8 @@ STRONGSWAN_CONF_OPT := \ --enable-kdf \ --enable-dependency-tracking \ --enable-shared \ + --disable-warnings \ + --disable-asan \ --$(call ptx/endis, PTXCONF_GLOBAL_SELINUX)-selinux \ --$(call ptx/endis, PTXCONF_STRONGSWAN_SWANCTL)-swanctl \ --with-ipseclibdir=/usr/lib \ @@ -236,6 +237,7 @@ STRONGSWAN_LDFLAGS := -Wl,-rpath,/usr/lib/plugins # ---------------------------------------------------------------------------- STRONGSWAN_PLUGINS := \ + libstrongswan-acert.so \ libstrongswan-aes.so \ libstrongswan-attr.so \ libstrongswan-cmac.so \ @@ -247,6 +249,7 @@ STRONGSWAN_PLUGINS := \ libstrongswan-hmac.so \ libstrongswan-kdf.so \ libstrongswan-kernel-netlink.so \ + libstrongswan-mgf1.so \ libstrongswan-nonce.so \ libstrongswan-pem.so \ libstrongswan-pgp.so \ -- 2.38.1