diff options
| author | Rene Mayrhofer <rene@mayrhofer.eu.org> | 2010-11-28 12:32:07 +0000 |
|---|---|---|
| committer | Rene Mayrhofer <rene@mayrhofer.eu.org> | 2010-11-28 12:32:07 +0000 |
| commit | 5a987070dfdfb0feba15700e35228f0898bf144e (patch) | |
| tree | e23f8c7dc2f6e88dfb69047d3a32383aae4b2411 /debian/rules | |
| parent | 7b8b352039efd78338a7bf451a0550644ec8a8da (diff) | |
| download | vyos-strongswan-5a987070dfdfb0feba15700e35228f0898bf144e.tar.gz vyos-strongswan-5a987070dfdfb0feba15700e35228f0898bf144e.zip | |
Document major upstream change (IKEv2 being the default now) and enable more configure options.
Diffstat (limited to 'debian/rules')
| -rwxr-xr-x | debian/rules | 12 |
1 files changed, 8 insertions, 4 deletions
diff --git a/debian/rules b/debian/rules index bb59f9848..c7253fe21 100755 --- a/debian/rules +++ b/debian/rules @@ -14,21 +14,25 @@ CONFIGUREARGS := --prefix=/usr --sysconfdir=/etc --localstatedir=/var \ --libexecdir=/usr/lib \ --enable-ldap --enable-curl \ --with-capabilities=libcap \ - --enable-smartcard \ + --enable-smartcard --enable-pkcs11 \ --with-default-pkcs11=/usr/lib/opensc-pkcs11.so \ --enable-mediation --enable-medsrv --enable-medcli \ --enable-openssl --enable-agent \ + --enable-ctr --enable-ccm --enable-gcm --enable-addrblock \ --enable-eap-radius --enable-eap-identity --enable-eap-md5 \ --enable-eap-gtc --enable-eap-aka --enable-eap-mschapv2 \ + --enable-eap-tls --enable-eap-ttls --enable-eap-tnc \ --enable-sql --enable-integrity-test \ --enable-nm --enable-ha --enable-dhcp --enable-farp \ - --enable-test-vectors + --enable-led \ + --enable-test-vectors --enable-nat-transport # --with-user=strongswan --with-group=nogroup \ # --enable-kernel-pfkey --enable-kernel-klips \ - # Could enable --enable-nat-transport, but this is actually insecure, - # so don't! # And for --enable-eap-sim we would need the library, which we don't # have right now. + # Don't --enable-cisco-quirks, because some other IPsec implementations + # (most notably the Phion one) have problems connecting when pluto + # sends these Cisco options. DEB_BUILD_ARCH_CPU ?=$(shell dpkg-architecture -qDEB_BUILD_ARCH_CPU) |