summaryrefslogtreecommitdiff
path: root/debian
diff options
context:
space:
mode:
Diffstat (limited to 'debian')
-rw-r--r--debian/control1
-rw-r--r--debian/patches/02_disable-bypass-lan.patch13
-rw-r--r--debian/patches/series1
-rwxr-xr-xdebian/rules1
-rw-r--r--debian/strongswan-libcharon.install4
5 files changed, 20 insertions, 0 deletions
diff --git a/debian/control b/debian/control
index e5e09b467..1139f3ead 100644
--- a/debian/control
+++ b/debian/control
@@ -225,6 +225,7 @@ Description: strongSwan charon library
plugins:
- socket-default
- counters
+ - bypass-lan (disabled by default)
Package: strongswan-charon
Architecture: any
diff --git a/debian/patches/02_disable-bypass-lan.patch b/debian/patches/02_disable-bypass-lan.patch
new file mode 100644
index 000000000..19333714e
--- /dev/null
+++ b/debian/patches/02_disable-bypass-lan.patch
@@ -0,0 +1,13 @@
+diff --git a/conf/plugins/bypass-lan.conf b/conf/plugins/bypass-lan.conf
+index ad496db67..e470ce68e 100644
+--- a/conf/plugins/bypass-lan.conf
++++ b/conf/plugins/bypass-lan.conf
+@@ -11,7 +11,7 @@ bypass-lan {
+
+ # Whether to load the plugin. Can also be an integer to increase the
+ # priority of this plugin.
+- load = yes
++ load = no
+
+ }
+
diff --git a/debian/patches/series b/debian/patches/series
index 6d7cc1dfa..fde45f535 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -1,3 +1,4 @@
01_fix-manpages.patch
+02_disable-bypass-lan.patch
03_systemd-service.patch
04_disable-libtls-tests.patch
diff --git a/debian/rules b/debian/rules
index 6d160a9a7..8f5f922d5 100755
--- a/debian/rules
+++ b/debian/rules
@@ -6,6 +6,7 @@ export DEB_BUILD_MAINT_OPTIONS=hardening=+all
CONFIGUREARGS := --libdir=/usr/lib --libexecdir=/usr/lib \
--enable-addrblock \
--enable-agent \
+ --enable-bypass-lan \
--enable-ccm \
--enable-certexpire \
--enable-cmd \
diff --git a/debian/strongswan-libcharon.install b/debian/strongswan-libcharon.install
index 6cc9e73ae..06b4859b5 100644
--- a/debian/strongswan-libcharon.install
+++ b/debian/strongswan-libcharon.install
@@ -13,3 +13,7 @@ usr/lib/ipsec/plugins/libstrongswan-updown.so
usr/share/strongswan/templates/config/plugins/updown.conf
etc/strongswan.d/charon/updown.conf
usr/lib/ipsec/_updown
+# bypass-lan
+usr/lib/ipsec/plugins/libstrongswan-bypass-lan.so
+usr/share/strongswan/templates/config/plugins/bypass-lan.conf
+etc/strongswan.d/charon/bypass-lan.conf