summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2015-04-04Fix handling of ipsec name under systemd (#781209)Romain Francoise
We used to make the old ipsec name, which corresponds to the sysvinit init script, available via an Alias directive in the systemd service file (which follows upstream and is named strongswan.service). Unfortunately this results in a situation where the strongswan-starter postinst calls invoke-rc.d using the ipsec name before the service has been installed, and thus uses the sysvinit script instead of systemd's native unit. This results in some confusion later when the unit gets installed. To avoid this, ship a symlink in the package, this way the ipsec name is available as soon as the package has been unpacked. Thanks to Michael Biebl for the suggestion.
2015-01-05upload to unstableYves-Alexis Perez
2015-01-05Fix CVE-2014-9221Yves-Alexis Perez
* debian/patches: - debian/patches/CVE-2014-9221_modp_custom added, fix unauthenticated denial of service in IKEv2 when using custom MODP value.
2014-10-24Run the test suite only on amd64Romain Francoise
If we want to make the cut for the freeze on Nov 5th, the package needs to build on all archs right now, so let's just disable the test suite on buildds and we can experiment later...
2014-10-23Disable libtls tests again for 5.2.1-3Romain Francoise
2014-10-22Upload to unstableRomain Francoise
2014-10-22Cherry-pick 701d6ed and 1c70c6e from upstream to fix big-endian FTBFSRomain Francoise
2014-10-22Run the test suite only on amd64, i386, and s390xRomain Francoise
2014-10-22Re-enable libtls test suiteRomain Francoise
2014-10-22Update Dutch translation (#763798)Romain Francoise
2014-10-21Bump Standards-Version to 3.9.6Romain Francoise
2014-10-21Refresh patches against 5.2.1Romain Francoise
2014-10-21Upload to unstableRomain Francoise
2014-10-21Update debian/changelogRomain Francoise
2014-10-21Import upstream release 5.2.1Romain Francoise
2014-08-24Stop shipping /etc/strongswan.conf.d in libstrongswanRomain Francoise
2014-07-30Upload to unstableRomain Francoise
2014-07-28Install systemd file from debian/rulesRomain Francoise
It gets generated only on Linux, so install it from debian/rules with the rest of the arch-specific files.
2014-07-28Revert "Don't rely on pkg-config based systemd detection"Romain Francoise
This reverts commit 6e408eb31340230d4c57da34aeab640098c78d1a. Conflicts: debian/changelog
2014-07-26Use After=network.targetRomain Francoise
Primarily because otherwise the network may go down before charon gets the opportunity to send deletes on exit, and it matches what the old init script did. Note that in Debian, network.target apparently runs after ifup so the network is in most cases really up, so we don't need network-online.target. (And charon uses rtnetlink to get notified of changes anyway.)
2014-07-26Don't rely on pkg-config based systemd detectionRomain Francoise
Build-depending on systemd to get the pkg-config detection to work would obviously fail on !linux archs, so just hardcode the location of systemd system units instead…
2014-07-25Initial systemd integrationRomain Francoise
2014-07-25Remove disabled debian/patches/03_include-stdint.patchRomain Francoise
2014-07-11upload to unstableYves-Alexis Perez
2014-07-11replace tools.conf by pki.conf and scepclient.conf.Yves-Alexis Perez
* debian/strongswan-starter.install: - replace tools.conf by pki.conf and scepclient.conf.
2014-07-11debian/patches: 03_pfkey-Always-include-stdint.h dropped, included upstream.Yves-Alexis Perez
2014-07-11New upstream release.Yves-Alexis Perez
2014-07-11Merge tag 'upstream/5.2.0'Yves-Alexis Perez
Upstream version 5.2.0
2014-07-11Imported Upstream version 5.2.0Yves-Alexis Perez
2014-06-26po updateYves-Alexis Perez
* debian/po: - pt_BR.po updated, thanks Adriano Rafael Gomes. closes: #752721
2014-06-24Drop hardening-wrapper from build-dependsRomain Francoise
2014-05-25Amend build-dep on libgcrypt to 'libgcrypt20-dev | libgcrypt11-dev'Romain Francoise
2014-05-19uploadYves-Alexis Perez
2014-05-19Fix FTBFS on kFreeBSD by always including stdint.hYves-Alexis Perez
2014-05-19Add build-dep on pkg-configYves-Alexis Perez
* debian/control: - add build-dep on pkg-config.
2014-05-17uploadYves-Alexis Perez
2014-05-13Fix FTBFSYves-Alexis Perez
* debian/control: - add build-dep on libgcrypt20-dev, fix FTBFS. closes: #747796
2014-05-13Configure PGP signature check for uscanYves-Alexis Perez
* debian/watch: - add pgpsigurlmangle to get PGP signature * debian/upstream/signing-key.asc: - bootstrap keyring by adding Andreas Steffen key (0xDF42C170B34DBA77)
2014-04-19Update debian/changelogRomain Francoise
2014-04-19Disable the new libtls test suiteRomain Francoise
It appears to be too slow for some archs, although whether that is because of CPU or entropy usage is not clear.
2014-04-15Install new pki --acert man pageRomain Francoise
2014-04-15Deal with openac deletionRomain Francoise
2014-04-15debian/patches/01_fix-manpages.patch: refresh against upstreamRomain Francoise
2014-04-15Drop patches previously from upstreamRomain Francoise
2014-04-15Update debian/changelogRomain Francoise
2014-04-15debian/control: depend on iproute2 | iproute (#744832)Romain Francoise
2014-04-15Merge tag 'upstream/5.1.3'Romain Francoise
Upstream version 5.1.3 * tag 'upstream/5.1.3': Import upstream version 5.1.3
2014-04-15Import upstream version 5.1.3Romain Francoise
2014-04-08Update debian/changelogRomain Francoise
2014-04-08add CVE-2014-2338 patch from upstreamRomain Francoise