Age | Commit message (Collapse) | Author |
|
|
|
|
|
|
|
* debian/control:
- add Breaks/Replaces strongswan-ikev2 on libstrongswan because of moved
plugins.
|
|
* debian/rules:
- revert dropping privileges, it breaks too many setups for now and it's
not possible to disable it. reopens #529854 and closes: #680722
|
|
|
|
|
|
|
|
requires a tundev, pass the loopback interface to make it happy (thanks to Martin Willi)
|
|
daemon can be run and all libraries are private.
|
|
|
|
* debian/rules:
- and finally libcap-dev linux-any too...
- make -ikev1 linux-any since pluto can't be build on FreeBSD.
- handle non kFreeBSD more carefully closes: #640928
+ don't enable NM and Linux capabilities drop;
+ disable pluto (and xauth plugin);
+ don't enable farp and dhcp, enable kernel-pf{key,route} plugins
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* debian/strongswan-starter.postrm
- remove strongswan user on purge.
* debian/rules:
- enable gcrypt plugin. closes: #600326
* debian/libstrongswan.install:
- ship gcrypt plugin.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
tarball.
|
|
|
|
|
|
only happen on linux arches. closes: #640928
|
|
|
|
* debian/patches:
- 01_fix-manpages added, fix space in NAME section.
|
|
handled (atlhough we might want to change that later)
|
|
|
|
* debian/libstrongswan.lintian-overrides,
debian/libstrongswan-ikev2.lintian-overrides:
- override warning for hardening flags, we do use them.
|
|
|
|
|
|
|
|
* debian/rules:
- enable hardening flags with PIE and bindnow.
|
|
* debian/control
- update debhelper build-dep to 9 and add dpkg-dev 1.16.2 build-dep for
hardening support.
* debian/compat bumped to 9.
|
|
- drop destination path
- libs are in ipsec folder now
- add libradius, libtls, libtnccs and libsimaka to libstrongswan.
- add tnc-tnccs, pkcs8 and cmac plugins to libstrongswan.
|
|
* debian/control:
- update standards version to 3.9.3.
- add depend on adduser to strongswan-starter for use in maintainer
scripts.
|
|
|
|
* Non-maintainer upload.
* New upstream release.
* debian/patches:
- drop all patches, they're all included upstream now.
|
|
* Non-maintainer upload.
* Fix "package must not include /var/lock/subsys":
don't ship /var/lock/subsys but create it in the init script.
(Closes: #667764)
|
|
* Non-maintainer upload by the Security Team.
* debian/patches:
- 0001-Fix-boolean-return-value-if-an-empty-RSA-signature-i added,
backported from upstream. Fix CVE-2012-2388 (when using gmp plugin,
zero length RSA signatures are considered valid).
- 0001-Added-support-for-the-resolvconf-framework-in-resolv added,
correctly handle resolvconf-managed /etc/resolv.conf. closes: #664873
|
|
* Non-maintainer upload.
* Fix pending l10n issues. Debconf translations:
- Dutch; (Jeroen Schot). Closes: #631502
- Norwegian Bokmål, (Bjørn Steensrud). Closes: #654411
- Polish (Michał Kułach). Closes: #658125
|
|
* Non-maintainer upload.
* Drop libopensc2-dev from Build-Depends; that library is now private to
opensc and is not required at build time as it's loaded by dlopen() anyway.
(Closes: #635890)
|
|
* Non-maintainer upload.
* debian/strongswan-starter.ipsec.init: Init script should depends on
remote_fs instead of local_fs, also provide ipsec instead of vpn as
the other ipsec implementations (Closes: #629675)
* debian/patches/0001-fix-fprintf-format.patch: Fix FTBFS with gcc 4.6,
taken from upstream (Closes: #614486)
* debian/control: Tighten dependency version against libstrongswan
(Closes: #626170)
* debian/strongswan-starter.lintian-overrides, debian/rules:
Correctly set restricted permissions on /etc/ipsec.d/private/
and /var/lib/strongswan (Closes: #598827)
|