From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1Mm9lo-0001VT-3F for garchives@archives.gentoo.org; Fri, 11 Sep 2009 17:18:48 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 0CB9BE050F; Fri, 11 Sep 2009 17:18:47 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) by pigeon.gentoo.org (Postfix) with ESMTP id B55E2E050F for ; Fri, 11 Sep 2009 17:18:46 +0000 (UTC) Received: from stork.gentoo.org (stork.gentoo.org [64.127.104.133]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTP id 5C15B67211 for ; Fri, 11 Sep 2009 17:18:46 +0000 (UTC) Received: from patrick by stork.gentoo.org with local (Exim 4.69) (envelope-from ) id 1Mm9ll-0002TE-Sj for gentoo-commits@lists.gentoo.org; Fri, 11 Sep 2009 17:18:45 +0000 From: "Patrick Lauer (patrick)" To: gentoo-commits@lists.gentoo.org Reply-To: gentoo-dev@lists.gentoo.org, patrick@gentoo.org Subject: [gentoo-commits] gentoo-x86 commit in net-firewall/ipsec-tools: ChangeLog ipsec-tools-0.7.3.ebuild X-VCS-Repository: gentoo-x86 X-VCS-Files: ChangeLog ipsec-tools-0.7.3.ebuild X-VCS-Directories: net-firewall/ipsec-tools X-VCS-Committer: patrick X-VCS-Committer-Name: Patrick Lauer Content-Type: text/plain; charset=utf8 Message-Id: Sender: Patrick Lauer Date: Fri, 11 Sep 2009 17:18:45 +0000 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: quoted-printable X-Archives-Salt: 91211d2d-60b9-400c-84dd-80f7f189ba7f X-Archives-Hash: f754cab2e04c61129f3b29f748146066 patrick 09/09/11 17:18:45 Modified: ChangeLog Added: ipsec-tools-0.7.3.ebuild Log: Bump, fixes #282746 (Portage version: 2.2_rc40/cvs/Linux x86_64) Revision Changes Path 1.73 net-firewall/ipsec-tools/ChangeLog file : http://sources.gentoo.org/viewcvs.py/gentoo-x86/net-firewall/ipsec= -tools/ChangeLog?rev=3D1.73&view=3Dmarkup plain: http://sources.gentoo.org/viewcvs.py/gentoo-x86/net-firewall/ipsec= -tools/ChangeLog?rev=3D1.73&content-type=3Dtext/plain diff : http://sources.gentoo.org/viewcvs.py/gentoo-x86/net-firewall/ipsec= -tools/ChangeLog?r1=3D1.72&r2=3D1.73 Index: ChangeLog =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D RCS file: /var/cvsroot/gentoo-x86/net-firewall/ipsec-tools/ChangeLog,v retrieving revision 1.72 retrieving revision 1.73 diff -u -r1.72 -r1.73 --- ChangeLog 6 May 2009 19:12:00 -0000 1.72 +++ ChangeLog 11 Sep 2009 17:18:45 -0000 1.73 @@ -1,6 +1,11 @@ # ChangeLog for net-firewall/ipsec-tools # Copyright 1999-2009 Gentoo Foundation; Distributed under the GPL v2 -# $Header: /var/cvsroot/gentoo-x86/net-firewall/ipsec-tools/ChangeLog,v = 1.72 2009/05/06 19:12:00 a3li Exp $ +# $Header: /var/cvsroot/gentoo-x86/net-firewall/ipsec-tools/ChangeLog,v = 1.73 2009/09/11 17:18:45 patrick Exp $ + +*ipsec-tools-0.7.3 (11 Sep 2009) + + 11 Sep 2009; Patrick Lauer +ipsec-tools-0.7.3.ebu= ild: + Bump, fixes #282746 =20 06 May 2009; Alex Legler -ipsec-tools-0.6.7.ebuild, -ipsec-tools-0.7.1.ebuild: 1.1 net-firewall/ipsec-tools/ipsec-tools-0.7.3.ebuild file : http://sources.gentoo.org/viewcvs.py/gentoo-x86/net-firewall/ipsec= -tools/ipsec-tools-0.7.3.ebuild?rev=3D1.1&view=3Dmarkup plain: http://sources.gentoo.org/viewcvs.py/gentoo-x86/net-firewall/ipsec= -tools/ipsec-tools-0.7.3.ebuild?rev=3D1.1&content-type=3Dtext/plain Index: ipsec-tools-0.7.3.ebuild =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D # Copyright 1999-2009 Gentoo Foundation # Distributed under the terms of the GNU General Public License v2 # $Header: /var/cvsroot/gentoo-x86/net-firewall/ipsec-tools/ipsec-tools-0= .7.3.ebuild,v 1.1 2009/09/11 17:18:45 patrick Exp $ inherit eutils flag-o-matic autotools linux-info DESCRIPTION=3D"A port of KAME's IPsec utilities to the Linux-2.6 IPsec im= plementation" HOMEPAGE=3D"http://ipsec-tools.sourceforge.net/" SRC_URI=3D"mirror://sourceforge/${PN}/${P}.tar.bz2" LICENSE=3D"BSD" SLOT=3D"0" KEYWORDS=3D"~amd64 ~ppc ~sparc ~x86" IUSE=3D"idea ipv6 pam rc5 readline selinux ldap kerberos nat hybrid iconv= selinux" # FIXME: what is the correct syntax for ~sparc ??? DEPEND=3D"!sparc? ( >=3Dsys-kernel/linux-headers-2.6 ) readline? ( sys-libs/readline ) pam? ( sys-libs/pam ) ldap? ( net-nds/openldap ) kerberos? ( virtual/krb5 ) >=3Ddev-libs/openssl-0.9.8 iconv? ( virtual/libiconv ) selinux? ( sys-libs/libselinux )" # radius? ( net-dialup/gnuradius ) RDEPEND=3D"${DEPEND} selinux? ( sec-policy/selinux-ipsec-tools )" # {{{ kernel_check() kernel_check() { get_version if kernel_is 2 6 ; then if test "${KV_PATCH}" -ge 19 ; then # Just for kernel >=3D2.6.19 ebegin "Checking for suitable kernel configuration (Networking | Netwo= rking support | Networking options)" if use nat ; then if ! { linux_chkconfig_present NETFILTER_XT_MATCH_POLICY; } ; then ewarn "[NETFILTER_XT_MATCH_POLICY] IPsec policy match support is NOT= enabled" eerror "${P} won't compile with use nat traversal (USE=3Dnat) until = you enable NETFILTER_XT_MATCH_POLICY in your kernel" die else einfo "....[NETFILTER_XT_MATCH_POLICY] IPsec policy match support is= enabled :-)" fi fi # {{{ general stuff if ! { linux_chkconfig_present XFRM_USER; }; then ewarn "[XFRM_USER] Transformation user configuration interface is NOT= enabled." else einfo "....[XFRM_USER] Transformation user configuration interface is= enabled :-)" fi if ! { linux_chkconfig_present NET_KEY; }; then ewarn "[NET_KEY] PF_KEY sockets is NOT enabled." else einfo "....[NET_KEY] PF_KEY sockets is enabled :-)" fi # }}} # {{{ IPv4 stuff if ! { linux_chkconfig_present INET_IPCOMP; }; then ewarn "[INET_IPCOMP] IP: IPComp transformation is NOT enabled" else einfo "....[INET_IPCOMP] IP: IPComp transformation is enabled :-)" fi if ! { linux_chkconfig_present INET_AH; }; then ewarn "[INET_AH] AH Transformation is NOT enabled." else einfo "....[INET_AH] AH Transformation is enabled :-)" fi if ! { linux_chkconfig_present INET_ESP; }; then ewarn "[INET_ESP] ESP Transformation is NOT enabled." else einfo "....[INET_ESP] ESP Transformation is enabled :-)" fi if ! { linux_chkconfig_present INET_XFRM_MODE_TRANSPORT; }; then ewarn "[INET_XFRM_MODE_TRANSPORT] IP: IPsec transport mode is NOT ena= bled." else einfo "....[INET_XFRM_MODE_TRANSPORT] IP: IPsec transport mode is ena= bled :-)" fi if ! { linux_chkconfig_present INET_XFRM_MODE_TUNNEL; }; then ewarn "[INET_XFRM_MODE_TUNNEL] IP: IPsec tunnel mode is NOT enabled." else einfo "....[INET_XFRM_MODE_TUNNEL] IP: IPsec tunnel mode is enabled := -)" fi if ! { linux_chkconfig_present INET_XFRM_MODE_BEET; }; then ewarn "[INET_XFRM_MODE_BEET] IP: IPsec BEET mode is NOT enabled." else einfo "....[INET_XFRM_MODE_BEET] IP: IPsec BEET mode is enabled :-)" fi # }}} # {{{ IPv6 stuff if use ipv6 ; then if ! { linux_chkconfig_present INET6_IPCOMP; }; then ewarn "[INET6_IPCOMP] IPv6: IPComp transformation is NOT enabled" else einfo "....[INET6_IPCOMP] IPv6: IPComp transformation is enabled :-)= " fi if ! { linux_chkconfig_present INET6_AH; }; then ewarn "[INET6_AH] IPv6: AH Transformation is NOT enabled." else einfo "....[INET6_AH] IPv6: AH Transformation is enabled :-)" fi if ! { linux_chkconfig_present INET6_ESP; }; then ewarn "[INET6_ESP] IPv6: ESP Transformation is NOT enabled." else einfo "....[INET6_ESP] IPv6: ESP Transformation is enabled :-)" fi if ! { linux_chkconfig_present INET6_XFRM_MODE_TRANSPORT; }; then ewarn "[INET6_XFRM_MODE_TRANSPORT] IPv6: IPsec transport mode is NOT= enabled." else einfo "....[INET6_XFRM_MODE_TRANSPORT] IPv6: IPsec transport mode is= enabled :-)" fi if ! { linux_chkconfig_present INET6_XFRM_MODE_TUNNEL; }; then ewarn "[INET6_XFRM_MODE_TUNNEL] IPv6: IPsec tunnel mode is NOT enabl= ed." else einfo "....[INET6_XFRM_MODE_TUNNEL] IPv6: IPsec tunnel mode is enabl= ed :-)" fi if ! { linux_chkconfig_present INET6_XFRM_MODE_BEET; }; then ewarn "[INET6_XFRM_MODE_BEET] IPv6: IPsec BEET mode is NOT enabled." else einfo "....[INET6_XFRM_MODE_BEET] IPv6: IPsec BEET mode is enabled := -)" fi if ! { linux_chkconfig_present CRYPTO_NULL; }; then ewarn "[CRYPTO_NULL] Crypto: NULL algorithm is NOT enabled" else einfo "....[CRYPTO_NULL] Cyrpto: Crypto NULL algorithm enabled :-)" fi fi # }}} eend $? fi fi } # }}} src_unpack() { unpack ${A} cd "${S}" # fix for bug #76741 sed -i 's:#include ::' src/racoon/pfkey.c src/setkey/setke= y.c # fix for bug #124813 sed -i 's:-Werror::g' "${S}"/configure.ac AT_M4DIR=3D"${S}" eautoreconf epunt_cxx } src_compile() { # fix for bug #61025 filter-flags -march=3Dc3 kernel_check myconf=3D"--with-kernel-headers=3D${KV_DIR}/include \ --enable-dependency-tracking \ --enable-dpd \ --enable-frag \ --enable-stats \ --enable-fastquit \ --enable-stats \ --enable-adminport \ $(use_enable ipv6) \ $(use_enable rc5) \ $(use_enable idea) \ $(use_with readline) $(use_enable kerberos gssapi) \ $(use_with ldap libldap) \ $(use_with pam libpam)" # we do not want broken-natt from the kernel # myconf=3D"${myconf} $(use_enable broken-natt)" use nat && myconf=3D"${myconf} --enable-natt --enable-natt-versions=3Dye= s" # we only need security-context when using selinux myconf=3D"${myconf} $(use_enable selinux security-context)" # enable mode-cfg and xauth support if use pam; then myconf=3D"${myconf} --enable-hybrid" else myconf=3D"${myconf} $(use_enable hybrid)" fi # dev-libs/libiconv is hard masked #use iconv && myconf=3D"${myconf} $(use_with iconv libiconv)" # the default (/usr/include/openssl/) is OK for Gentoo, leave it # myconf=3D"${myconf} $(use_with ssl openssl )" # No way to get it compiling with freeradius or gnuradius # We would need libradius which only exists on FreeBSD # See bug #77369 #myconf=3D"${myconf} --enable-samode-unspec" econf ${myconf} || die emake -j1 || die } src_install() { emake DESTDIR=3D"${D}" install || die keepdir /var/lib/racoon newconfd "${FILESDIR}"/racoon.conf.d racoon newinitd "${FILESDIR}"/racoon.init.d racoon dodoc ChangeLog README NEWS dodoc src/racoon/samples/* dodoc src/racoon/doc/* docinto roadwarrior dodoc src/racoon/samples/roadwarrior/* docinto roadwarrior/client dodoc src/racoon/samples/roadwarrior/client/* docinto roadwarrior/server dodoc src/racoon/samples/roadwarrior/server/* docinto setkey dodoc src/setkey/sample.cf dodir /etc/racoon # RFC are only available from CVS for the moment, see einfo below #docinto "rfc" #dodoc ${S}/src/racoon/rfc/* } pkg_postinst() { if use nat; then elog elog " You have enabled the nat traversal functionnality." elog " Nat versions wich are enabled by default are 00,02,rfc" elog " you can find those drafts in the CVS repository:" elog "cvs -d anoncvs@anoncvs.netbsd.org:/cvsroot co ipsec-tools" elog elog "If you feel brave enough and you know what you are" elog "doing, you can consider emerging this ebuild" elog "with" elog "EXTRA_ECONF=3D\"--enable-natt-versions=3D08,07,06\"" elog fi; if use ldap; then elog elog " You have enabled ldap support with {$PN}." elog " The man page does NOT contain any information on it yet." elog " Consider to use a more recent version or CVS" elog fi; elog elog "Please have a look in /usr/share/doc/${P} and visit" elog "http://www.netbsd.org/Documentation/network/ipsec/" elog "to find a lot of information on how to configure this great tool." elog } # vim: set foldmethod=3Dmarker nowrap :