sysctl.conf: Turn on hard- and symlink protection

[ipfire-3.x.git] / strongswan / strongswan.nm

diff --git a/strongswan/strongswan.nm b/strongswan/strongswan.nm
index 18b305a07a3091dfd9c3e9e3bdd0db74d723f2d5..dfd1335a7280c4ef7c13c82942906d04956195cb 100644 (file)
--- a/strongswan/strongswan.nm
+++ b/strongswan/strongswan.nm
@@ -4,7 +4,7 @@
 ###############################################################################
 
 name       = strongswan
-version    = 5.0.1
+version    = 5.8.0
 release    = 1
 
 groups     = Networking/VPN
@@ -24,10 +24,13 @@ sources    = %{thisapp}.tar.bz2
 
 build
        requires
+               autoconf
+               automake
                bison
                flex
                gmp-devel
                gperf
+               ldns-devel
                libcap-devel
                libcurl-devel
                libgcrypt-devel
@@ -36,33 +39,65 @@ build
                openssl-devel
                perl
                sqlite-devel
-               systemd-devel
-               systemd-units
+               systemd-devel >= 221-2
+               unbound-devel >= 1.7
        end
 
        configure_options += \
+               --disable-static \
+               --with-ipseclibdir=%{libdir}/ipsec \
                --enable-curl \
                --enable-ldap \
                --enable-openssl \
                --enable-sqlite \
                --enable-gcrypt \
-               --with-capabilities=libcap
+               --enable-ccm \
+               --enable-ctr \
+               --enable-gcm \
+               --enable-chapoly \
+               --enable-unity \
+               --enable-xauth-eap \
+               --enable-xauth-noauth \
+               --enable-eap-radius \
+               --enable-eap-tls \
+               --enable-eap-ttls \
+               --enable-eap-peap \
+               --enable-eap-mschapv2 \
+               --enable-eap-identity \
+               --disable-blowfish \
+               --disable-rc2 \
+               --with-capabilities=libcap \
+               --enable-unbound \
+               --enable-systemd \
+               --disable-charon \
+               --disable-stroke \
+               --disable-scepclient
 
        if "%{DISTRO_ARCH}" == "i686"
                configure_options += --enable-padlock
        end
 
-       test
-               make check
-       end
+       # The testsuite does not run through in the build system
+       # on ARM systems.
+       #test
+       #       make check
+       #end
 
        install_cmds
-               # Make the shared libraries available to the runtime linker.
-               # (RPATH issues, whatever...)
-               cd %{BUILDROOT}%{libdir}
-               for lib in libcharon.so.0 libhydra.so.0 libstrongswan.so.0; do
-                       ln -svf ipsec/${lib} .
-               done
+               # Install network settings
+               install -v -m 644 %{DIR_SOURCE}/network.conf \
+                       %{BUILDROOT}%{sysconfdir}/strongswan.d/
+
+               # Create directory for connections
+               mkdir -pv %{BUILDROOT}%{sysconfdir}/swanctl/connections
+               echo "include connections/*.conf" > \
+                       %{BUILDROOT}%{sysconfdir}/swanctl/swanctl.conf
+
+               # Drop unneeded files.
+               rm -rvf %{BUILDROOT}%{libdir}/ipsec/lib*.so
+
+               # Move libraries to libdir.
+               mv %{BUILDROOT}%{libdir}/ipsec/lib*.so.* %{BUILDROOT}%{libdir}
        end
 end