added ITA Scanner IMC/IMV pair which detects open server ports on TNC clients

[thirdparty/strongswan.git] / testing / scripts / build-umlrootfs

diff --git a/testing/scripts/build-umlrootfs b/testing/scripts/build-umlrootfs
index 369a158b68ae012e3e6aae613565f75342de9359..75fe5c69f07fac634bbf5a4b6e204c8a72dcff01 100755 (executable)
--- a/testing/scripts/build-umlrootfs
+++ b/testing/scripts/build-umlrootfs
@@ -13,8 +13,6 @@
 # WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
 # or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
 # for more details.
-#
-# RCSID $Id: build-umlrootfs,v 1.11 2006/01/08 22:29:56 as Exp $
 
 DIR=`dirname $0`
 
@@ -129,11 +127,11 @@ echo "ln -sf /usr/share/zoneinfo/${TZUML} /etc/localtime" >> $INSTALLSHELL
 echo "cd /root/${STRONGSWANVERSION}" >> $INSTALLSHELL
 echo -n "./configure --sysconfdir=/etc" >> $INSTALLSHELL
 echo -n " --with-random-device=/dev/urandom" >> $INSTALLSHELL
-echo -n " --enable-integrity-test" >> $INSTALLSHELL
+echo -n " --disable-load-warning" >> $INSTALLSHELL
 
 if [ "$USE_LIBCURL" = "yes" ]
 then
-    echo -n " --enable-http" >> $INSTALLSHELL
+    echo -n " --enable-curl" >> $INSTALLSHELL
 fi
 
 if [ "$USE_LDAP" = "yes" ]
@@ -141,12 +139,216 @@ then
     echo -n " --enable-ldap" >> $INSTALLSHELL
 fi
 
+if [ "$USE_EAP_AKA" = "yes" ]
+then
+    echo -n " --enable-eap-aka" >> $INSTALLSHELL
+    echo -n " --enable-eap-aka-3gpp2" >> $INSTALLSHELL
+fi
+
+if [ "$USE_EAP_SIM" = "yes" ]
+then
+    echo -n " --enable-eap-sim" >> $INSTALLSHELL
+    echo -n " --enable-eap-sim-file" >> $INSTALLSHELL
+fi
+
+if [ "$USE_EAP_MD5" = "yes" ]
+then
+    echo -n " --enable-eap-md5" >> $INSTALLSHELL
+fi
+
+if [ "$USE_EAP_MSCHAPV2" = "yes" ]
+then
+    echo -n " --enable-md4" >> $INSTALLSHELL
+    echo -n " --enable-eap-mschapv2" >> $INSTALLSHELL
+fi
+
+if [ "$USE_EAP_IDENTITY" = "yes" ]
+then
+    echo -n " --enable-eap-identity" >> $INSTALLSHELL
+fi
+
+if [ "$USE_EAP_RADIUS" = "yes" ]
+then
+    echo -n " --enable-eap-radius" >> $INSTALLSHELL
+fi
+
+if [ "$USE_EAP_TLS" = "yes" ]
+then
+    echo -n " --enable-eap-tls" >> $INSTALLSHELL
+fi
+
+if [ "$USE_EAP_TTLS" = "yes" ]
+then
+    echo -n " --enable-eap-ttls" >> $INSTALLSHELL
+fi
+
+if [ "$USE_EAP_PEAP" = "yes" ]
+then
+    echo -n " --enable-eap-peap" >> $INSTALLSHELL
+fi
+
+if [ "$USE_EAP_TNC" = "yes" ]
+then
+    echo -n " --enable-eap-tnc" >> $INSTALLSHELL
+fi
+
+if [ "$USE_TNC_IMC" = "yes" ]
+then
+    echo -n " --enable-tnc-imc" >> $INSTALLSHELL
+fi
+
+if [ "$USE_TNC_IMV" = "yes" ]
+then
+    echo -n " --enable-tnc-imv" >> $INSTALLSHELL
+fi
+
+if [ "$USE_TNCCS_11" = "yes" ]
+then
+    echo -n " --enable-tnccs-11" >> $INSTALLSHELL
+fi
+
+if [ "$USE_TNCCS_20" = "yes" ]
+then
+    echo -n " --enable-tnccs-20" >> $INSTALLSHELL
+fi
+
+if [ "$USE_TNCCS_DYNAMIC" = "yes" ]
+then
+    echo -n " --enable-tnccs-dynamic" >> $INSTALLSHELL
+fi
+
+if [ "$USE_IMC_TEST" = "yes" ]
+then
+    echo -n " --enable-imc-test" >> $INSTALLSHELL
+fi
+
+if [ "$USE_IMV_TEST" = "yes" ]
+then
+    echo -n " --enable-imv-test" >> $INSTALLSHELL
+fi
+
+if [ "$USE_IMC_SCANNER" = "yes" ]
+then
+    echo -n " --enable-imc-scanner" >> $INSTALLSHELL
+fi
+
+if [ "$USE_IMV_SCANNER" = "yes" ]
+then
+    echo -n " --enable-imv-scanner" >> $INSTALLSHELL
+fi
+
+if [ "$USE_SQL" = "yes" ]
+then
+    echo -n " --enable-sql --enable-sqlite" >> $INSTALLSHELL
+    fi
+
+if [ "$USE_MEDIATION" = "yes" ]
+then
+    echo -n " --enable-mediation" >> $INSTALLSHELL
+fi
+
+if [ "$USE_OPENSSL" = "yes" ]
+then
+    echo -n " --enable-openssl" >> $INSTALLSHELL
+fi
+
+if [ "$USE_BLOWFISH" = "yes" ]
+then
+    echo -n " --enable-blowfish" >> $INSTALLSHELL
+fi
+
+if [ "$USE_KERNEL_PFKEY" = "yes" ]
+then
+    echo -n " --enable-kernel-pfkey" >> $INSTALLSHELL
+fi
+  
+if [ "$USE_INTEGRITY_TEST" = "yes" ]
+then
+    echo -n " --enable-integrity-test" >> $INSTALLSHELL
+fi
+
 if [ "$USE_LEAK_DETECTIVE" = "yes" ]
 then
     echo -n " --enable-leak-detective" >> $INSTALLSHELL
 fi
+
+if [ "$USE_LOAD_TESTER" = "yes" ]
+then
+    echo -n " --enable-load-tester" >> $INSTALLSHELL
+fi
+
+if [ "$USE_TEST_VECTORS" = "yes" ]
+then
+    echo -n " --enable-test-vectors" >> $INSTALLSHELL
+fi
+
+if [ "$USE_GCRYPT" = "yes" ]
+then
+    echo -n " --enable-gcrypt" >> $INSTALLSHELL
+fi
+
+if [ "$USE_SOCKET_DEFAULT" = "yes" ]
+then
+    echo -n " --enable-socket-default" >> $INSTALLSHELL
+fi
+
+if [ "$USE_SOCKET_DYNAMIC" = "yes" ]
+then
+    echo -n " --enable-socket-dynamic" >> $INSTALLSHELL
+fi
+
+if [ "$USE_DHCP" = "yes" ]
+then
+    echo -n " --enable-dhcp" >> $INSTALLSHELL
+fi
+
+if [ "$USE_FARP" = "yes" ]
+then
+    echo -n " --enable-farp" >> $INSTALLSHELL
+fi
+
+if [ "$USE_ADDRBLOCK" = "yes" ]
+then
+    echo -n " --enable-addrblock" >> $INSTALLSHELL
+fi
+
+if [ "$USE_CTR" = "yes" ]
+then
+    echo -n " --enable-ctr" >> $INSTALLSHELL
+fi
+
+if [ "$USE_CCM" = "yes" ]
+then
+    echo -n " --enable-ccm" >> $INSTALLSHELL
+fi
+
+if [ "$USE_GCM" = "yes" ]
+then
+    echo -n " --enable-gcm" >> $INSTALLSHELL
+fi
+
+if [ "$USE_HA" = "yes" ]
+then
+    echo -n " --enable-ha" >> $INSTALLSHELL
+fi
+
+if [ "$USE_AF_ALG" = "yes" ]
+then
+    echo -n " --enable-af-alg" >> $INSTALLSHELL
+fi
+
+if [ "$USE_WHITELIST" = "yes" ]
+then
+    echo -n " --enable-whitelist" >> $INSTALLSHELL
+fi
+
+if [ "$USE_CISCO_QUIRKS" = "yes" ]
+then
+    echo -n " --enable-cisco-quirks" >> $INSTALLSHELL
+fi
+
 echo "" >> $INSTALLSHELL
-echo "make" >> $INSTALLSHELL
+echo "make -j" >> $INSTALLSHELL
 echo "make install" >> $INSTALLSHELL
 echo "ldconfig" >> $INSTALLSHELL
 
@@ -155,6 +357,12 @@ chroot $LOOPDIR /bin/bash /install.sh >> $LOGFILE 2>&1
 rm -f $INSTALLSHELL
 cgecho "done"
 
+######################################################
+# copying default /etc/ipsec.d/tables.sql to the root filesystem
+#
+cecho " * Copying '$HOSTCONFIGDIR/default/etc/ipsec.d/tables.sql' to the root filesystem"
+cp -fp $HOSTCONFIGDIR/default/etc/ipsec.d/tables.sql $LOOPDIR/etc/ipsec.d/tables.sql
+
 ######################################################
 # copying the host's ssh public key
 #