strongswan: Disable kernel-libipsec plugin, enable unity

The kernel-libipsec plugin implements IPsec in userspace
and uses TAP devices which is not recommended for being
used in production.

The unity plugin increases compatibility with Cisco Unity
endpoints.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/strongswan/strongswan.nm b/strongswan/strongswan.nm
index 3eb14621a98baead342f894f6aea79594425dd98..e861c250e8a2eae1fa7b7a35d217c033d4872ff7 100644 (file)
--- a/strongswan/strongswan.nm
+++ b/strongswan/strongswan.nm
@@ -5,7 +5,7 @@
 
 name       = strongswan
 version    = 5.3.3
-release    = 1
+release    = 2
 
 groups     = Networking/VPN
 url        = http://www.strongswan.org/
@@ -52,6 +52,7 @@ build
                --enable-ccm \
                --enable-ctr \
                --enable-gcm \
+               --enable-unity \
                --enable-xauth-eap \
                --enable-xauth-noauth \
                --enable-eap-radius \
@@ -62,8 +63,7 @@ build
                --enable-eap-identity \
                --with-capabilities=libcap \
                --enable-swanctl \
-               --enable-systemd \
-               --enable-kernel-libipsec
+               --enable-systemd
 
        if "%{DISTRO_ARCH}" == "i686"
                configure_options += --enable-padlock