strongswan/strongswan.nm

   1 ###############################################################################
   2 # IPFire.org    - An Open Source Firewall Solution                            #
   3 # Copyright (C) - IPFire Development Team <info@ipfire.org>                   #
   4 ###############################################################################
   5
   6 name       = strongswan
   7 version    = 5.9.8
   8 release    = 1
   9
  10 groups     = Networking/VPN
  11 url        = https://www.strongswan.org/
  12 license    = GPL
  13 summary    = IPsec (IKEv1 + IKEv2) implementation for Linux
  14
  15 description
  16         StrongSwan is a complete IPsec and IKEv1 implementation for
  17         Linux 2.4 and 2.6 kernels. It also fully supports the new IKEv2
  18         protocol with Linux 2.6 kernels. It interoperates in both IKEv1
  19         and IKEv2 mode with most other IPsec-based VPN products.
  20 end
  21
  22 source_dl  = https://download.strongswan.org/
  23
  24 build
  25         requires
  26                 autoconf
  27                 automake
  28                 bison
  29                 flex
  30                 gmp-devel
  31                 gperf
  32                 ldns-devel
  33                 libcap-devel
  34                 libcurl-devel
  35                 libgcrypt-devel
  36                 libtool
  37                 openldap-devel
  38                 openssl-devel
  39                 perl
  40                 sqlite-devel
  41                 systemd-devel >= 221-2
  42                 unbound-devel >= 1.7
  43         end
  44
  45         # strongswan cannot be compiled with -Wformat-security
  46         # because of some custom printf stuff
  47         CFLAGS += -Wno-format-security -Wno-error=format-security
  48
  49         configure_options += \
  50                 --disable-static \
  51                 --with-ipseclibdir=%{libdir}/ipsec \
  52                 --enable-curl \
  53                 --enable-ldap \
  54                 --enable-openssl \
  55                 --enable-sqlite \
  56                 --enable-gcrypt \
  57                 --enable-ccm \
  58                 --enable-ctr \
  59                 --enable-gcm \
  60                 --enable-chapoly \
  61                 --enable-unity \
  62                 --enable-xauth-eap \
  63                 --enable-xauth-noauth \
  64                 --enable-eap-radius \
  65                 --enable-eap-tls \
  66                 --enable-eap-ttls \
  67                 --enable-eap-peap \
  68                 --enable-eap-mschapv2 \
  69                 --enable-eap-identity \
  70                 --disable-blowfish \
  71                 --disable-rc2 \
  72                 --with-capabilities=libcap \
  73                 --enable-unbound \
  74                 --enable-systemd \
  75                 --disable-charon \
  76                 --disable-stroke \
  77                 --disable-warnings
  78
  79         test
  80                 LD_LIBRARY_PATH="%{DIR_APP}/src/libstrongswan/.libs" make check || :
  81         end
  82
  83         install_cmds
  84                 # Install network settings
  85                 install -v -m 644 %{DIR_SOURCE}/network.conf \
  86                         %{BUILDROOT}%{sysconfdir}/strongswan.d/
  87
  88                 # Create directory for connections
  89                 mkdir -pv %{BUILDROOT}%{sysconfdir}/swanctl/connections
  90                 echo "include connections/*.conf" > \
  91                         %{BUILDROOT}%{sysconfdir}/swanctl/swanctl.conf
  92         end
  93 end
  94
  95 packages
  96         package %{name}
  97                 script postin
  98                         systemctl daemon-reload >/dev/null 2>&1 || :
  99                 end
 100
 101                 script postup
 102                         systemctl daemon-reload >/dev/null 2>&1 || :
 103                         systemctl reload-or-try-restart strongswan.service >/dev/null 2>&1 || :
 104                 end
 105
 106                 script preun
 107                         systemctl disable --no-reload strongswan.service >/dev/null 2>&1 || :
 108                         systemctl stop strongswan.service >/dev/null 2>&1 || :
 109                 end
 110
 111                 script postun
 112                         systemctl daemon-reload >/dev/null 2>&1 || :
 113                 end
 114         end
 115
 116         package %{name}-debuginfo
 117                 template DEBUGINFO
 118         end
 119 end