From: Michael Tremer <michael.tremer@ipfire.org>
Date: Sat, 17 Oct 2015 14:38:31 +0000 (+0200)
Subject: strongswan: Disable kernel-libipsec plugin, enable unity
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=b5563ff993c041c5fc6f93cc7a4fa08188abea7e;p=ipfire-3.x.git

strongswan: Disable kernel-libipsec plugin, enable unity

The kernel-libipsec plugin implements IPsec in userspace
and uses TAP devices which is not recommended for being
used in production.

The unity plugin increases compatibility with Cisco Unity
endpoints.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/strongswan/strongswan.nm b/strongswan/strongswan.nm
index 3eb14621a..e861c250e 100644
--- a/strongswan/strongswan.nm
+++ b/strongswan/strongswan.nm
@@ -5,7 +5,7 @@
 
 name       = strongswan
 version    = 5.3.3
-release    = 1
+release    = 2
 
 groups     = Networking/VPN
 url        = http://www.strongswan.org/
@@ -52,6 +52,7 @@ build
 		--enable-ccm \
 		--enable-ctr \
 		--enable-gcm \
+		--enable-unity \
 		--enable-xauth-eap \
 		--enable-xauth-noauth \
 		--enable-eap-radius \
@@ -62,8 +63,7 @@ build
 		--enable-eap-identity \
 		--with-capabilities=libcap \
 		--enable-swanctl \
-		--enable-systemd \
-		--enable-kernel-libipsec
+		--enable-systemd
 
 	if "%{DISTRO_ARCH}" == "i686"
 		configure_options += --enable-padlock