2f89476ad9
This patch is based on a patch sent by Vicente Olivert Riera and commented by Arnout Vandecappelle [1]. - Bump version to 1.23 - Add a hook to fix cross-compilation - Fix license and license files - Remove patch applied upstream - Add a BR2_PACKAGE_LIBGPG_ERROR_ARCH_SUPPORTS variable - Propagate the dependencies using that variable: * package/cppcms * package/crda * package/gnupg2 - package/gcr - package/midori * package/kodi * package/libaacs * package/libassuan * package/libgcrypt * package/libgpgme * package/libksba * package/libmicrohttpd - package/janus-gateway - package/kodi - package/ola - package/systemd * package/libssh * package/libssh2 - package/php-ssh2 * package/netatalk * package/network-manager * package/ntfs-3g * package/opkg * package/php-gnupg * package/rng-tools * package/strongswan * package/vpnc [1] http://patchwork.ozlabs.org/patch/416427/ Cc: Arnout Vandecappelle <arnout@mind.be> Cc: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Jörg Krause <joerg.krause@embedded.rocks> [Thomas: - rebase on master - changing systemd no longer needed, as it no longer selects libgcrypt.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> [Maxime: - rebase on master - bump to new version - propagate dependencies to missing packages] Signed-off-by: Maxime Hadjinlian <maxime.hadjinlian@gmail.com> Reviewed-by: Romain Naour <romain.naour@gmail.com> [Thomas: - fix hash file. - change the way to handle the various arch so that it works properly for uClibc. - add nios2 arch support. - Maxime Hadjinlian learned some basic Emacs-fu to do the final fixups of this commit.] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
132 lines
3.1 KiB
Plaintext
132 lines
3.1 KiB
Plaintext
comment "strongswan needs a toolchain w/ threads, dynamic library"
|
|
depends on BR2_USE_MMU
|
|
depends on BR2_TOOLCHAIN_HAS_ATOMIC
|
|
depends on !BR2_TOOLCHAIN_HAS_THREADS || BR2_STATIC_LIBS
|
|
|
|
menuconfig BR2_PACKAGE_STRONGSWAN
|
|
bool "strongswan"
|
|
depends on BR2_USE_MMU # fork()
|
|
depends on BR2_TOOLCHAIN_HAS_THREADS
|
|
depends on BR2_TOOLCHAIN_HAS_ATOMIC
|
|
depends on !BR2_STATIC_LIBS
|
|
help
|
|
strongSwan is an OpenSource IPsec implementation for the
|
|
Linux operating system. It is based on the discontinued
|
|
FreeS/WAN project and the X.509 patch.
|
|
|
|
The focus is on:
|
|
- simplicity of configuration
|
|
- strong encryption and authentication methods
|
|
- powerful IPsec policies supporting large and complex VPN networks
|
|
|
|
strongSwan provide many plugins. Only a few are presented here.
|
|
|
|
http://www.strongswan.org/
|
|
|
|
if BR2_PACKAGE_STRONGSWAN
|
|
|
|
choice
|
|
prompt "Cryptographic backend"
|
|
default BR2_PACKAGE_STRONGSWAN_GMP
|
|
|
|
config BR2_PACKAGE_STRONGSWAN_OPENSSL
|
|
bool "OpenSSL"
|
|
select BR2_PACKAGE_OPENSSL
|
|
|
|
config BR2_PACKAGE_STRONGSWAN_GCRYPT
|
|
bool "libgcrypt"
|
|
depends on BR2_PACKAGE_LIBGPG_ERROR_ARCH_SUPPORTS # libgcrypt
|
|
select BR2_PACKAGE_LIBGCRYPT
|
|
|
|
config BR2_PACKAGE_STRONGSWAN_GMP
|
|
bool "GNU MP (libgmp)"
|
|
select BR2_PACKAGE_GMP
|
|
|
|
endchoice
|
|
|
|
config BR2_PACKAGE_STRONGSWAN_AF_ALG
|
|
bool "Enable AF_ALG crypto interface to Linux Crypto API"
|
|
|
|
config BR2_PACKAGE_STRONGSWAN_CURL
|
|
bool "Enable CURL fetcher plugin to fetch files via libcurl"
|
|
select BR2_PACKAGE_LIBCURL
|
|
|
|
config BR2_PACKAGE_STRONGSWAN_CHARON
|
|
bool "Enable the IKEv1/IKEv2 keying daemon charon"
|
|
default y
|
|
|
|
if BR2_PACKAGE_STRONGSWAN_CHARON
|
|
|
|
config BR2_PACKAGE_STRONGSWAN_TNCCS_11
|
|
bool "Enable TNCCS 1.1 protocol module"
|
|
select BR2_PACKAGE_LIBXML2
|
|
|
|
config BR2_PACKAGE_STRONGSWAN_TNCCS_20
|
|
bool "Enable TNCCS 2.0 protocol module"
|
|
|
|
config BR2_PACKAGE_STRONGSWAN_TNCCS_DYNAMIC
|
|
bool "Enable dynamic TNCCS protocol discovery module"
|
|
|
|
config BR2_PACKAGE_STRONGSWAN_EAP
|
|
bool "Enable EAP protocols"
|
|
help
|
|
Enable various EAP protocols:
|
|
- mschapv2
|
|
- tls
|
|
- ttls
|
|
- peap
|
|
- sim
|
|
- sim-file
|
|
- aka
|
|
- aka-3gpp2
|
|
- simaka-sql
|
|
- simaka-pseudonym
|
|
- simaka-reauth
|
|
- identity
|
|
- md5
|
|
- gtc
|
|
- tnc
|
|
- dynamic
|
|
- radius
|
|
|
|
if BR2_PACKAGE_STRONGSWAN_EAP
|
|
|
|
config BR2_PACKAGE_STRONGSWAN_EAP_SIM_PCSC
|
|
bool "Enable EAP-SIM smart card backend"
|
|
depends on !BR2_STATIC_LIBS # pcsc-lite
|
|
select BR2_PACKAGE_PCSC_LITE
|
|
|
|
endif
|
|
|
|
config BR2_PACKAGE_STRONGSWAN_UNITY
|
|
bool "Enables Cisco Unity extension plugin"
|
|
|
|
config BR2_PACKAGE_STRONGSWAN_STROKE
|
|
bool "Enable charons stroke configuration backend"
|
|
default y
|
|
|
|
config BR2_PACKAGE_STRONGSWAN_SQL
|
|
bool "Enable SQL database configuration backend"
|
|
depends on BR2_PACKAGE_SQLITE || BR2_PACKAGE_MYSQL
|
|
|
|
endif
|
|
|
|
config BR2_PACKAGE_STRONGSWAN_PKI
|
|
bool "Enable pki certificate utility"
|
|
default y
|
|
|
|
config BR2_PACKAGE_STRONGSWAN_SCEP
|
|
bool "Enable SCEP client tool"
|
|
|
|
config BR2_PACKAGE_STRONGSWAN_SCRIPTS
|
|
bool "Enable additional utilities (found in scripts directory)"
|
|
depends on BR2_PACKAGE_STRONGSWAN_CHARON
|
|
default y
|
|
|
|
config BR2_PACKAGE_STRONGSWAN_VICI
|
|
bool "Enable vici/swanctl"
|
|
depends on BR2_PACKAGE_STRONGSWAN_CHARON
|
|
default y
|
|
|
|
endif
|