Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Star 2 You must be signed in to star a gist
  • Fork 1 You must be signed in to fork a gist
  • Save ValdikSS/68baa07fbd11169b52eb to your computer and use it in GitHub Desktop.
Save ValdikSS/68baa07fbd11169b52eb to your computer and use it in GitHub Desktop.
Debian Jessie strongSwan 5.2.1 enable kernel-libipsec and xauth-noauth
--- strongswan-5.2.1/debian/rules 2014-10-27 14:36:53.659872404 +0300
+++ strongswan-5.2.1/debian/rules 2014-10-27 15:10:07.003054721 +0300
@@ -15,7 +15,7 @@
--enable-ha \
--enable-led --enable-gcrypt \
--enable-test-vectors \
- --enable-xauth-eap --enable-xauth-pam \
+ --enable-xauth-eap --enable-xauth-pam --enable-xauth-noauth \
--enable-cmd \
--enable-certexpire \
--enable-lookip \
@@ -50,7 +50,7 @@
--with-capabilities=libcap \
--enable-farp \
--enable-dhcp \
- --enable-af-alg
+ --enable-vici --enable-swanctl --enable-kernel-libipsec
endif
ifeq ($(DEB_BUILD_ARCH_OS),kfreebsd)
@@ -98,9 +98,27 @@
dh_install -p libstrongswan usr/share/strongswan/templates/config/plugins/kernel-netlink.conf
dh_install -p libstrongswan etc/strongswan.d/charon/kernel-netlink.conf
- dh_install -p libstrongswan-extra-plugins usr/lib/ipsec/plugins/libstrongswan-af-alg.so
- dh_install -p libstrongswan-extra-plugins usr/share/strongswan/templates/config/plugins/af-alg.conf
- dh_install -p libstrongswan-extra-plugins etc/strongswan.d/charon/af-alg.conf
+ dh_install -p libstrongswan usr/lib/ipsec/libipsec.so
+ dh_install -p libstrongswan usr/lib/ipsec/libipsec.so.0
+ dh_install -p libstrongswan usr/lib/ipsec/libipsec.so.0.0.0
+ dh_install -p libstrongswan usr/lib/ipsec/plugins/libstrongswan-kernel-libipsec.so
+ dh_install -p libstrongswan usr/share/strongswan/templates/config/plugins/kernel-libipsec.conf
+ dh_install -p libstrongswan etc/strongswan.d/charon/kernel-libipsec.conf
+
+ dh_install -p libstrongswan usr/lib/ipsec/libvici.so.0.0.0
+ dh_install -p libstrongswan usr/lib/ipsec/libvici.so.0
+ dh_install -p libstrongswan usr/lib/ipsec/libvici.so
+ dh_install -p libstrongswan usr/lib/ipsec/plugins/libstrongswan-vici.so
+
+ dh_install -p strongswan-starter usr/share/strongswan/templates/config/strongswan.d/swanctl.conf
+ dh_install -p strongswan-starter usr/share/strongswan/templates/config/plugins/vici.conf
+ dh_install -p strongswan-starter usr/share/man/man8/swanctl.8
+ dh_install -p strongswan-starter usr/share/man/man5/swanctl.conf.5
+ dh_install -p strongswan-starter usr/sbin/swanctl
+ dh_install -p strongswan-starter etc/swanctl/swanctl.conf
+ dh_install -p strongswan-starter etc/strongswan.d/swanctl.conf
+ dh_install -p strongswan-starter etc/strongswan.d/charon/vici.conf
+
# the systemd service file only gets generated on Linux
dh_install -p strongswan-starter lib/systemd/system/strongswan.service
endif
@@ -142,8 +160,9 @@
-Xlibstrongswan-farp.so -X farp.conf \
-Xlibstrongswan-padlock.so -X padlock.conf \
-Xlibstrongswan-rdrand.so -X rdrand.conf \
- -Xlibstrongswan-af-alg.so -X af-alg.conf \
- -Xstrongswan.service
+ -Xstrongswan.service -Xlibipsec.so \
+ -Xlibvici.so -Xlibstrongswan-vici.so \
+ -Xswanctl -Xvici.conf
# add additional files not covered by upstream makefile...
install --mode=0600 $(CURDIR)/debian/ipsec.secrets.proto $(CURDIR)/debian/strongswan-starter/etc/ipsec.secrets
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment