net-vpn/libreswan: add 4.14
Signed-off-by: Hans de Graaff <graaff@gentoo.org>
This commit is contained in:
Hans de Graaff
parent
7b17887768
commit
ca405c167f
|
|
@ -1 +1,2 @@
|
|||
DIST libreswan-4.12.tar.gz 3718440 BLAKE2B f17b79b3ae51d8d2823ace258b899a1c6a40b9967bcf343872dc31be68ef1dede4a9195617149e895e3f11fe62d27dabab3e01c0ad2adcb668540a1c4cbc02d3 SHA512 3a7f5ea5d97da357a8979a8807694a316d42ccc5f9c7b5867041abf2b9316ff8428f24cf307b6b6073c191896c0417f137abf78f9903aecde5e1ee1182577ce0
|
||||
DIST libreswan-4.14.tar.gz 3721106 BLAKE2B 29c0beb8bb1d1fc3bc4fe5d229dd24ac74ca3f173c24bdf6982813f06aa1bad4572c8c472a414d58bdd5699b4fba33499ab5db7c55870c78314b39c213fc0e89 SHA512 fb4c4dc426530614d308a7c4f5d21123a166b1ad652f66393b45d4987a3e2be8e8bc135e7eedfe1c014db962b70f08108757f876e27cd9e7739a79764c6d4f2d
|
||||
|
|
|
|||
|
|
@ -0,0 +1,136 @@
|
|||
# Copyright 1999-2024 Gentoo Authors
|
||||
# Distributed under the terms of the GNU General Public License v2
|
||||
|
||||
EAPI=8
|
||||
|
||||
inherit systemd flag-o-matic toolchain-funcs tmpfiles
|
||||
|
||||
DESCRIPTION="IPsec implementation for Linux, fork of Openswan"
|
||||
HOMEPAGE="https://libreswan.org/"
|
||||
SRC_URI="https://download.libreswan.org/${P}.tar.gz"
|
||||
|
||||
LICENSE="GPL-2 BSD-4 RSA DES"
|
||||
SLOT="0"
|
||||
KEYWORDS="~amd64 ~arm ~arm64 ~ppc ~x86"
|
||||
IUSE="caps curl dnssec ldap networkmanager pam seccomp selinux systemd test"
|
||||
RESTRICT="!test? ( test )"
|
||||
|
||||
DEPEND="
|
||||
dev-libs/gmp:0=
|
||||
dev-libs/libevent:0=
|
||||
dev-libs/nspr
|
||||
>=dev-libs/nss-3.42
|
||||
>=sys-kernel/linux-headers-4.19
|
||||
virtual/libcrypt:=
|
||||
caps? ( sys-libs/libcap-ng )
|
||||
curl? ( net-misc/curl )
|
||||
dnssec? ( >=net-dns/unbound-1.9.1-r1:= net-libs/ldns:= net-dns/dnssec-root )
|
||||
ldap? ( net-nds/openldap:= )
|
||||
pam? ( sys-libs/pam )
|
||||
seccomp? ( sys-libs/libseccomp )
|
||||
selinux? ( sys-libs/libselinux )
|
||||
systemd? ( sys-apps/systemd:0= )
|
||||
"
|
||||
BDEPEND="
|
||||
app-text/docbook-xml-dtd:4.1.2
|
||||
app-text/xmlto
|
||||
dev-libs/nss
|
||||
sys-devel/bison
|
||||
sys-devel/flex
|
||||
virtual/pkgconfig
|
||||
test? ( dev-python/setproctitle )
|
||||
"
|
||||
RDEPEND="${DEPEND}
|
||||
dev-libs/nss[utils(+)]
|
||||
sys-apps/iproute2
|
||||
!net-vpn/strongswan
|
||||
selinux? ( sec-policy/selinux-ipsec )
|
||||
"
|
||||
DEPEND+=" elibc_musl? ( sys-libs/queue-standalone )"
|
||||
|
||||
usetf() {
|
||||
usex "$1" true false
|
||||
}
|
||||
|
||||
PATCHES=( "${FILESDIR}/${PN}-4.2-ip-path.patch" )
|
||||
|
||||
src_prepare() {
|
||||
sed -i -e 's:/sbin/runscript:/sbin/openrc-run:' initsystems/openrc/ipsec.init.in || die
|
||||
sed -i -e '/^install/ s/postcheck//' -e '/^doinstall/ s/oldinitdcheck//' initsystems/systemd/Makefile || die
|
||||
default
|
||||
}
|
||||
|
||||
src_configure() {
|
||||
tc-export AR CC
|
||||
|
||||
use elibc_musl && append-cflags -DGLIBC_KERN_FLIP_HEADERS
|
||||
|
||||
export PREFIX=/usr
|
||||
export DEFAULT_DNSSEC_ROOTKEY_FILE=/etc/dnssec/icannbundle.pem
|
||||
export FINALEXAMPLECONFDIR=/usr/share/doc/${PF}
|
||||
export FINALDOCDIR=/usr/share/doc/${PF}/html
|
||||
export INITSYSTEM=$(usex systemd systemd openrc)
|
||||
export INITDDIRS=
|
||||
export INITDDIR_DEFAULT=/etc/init.d
|
||||
export USERCOMPILE=${CFLAGS}
|
||||
export USERLINK=${LDFLAGS}
|
||||
export USE_DNSSEC=$(usetf dnssec)
|
||||
export USE_LABELED_IPSEC=$(usetf selinux)
|
||||
export USE_LIBCAP_NG=$(usetf caps)
|
||||
export USE_LIBCURL=$(usetf curl)
|
||||
export USE_LINUX_AUDIT=$(usetf selinux)
|
||||
export USE_LDAP=$(usetf ldap)
|
||||
export USE_NM=$(usetf networkmanager)
|
||||
export USE_SECCOMP=$(usetf seccomp)
|
||||
export USE_SYSTEMD_WATCHDOG=$(usetf systemd)
|
||||
export SD_WATCHDOGSEC=$(usex systemd 200 0)
|
||||
export USE_AUTHPAM=$(usetf pam)
|
||||
export DEBUG_CFLAGS=
|
||||
export OPTIMIZE_CFLAGS=
|
||||
export WERROR_CFLAGS=
|
||||
}
|
||||
|
||||
src_compile() {
|
||||
emake all
|
||||
emake -C initsystems \
|
||||
INITSYSTEM=systemd \
|
||||
SYSTEMUNITDIR="$(systemd_get_systemunitdir)" \
|
||||
SYSTEMTMPFILESDIR="/usr/lib/tmpfiles.d" \
|
||||
all
|
||||
}
|
||||
|
||||
src_test() {
|
||||
: # integration tests only that require set of kvms to be set up
|
||||
}
|
||||
|
||||
src_install() {
|
||||
default
|
||||
emake -C initsystems \
|
||||
INITSYSTEM=systemd \
|
||||
SYSTEMUNITDIR="$(systemd_get_systemunitdir)" \
|
||||
SYSTEMTMPFILESDIR="/usr/lib/tmpfiles.d" \
|
||||
DESTDIR="${D}" \
|
||||
install
|
||||
|
||||
echo "include /etc/ipsec.d/*.secrets" > "${D}"/etc/ipsec.secrets
|
||||
fperms 0600 /etc/ipsec.secrets
|
||||
|
||||
keepdir /var/lib/ipsec/nss
|
||||
fperms 0700 /var/lib/ipsec/nss
|
||||
|
||||
dodoc -r docs
|
||||
|
||||
find "${D}" -type d -empty -delete || die
|
||||
}
|
||||
|
||||
pkg_postinst() {
|
||||
tmpfiles_process libreswan.conf
|
||||
|
||||
local IPSEC_CONFDIR=${ROOT}/var/lib/ipsec/nss
|
||||
if [[ ! -f ${IPSEC_CONFDIR}/cert8.db && ! -f ${IPSEC_CONFDIR}/cert9.db ]] ; then
|
||||
ebegin "Setting up NSS database in ${IPSEC_CONFDIR} with empty password"
|
||||
certutil -N -d "${IPSEC_CONFDIR}" --empty-password
|
||||
eend $?
|
||||
einfo "To set a password: certutil -W -d sql:${IPSEC_CONFDIR}"
|
||||
fi
|
||||
}
|
||||
Loading…
Reference in New Issue