From 4de243f5fa3cc4afc07a4f081831a0df02b8c552 Mon Sep 17 00:00:00 2001 From: Avesh Agarwal Date: Mon, 11 Mar 2013 16:02:12 -0400 Subject: [PATCH 1/2] Update to upstream release 5.0.2 - Created sub package strongswan-tnc-imcvs that provides trusted network connect's IMC and IMV funtionality. Specifically it includes PTS based IMC/IMV for TPM based remote attestation and scanner and test IMCs and IMVs. The Strongswan's IMC/IMV dynamic libraries can be used by any third party TNC Client/Server implementation possessing a standard IF-IMC/IMV interface. --- .gitignore | 1 + sources | 2 +- strongswan.spec | 66 +++++++++++++++++++++++++++++++++++++++++++++++-- 3 files changed, 66 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index efdac32..122959a 100644 --- a/.gitignore +++ b/.gitignore @@ -1,3 +1,4 @@ /strongswan-5.0.0.tar.bz2 /strongswan.spec /strongswan-5.0.1.tar.bz2 +/strongswan-5.0.2.tar.bz2 diff --git a/sources b/sources index 64ae565..2f01512 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -58fdeb49f133139a58f4d8adafc69a16 strongswan-5.0.1.tar.bz2 +77dc16443fd141f46183d3a4f60986ef strongswan-5.0.2.tar.bz2 diff --git a/strongswan.spec b/strongswan.spec index 80e9c22..56273d7 100644 --- a/strongswan.spec +++ b/strongswan.spec @@ -1,5 +1,5 @@ Name: strongswan -Version: 5.0.1 +Version: 5.0.2 Release: 1%{?dist} Summary: An OpenSource IPsec-based VPN Solution Group: System Environment/Daemons @@ -13,6 +13,7 @@ BuildRequires: openldap-devel BuildRequires: openssl-devel BuildRequires: NetworkManager-devel BuildRequires: NetworkManager-glib-devel +BuildRequires: sqlite-devel # when using autoreconf #BuildRequires: gperf #BuildRequires: flex @@ -45,6 +46,18 @@ Group: System Environment/Daemons NetworkManager plugin integrates a subset of Strongswan capabilities to NetworkManager. +%package tnc-imcvs +Summary: Trusted network connect (TNC)'s IMC/IMV fuctionality +Group: Applications/System +Requires: %{name} = %{version} +%description tnc-imcvs +This package provides Trusted Network Connect's (TNC) IMC and IMV functionality. +Specifically it includes PTS based IMC/IMV for TPM based remote attestation and +scanner and test IMCs and IMVs. The Strongswan's IMC/IMV dynamic libraries can be +used by any third party TNC Client/Server implementation possessing a standard +IF-IMC/IMV interface. + + %prep %setup -q %patch0 -p1 @@ -69,7 +82,20 @@ echo "For migration from 4.6 to 5.0 see http://wiki.strongswan.org/projects/stro --enable-eap-mschapv2 \ --enable-farp \ --enable-dhcp \ - --enable-nm + --enable-nm \ + --enable-sqlite \ + --enable-imc-test \ + --enable-imv-test \ + --enable-imc-scanner \ + --enable-imv-scanner \ + --enable-imc-attestation \ + --enable-imv-attestation \ + --enable-eap-tnc \ + --enable-tnccs-20 \ + --enable-tnc-imc \ + --enable-tnc-imv + + make %{?_smp_mflags} sed -i 's/\t/ /' src/strongswan.conf src/starter/ipsec.conf @@ -174,6 +200,33 @@ install -D -m 755 init/sysvinit/%{name} %{buildroot}/%{_initddir}/%{name} %{_mandir}/man8/%{name}_openac.8.gz %{_mandir}/man8/%{name}_scepclient.8.gz +%files tnc-imcvs +%dir %{_libdir}/%{name} +%{_libdir}/%{name}/libimcv.so.0 +%{_libdir}/%{name}/libimcv.so.0.0.0 +%{_libdir}/%{name}/libpts.so.0 +%{_libdir}/%{name}/libpts.so.0.0.0 +%{_libdir}/%{name}/libtnccs.so.0 +%{_libdir}/%{name}/libtnccs.so.0.0.0 +%dir %{_libdir}/%{name}/imcvs +%dir %{_libdir}/%{name}/imcvs/imc-attestation.so +%dir %{_libdir}/%{name}/imcvs/imc-scanner.so +%dir %{_libdir}/%{name}/imcvs/imc-test.so +%dir %{_libdir}/%{name}/imcvs/imv-attestation.so +%dir %{_libdir}/%{name}/imcvs/imv-scanner.so +%dir %{_libdir}/%{name}/imcvs/imv-test.so +%dir %{_libdir}/%{name}/plugins +%{_libdir}/%{name}/plugins/lib%{name}-pkcs7.so +%{_libdir}/%{name}/plugins/lib%{name}-sqlite.so +%{_libdir}/%{name}/plugins/lib%{name}-eap-tnc.so +%{_libdir}/%{name}/plugins/lib%{name}-tnc-imc.so +%{_libdir}/%{name}/plugins/lib%{name}-tnc-imv.so +%{_libdir}/%{name}/plugins/lib%{name}-tnc-tnccs.so +%{_libdir}/%{name}/plugins/lib%{name}-tnccs-20.so +%dir %{_libexecdir}/%{name} +%{_libexecdir}/%{name}/attest + + %files NetworkManager %{_libexecdir}/%{name}/charon-nm @@ -216,6 +269,15 @@ fi %endif %changelog +* Mon Mar 11 2013 Avesh Agarwal - 5.0.2-1 +- Update to upstream release 5.0.2 +- Created sub package strongswan-tnc-imcvs that provides trusted network + connect's IMC and IMV funtionality. Specifically it includes PTS + based IMC/IMV for TPM based remote attestation and scanner and test + IMCs and IMVs. The Strongswan's IMC/IMV dynamic libraries can be used + by any third party TNC Client/Server implementation possessing a + standard IF-IMC/IMV interface. + * Thu Oct 04 2012 Pavel Šimerda - 5.0.1-1 - Update to release 5.0.1 From d0964cb1b4308363f1edc988fc1035e14fe39fb9 Mon Sep 17 00:00:00 2001 From: Avesh Agarwal Date: Fri, 19 Apr 2013 16:29:03 -0400 Subject: [PATCH 2/2] New upstream release - Enabled curl and eap-identity plugins - Enabled support for eap-radius plugin. --- .gitignore | 1 + sources | 2 +- strongswan.spec | 19 +++++++++++++++++-- 3 files changed, 19 insertions(+), 3 deletions(-) diff --git a/.gitignore b/.gitignore index 122959a..81bf4de 100644 --- a/.gitignore +++ b/.gitignore @@ -2,3 +2,4 @@ /strongswan.spec /strongswan-5.0.1.tar.bz2 /strongswan-5.0.2.tar.bz2 +/strongswan-5.0.3.tar.bz2 diff --git a/sources b/sources index 2f01512..bb79e8d 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -77dc16443fd141f46183d3a4f60986ef strongswan-5.0.2.tar.bz2 +12e0a7a1be2ca0490c69146899e8a9bb strongswan-5.0.3.tar.bz2 diff --git a/strongswan.spec b/strongswan.spec index 56273d7..ee22645 100644 --- a/strongswan.spec +++ b/strongswan.spec @@ -1,5 +1,5 @@ Name: strongswan -Version: 5.0.2 +Version: 5.0.3 Release: 1%{?dist} Summary: An OpenSource IPsec-based VPN Solution Group: System Environment/Daemons @@ -93,7 +93,10 @@ echo "For migration from 4.6 to 5.0 see http://wiki.strongswan.org/projects/stro --enable-eap-tnc \ --enable-tnccs-20 \ --enable-tnc-imc \ - --enable-tnc-imv + --enable-tnc-imv \ + --enable-eap-radius \ + --enable-curl \ + --enable-eap-identity make %{?_smp_mflags} @@ -138,6 +141,8 @@ install -D -m 755 init/sysvinit/%{name} %{buildroot}/%{_initddir}/%{name} %{_libdir}/%{name}/libhydra.so.0.0.0 %{_libdir}/%{name}/libtls.so.0 %{_libdir}/%{name}/libtls.so.0.0.0 +%{_libdir}/%{name}/libpttls.so.0 +%{_libdir}/%{name}/libpttls.so.0.0.0 %{_libdir}/%{name}/lib%{name}.so.0 %{_libdir}/%{name}/lib%{name}.so.0.0.0 %dir %{_libdir}/%{name}/plugins @@ -180,6 +185,8 @@ install -D -m 755 init/sysvinit/%{name} %{buildroot}/%{_initddir}/%{name} %{_libdir}/%{name}/plugins/lib%{name}-eap-mschapv2.so %{_libdir}/%{name}/plugins/lib%{name}-farp.so %{_libdir}/%{name}/plugins/lib%{name}-dhcp.so +%{_libdir}/%{name}/plugins/lib%{name}-curl.so +%{_libdir}/%{name}/plugins/lib%{name}-eap-identity.so %dir %{_libexecdir}/%{name} %{_libexecdir}/%{name}/_copyright %{_libexecdir}/%{name}/_updown @@ -208,6 +215,8 @@ install -D -m 755 init/sysvinit/%{name} %{buildroot}/%{_initddir}/%{name} %{_libdir}/%{name}/libpts.so.0.0.0 %{_libdir}/%{name}/libtnccs.so.0 %{_libdir}/%{name}/libtnccs.so.0.0.0 +%{_libdir}/%{name}/libradius.so.0 +%{_libdir}/%{name}/libradius.so.0.0.0 %dir %{_libdir}/%{name}/imcvs %dir %{_libdir}/%{name}/imcvs/imc-attestation.so %dir %{_libdir}/%{name}/imcvs/imc-scanner.so @@ -223,6 +232,7 @@ install -D -m 755 init/sysvinit/%{name} %{buildroot}/%{_initddir}/%{name} %{_libdir}/%{name}/plugins/lib%{name}-tnc-imv.so %{_libdir}/%{name}/plugins/lib%{name}-tnc-tnccs.so %{_libdir}/%{name}/plugins/lib%{name}-tnccs-20.so +%{_libdir}/%{name}/plugins/lib%{name}-eap-radius.so %dir %{_libexecdir}/%{name} %{_libexecdir}/%{name}/attest @@ -269,6 +279,11 @@ fi %endif %changelog +* Fri Apr 19 2013 Avesh Agarwal - 5.0.3-1 +- New upstream release +- Enabled curl and eap-identity plugins +- Enabled support for eap-radius plugin. + * Mon Mar 11 2013 Avesh Agarwal - 5.0.2-1 - Update to upstream release 5.0.2 - Created sub package strongswan-tnc-imcvs that provides trusted network