261 Commits

Author SHA1 Message Date
Pavel Šimerda
54e666ec89 merge two related patches 2014-05-26 16:44:38 +02:00
Pavel Šimerda
220d2798bf clean up the patches a bit 2014-05-26 16:29:53 +02:00
Avesh Agarwal
0ae42b48af New upstream developer release 5.2.0dr4
- Attestation IMV/IMC supports IMA-NG measurement format now
- Aikgen tool to generate an Attestation Identity Key bound
  to a TPM
- PT-EAP transport protocol (RFC 7171) for TNC
- vici plugin provides IKE Configuration Interface for charon
- Enabled support for acert for checking X509 attribute certificate
- Updated patches
- Updated spec file with minor cleanups
2014-05-22 19:52:13 -04:00
Pavel Šimerda
e41e7350fa new version 5.1.3 2014-04-15 08:56:17 +02:00
Pavel Šimerda
f00a0eaf10 adjust the file list 2014-04-14 15:06:04 +02:00
Pavel Šimerda
3255bf76ff use --bindir, not --with-bindir 2014-04-14 14:41:34 +02:00
Pavel Šimerda
024ebfd1af new version 5.1.3rc1 2014-04-14 14:22:18 +02:00
Pavel Šimerda
9b40e12f55 updated libexec patch 2014-03-24 12:49:01 +01:00
Pavel Šimerda
bdecee05c1 fixed el6 initscript 2014-03-18 14:12:44 +01:00
Pavel Šimerda
01c2bfb116 fix Source1 installation 2014-03-15 17:38:55 +01:00
Pavel Šimerda
7c3a8251bd clean up the specfile a bit 2014-03-15 16:58:35 +01:00
Pavel Šimerda
2a4f417b6a add missing files 2014-03-14 20:15:22 +01:00
Pavel Šimerda
c0813448cc don't touch the config with sed 2014-03-05 16:52:49 +01:00
Pavel Šimerda
b4d5c81110 commented patches 2014-03-04 09:06:55 +01:00
Pavel Šimerda
624f2dd52e remove obsolete patches 2014-03-04 08:17:29 +01:00
Pavel Šimerda
1acf1a26e4 compile strongswan with xauth-pam plugin 2014-03-03 22:58:26 +01:00
Pavel Šimerda
99058fcb78 add missing source 2014-03-03 22:55:17 +01:00
Pavel Šimerda
c936b3d318 bump to 5.1.2 2014-03-03 22:46:53 +01:00
Avesh Agarwal
72d43cc20b Fixed full hardening for strongswan (full relro and PIE).
The previous macros had a typo and did not work
  (see bz#1067119).
- Fixed tnc package description to reflect the current state of
  the package.
- Fixed pki binary and moved it to /usr/libexece/strongswan as
  others binaries are there too.
2014-02-20 12:53:46 -05:00
Pavel Šimerda
b97f57cef9 #903638 - SELinux is preventing /usr/sbin/xtables-multi from 'read' accesses on the chr_file /dev/random 2014-02-19 10:15:54 +01:00
Pavel Šimerda
31f572c3a7 Removed redundant patches and *.spec commands caused by branch merging 2014-01-09 10:43:31 +01:00
Pavel Šimerda
827399ee8c rebuilt 2014-01-08 13:08:49 +01:00
Pavel Šimerda
b5963e1653 Merge remote-tracking branch 'origin/el6'
Conflicts:
	.gitignore
	libstrongswan-plugin.patch
	libstrongswan-settings-debug.patch
	sources
	strongswan-init.patch
	strongswan-pts-ecp-disable.patch
	strongswan.spec
2014-01-07 15:41:33 +01:00
Pavel Šimerda
e7d4f90452 Merge remote-tracking branch 'origin/f18'
Conflicts:
	strongswan.spec
2014-01-07 15:09:19 +01:00
Pavel Šimerda
19f4b38c81 Merge remote-tracking branch 'origin/f19' 2014-01-07 15:04:35 +01:00
Pavel Šimerda
9febdcf251 Merge remote-tracking branch 'origin/f20' 2014-01-07 15:04:14 +01:00
Avesh Agarwal
1ca0c0e019 Resolves: 973315
- Resolves: 1036844
2013-12-02 16:11:46 -05:00
Avesh Agarwal
4fa580f8cd Resolves: 973315
- Resolves: 1036844
2013-12-02 16:07:57 -05:00
Avesh Agarwal
5f86e09419 Resolves: 973315
- Resolves: 1036844
2013-12-02 15:52:52 -05:00
Avesh Agarwal
1c9aa914d8 Support for PT-TLS (RFC 6876)
- Support for SWID IMC/IMV
- Support for command line IKE client charon-cmd
- Changed location of pki to /usr/bin
- Added swid tags files
- Added man pages for pki and charon-cmd
- Renamed pki to strongswan-pki to avoid conflict with
  pki-core/pki-tools package.
- Update local patches
- Fixes CVE-2013-6075
- Fixes CVE-2013-6076
- Fixed autoconf/automake issue as configure.ac got changed
  and it required running autoreconf during the build process.
- added strongswan signature file to the sources.
- Fixed initialization crash of IMV and IMC particularly
  attestation imv/imc as libstrongswas was not getting
  initialized.
- Enabled fips support
- Enabled TNC's ifmap support
- Enabled TNC's pdp support
- Fixed hardocded package name in this spec file
2013-11-01 15:25:00 -04:00
Avesh Agarwal
285d7534b8 Support for PT-TLS (RFC 6876)
- Support for SWID IMC/IMV
- Support for command line IKE client charon-cmd
- Changed location of pki to /usr/bin
- Added swid tags files
- Added man pages for pki and charon-cmd
- Renamed pki to strongswan-pki to avoid conflict with
  pki-core/pki-tools package.
- Update local patches
- Fixes CVE-2013-6075
- Fixes CVE-2013-6076
- Fixed autoconf/automake issue as configure.ac got changed
  and it required running autoreconf during the build process.
- added strongswan signature file to the sources.
2013-11-01 15:09:30 -04:00
Avesh Agarwal
2cef5e58a7 Support for PT-TLS (RFC 6876)
- Support for SWID IMC/IMV
- Support for command line IKE client charon-cmd
- Changed location of pki to /usr/bin
- Added swid tags files
- Added man pages for pki and charon-cmd
- Renamed pki to strongswan-pki to avoid conflict with
  pki-core/pki-tools package.
- Update local patches
- Fixes CVE-2013-6075
- Fixes CVE-2013-6076
- Fixed autoconf/automake issue as configure.ac got changed
  and it required running autoreconf during the build process.
- added strongswan signature file to the sources.
2013-11-01 15:08:47 -04:00
Avesh Agarwal
b43681bf1b Support for PT-TLS (RFC 6876)
- Support for SWID IMC/IMV
- Support for command line IKE client charon-cmd
- Changed location of pki to /usr/bin
- Added swid tags files
- Added man pages for pki and charon-cmd
- Renamed pki to strongswan-pki to avoid conflict with
  pki-core/pki-tools package.
- Update local patches
- Fixes CVE-2013-6075
- Fixes CVE-2013-6076
- Fixed autoconf/automake issue as configure.ac got changed
  and it required running autoreconf during the build process.
- added strongswan signature file to the sources.
2013-11-01 15:04:43 -04:00
Avesh Agarwal
710e5ac471 Support for PT-TLS (RFC 6876)
- Support for SWID IMC/IMV
- Support for command line IKE client charon-cmd
- Changed location of pki to /usr/bin
- Added swid tags files
- Added man pages for pki and charon-cmd
- Renamed pki to strongswan-pki to avoid conflict with
  pki-core/pki-tools package.
- Update local patches
- Fixes CVE-2013-6075
- Fixes CVE-2013-6076
- Fixed autoconf/automake issue as configure.ac got changed
  and it required running autoreconf during the build process.
- added strongswan signature file to the sources.
2013-11-01 14:49:56 -04:00
Avesh Agarwal
07bd95ec67 Fixed initialization crash of IMV and IMC particularly
attestation imv/imc as libstrongswas was not getting
  initialized.
2013-09-12 13:23:21 -04:00
Avesh Agarwal
5c4f5c4a52 Fixed initialization crash of IMV and IMC particularly
attestation imv/imc as libstrongswas was not getting
  initialized.
2013-09-12 13:21:54 -04:00
Avesh Agarwal
764be31e95 Fixed initialization crash of IMV and IMC particularly
attestation imv/imc as libstrongswas was not getting
  initialized.
2013-09-12 13:18:45 -04:00
Avesh Agarwal
c5fe3b3899 Enabled fips support
- Enabled TNC's ifmap support
- Enabled TNC's pdp support
- Fixed hardocded package name in this spec file
2013-08-30 15:43:32 -04:00
Avesh Agarwal
d0792a1bf6 Enabled fips support
- Enabled TNC's ifmap support
- Enabled TNC's pdp support
- Fixed hardocded package name in this spec file
2013-08-30 15:41:45 -04:00
Avesh Agarwal
5c3c2f4422 Enabled fips support
- Enabled TNC's ifmap support
- Enabled TNC's pdp support
- Fixed hardocded package name in this spec file
2013-08-30 15:37:43 -04:00
Avesh Agarwal
c2f05ffb59 Fixed linker error when compilating malloc-speed that
lrt is missing. Did not have this problem on f19 and F20.
2013-08-07 17:06:40 -04:00
Avesh Agarwal
bc76bb8ca3 rhbz#981429: New upstream release
- Fixes CVE-2013-5018: rhbz#991216, rhbz#991215
- Fixes rhbz#991859 failed to build in rawhide
- Updated local patches and removed which are not needed
- Fixed errors around charon-nm
- Added plugins libstrongswan-pkcs12.so, libstrongswan-rc2.so,
  libstrongswan-sshkey.so
- Added utility imv_policy_manager
2013-08-07 16:28:08 -04:00
Avesh Agarwal
634a38ad93 rhbz#981429: New upstream release
- Fixes CVE-2013-5018: rhbz#991216, rhbz#991215
- Fixes rhbz#991859 failed to build in rawhide
- Updated local patches and removed which are not needed
- Fixed errors around charon-nm
- Added plugins libstrongswan-pkcs12.so, libstrongswan-rc2.so,
  libstrongswan-sshkey.so
- Added utility imv_policy_manager
2013-08-07 16:12:08 -04:00
Avesh Agarwal
80bb1ce4b2 rhbz#981429: New upstream release
- Fixes CVE-2013-5018: rhbz#991216, rhbz#991215
- Fixes rhbz#991859 failed to build in rawhide
- Updated local patches and removed which are not needed
- Fixed errors around charon-nm
- Added plugins libstrongswan-pkcs12.so, libstrongswan-rc2.so,
  libstrongswan-sshkey.so
- Added utility imv_policy_manager
2013-08-07 16:04:59 -04:00
Jamie Nguyen
12770476b6 Rename strongswan-NetworkManager to strongswan-charon-nm 2013-07-25 07:53:04 +01:00
Jamie Nguyen
79313db91f Rename strongswan-NetworkManager to strongswan-charon-nm 2013-07-25 07:52:41 +01:00
Jamie Nguyen
3bdb50eb15 Rename strongswan-NetworkManager to strongswan-charon-nm 2013-07-25 07:51:56 +01:00
Jamie Nguyen
b82295b178 Rename strongswan-NetworkManager to strongswan-charon-nm 2013-07-25 07:46:02 +01:00
Jamie Nguyen
492496d78f Conditionalize NM subpackage as NM on EL6 is too old 2013-07-15 23:58:06 +01:00
Jamie Nguyen
6106c07f9e Add /etc/strongswan/ipsec.d and missing subdirectories 2013-07-15 23:58:03 +01:00