Commit Graph

214 Commits

Author SHA1 Message Date
reitear
dd370b1b1e Resolves: rhbz#048108 - segfault at 18 ip 00007f4c7c0d841c sp 00007ffe49f61b70 error 4 in libc.so.6
Fix changelog entry
Include upstream patch link
2022-03-07 12:19:35 +01:00
Paul Wouters
e2ccbbed7e - Use newly published/cleaned strongswan gpg key 2022-01-25 09:14:37 -05:00
Paul Wouters
3f12242eea - Resolves rhbz#2044361 strongswan-5.9.5 is available (CVE-2021-45079) 2022-01-24 22:05:17 -05:00
Fedora Release Engineering
3067ecdcc7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2022-01-22 01:46:58 +00:00
Neal Gompa
2f04e6389f Disable TPM/TSS 1.2 support for F36+ / RHEL9+
TPM/TSS 1.2 has long since been superseded by TPM/TSS 2.0,
and trousers is more or less dead and replaced by the tpm-tss toolkit
for TPM/TSS 2.0.

Resolves: rhbz#2033299
2021-12-16 08:22:26 -05:00
Petr Menšík
b7c6e022d4 Add timeout and verbosity to tests
In case any test hangs, ensure it would release builder.
Increase verbosity to know more about possible failures. Interactive
debugging is not possible on builders.
2021-11-12 21:12:04 +01:00
Petr Menšík
0e9ffbc66d Enable additional module for testing 2021-11-12 21:12:04 +01:00
Petr Menšík
f751d41f23 Add quirks needed for python install
--enable-python-eggs is required to provide correct version. But
otherwise does different thing than is required for python bindings
package. Rebuild python after installation of main package, because it
changed destination directory used later by install.

Related: rhbz#1419441
2021-11-12 21:12:04 +01:00
Petr Menšík
3d925e79dd Add optional support for tests running
Now my tests did not finish successfully even on local build. Not
enabling them by default.
2021-11-12 21:12:02 +01:00
Petr Menšík
b097119cff Add pytest 2021-11-12 21:10:01 +01:00
Petr Menšík
a894518822 Add python3 and perl vici bindings
Work in progress to enable vici bindings. It seems they are not under
active support, because changes required for python3 are not in upstream
code.
2021-11-12 21:09:58 +01:00
Paul Wouters
8d04445d34 strongswan: don't use RuntimeDirectory in systemd service file
Because there are two services, strongswan and strongswan-starter
that use this directory. Otherwise when stopping a service, the
directory is removed from /run and the other service that does
not start anymore.

Also cleanup old patches that are obsolete.
2021-11-08 20:45:23 -05:00
Paul Wouters
28ee63eed5 * Wed Oct 20 2021 Paul Wouters <paul.wouters@aiven.io> - 5.9.4-1
- Resolves: rhbz#2015165 strongswan-5.9.4 is available
- Resolves: rhbz#2015611 CVE-2021-41990 strongswan: gmp plugin: integer overflow via a crafted certificate with an RSASSA-PSS signature
- Resolves: rhbz#2015614 CVE-2021-41991 strongswan: integer overflow when replacing certificates in cache
- Add BuildRequire for tpm2-tss-devel and weak dependency for tpm2-tools
2021-10-20 17:47:06 -04:00
Sahana Prasad
23b5b73cd8 Rebuilt with OpenSSL 3.0.0 2021-09-14 19:15:51 +02:00
Fedora Release Engineering
48629b5950 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2021-07-23 18:23:56 +00:00
Björn Esser
8ce4072e4d Rebuild for versioned symbols in json-c 2021-07-10 11:58:08 +02:00
Paul Wouters
6ccc325c15 - Resolves: rhbz#1979574 strongswan-5.9.3 is available
- Make strongswan main dir world readable so apps can find strongswan.conf
2021-07-06 17:31:55 -04:00
Paul Wouters
4d2f255b10 - Resolves: rhbz#1896545 strongswan-5.9.2 is available 2021-06-02 20:28:03 -04:00
Zbigniew Jędrzejewski-Szmek
12be37ab1b Rebuilt for updated systemd-rpm-macros
See https://pagure.io/fesco/issue/2583.
2021-03-02 16:12:17 +01:00
Paul Wouters
dafd128e1f update rundir patch 2021-02-12 14:07:45 -05:00
Paul Wouters
7e67e8cca6 - Resolves: rhbz# 1896545 strongswan-5.9.1 is available 2021-02-12 13:52:44 -05:00
Paul Wouters
04aee4b450 update changelog with rhbz 2021-02-12 13:47:19 -05:00
Davide Cavalca
8f80a71a01 Build with with capabilities support 2021-02-11 13:26:29 -08:00
Fedora Release Engineering
5449a7c2dc - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2021-01-27 21:09:17 +00:00
Tom Stellard
0bc1b9e952 Add BuildRequires: make
https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot
2021-01-08 22:02:14 +00:00
Paul Wouters
d2bf10503b * Thu Oct 22 12:43:48 EDT 2020 Paul Wouters <pwouters@redhat.com> - 5.9.0-2
- Resolves: rhbz#1886759 charon looking for certificates in the wrong place
2020-10-22 12:46:04 -04:00
Paul Wouters
206f1fff39 * Mon Sep 28 12:36:45 EDT 2020 Paul Wouters <pwouters@redhat.com> - 5.9.0-1
- Resolves: rhbz#1861747 strongswan-5.9.0 is available
- Remove --enable-fips-mode=2, which defaults strongswan to FIPS only.
  (use fips_mode = 2 in plugins {} openssl {} in strongswan.conf to enable FIPS)
2020-09-28 13:15:59 -04:00
Fedora Release Engineering
c671c8eddf - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-08-01 09:12:59 +00:00
Fedora Release Engineering
2054770361 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-07-29 11:35:14 +00:00
Björn Esser
1bd38c323e Rebuild (json-c) 2020-04-22 00:12:55 +02:00
Mikhail Zabaluev
6c46f34786 Patch0: Add RuntimeDirectory options to service files (#1789263) 2020-04-12 12:13:28 +03:00
Mikhail Zabaluev
66c97839f3 Updated to 5.8.4
Patch4 has been applied upstream
2020-04-12 11:24:37 +03:00
Mikhail Zabaluev
20b5f4d7fd Patch to declare a global variable with extern (#1800117) 2020-02-23 00:52:02 +02:00
Paul Wouters
d2e288f585 Merge branch 'f31' 2020-02-10 13:48:39 -05:00
Paul Wouters
a7360fff44 - use tmpfile to ensure rundir is present 2020-02-10 13:40:59 -05:00
Fedora Release Engineering
ad83060f5e - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-01-31 00:27:06 +00:00
Paul Wouters
77923c7621 - Use /run/strongswan as rundir to support strongswans in namespaces 2019-12-28 17:59:54 -05:00
Mikhail Zabaluev
457ad9b702 Update to 5.8.2 (#1784457)
The D-Bus config file moved under datadir
2019-12-18 14:45:28 +02:00
Mikhail Zabaluev
2d2adcb664 Update to 5.8.1 (#1711920)
No more separate strongswan-swanctl.service to start out of order (#1775548)
Added strongswan-starter.service
2019-11-24 09:06:56 +02:00
Fedora Release Engineering
be375bffce - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-07-27 00:20:09 +00:00
Fedora Release Engineering
cb849f3fc5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-02-03 08:44:54 +00:00
Paul Wouters
1d3dc6a769 - Updated to 5.7.2 2019-01-09 12:51:29 -05:00
Mikhail Zabaluev
2271eb0481 Updated to 5.7.1
Resolves rhbz#1635872 CVE-2018-16152
Resolves rhbz#1635875 CVE-2018-16151
2018-10-05 01:36:33 +03:00
Mikhail Zabaluev
bc2de6a760 Release 5.6.3-3 2018-08-24 09:38:50 +03:00
Mikhail Zabaluev
2be3ca7a8f Mark file conflict with NetworkManager-strongswan
File /etc/dbus-1/system.d/nm-strongswan-service.conf is now packaged
in strongswan-charon-nm, so older versions of
NetworkManager-strongswan that used to package it need to be marked
as a file conflict.

Fixes BZ#1554479.
2018-08-24 09:16:24 +03:00
Mikhail Zabaluev
9fc9ec766f Disable bypass-lan by default in daemon configuration 2018-08-23 08:02:12 +03:00
Mikhail Zabaluev
494fc77865 Remove unnecessary uses of %{name} macro
The configuration directory is named explicitly elsewhere.
2018-08-23 08:00:56 +03:00
Martin Strigl
0ceb4f694a * added bypass-lan
Signed-off-by: Mikhail Zabaluev <mikhail.zabaluev@gmail.com>
2018-08-23 08:00:33 +03:00
Fedora Release Engineering
2e257b580b - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2018-07-14 06:49:38 +00:00
Igor Gnatenko
1e4615cbf0 add BuildRequires: gcc
Reference: https://fedoraproject.org/wiki/Changes/Remove_GCC_from_BuildRoot
2018-07-09 19:06:52 +02:00