rpms-fedora-extras/strongswan
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
283 Commits 35 Branches 0 Tags
ff2f499fcb6b2c62bd18d3ebd4b18151c41d268d
Commit Graph

211 Commits

Author SHA1 Message Date
Zoran Peričić
ff2f499fcb Patch vici for NHRP 2021-12-31 11:12:56 +01:00
Neal Gompa
2f04e6389f Disable TPM/TSS 1.2 support for F36+ / RHEL9+ 
TPM/TSS 1.2 has long since been superseded by TPM/TSS 2.0,
and trousers is more or less dead and replaced by the tpm-tss toolkit
for TPM/TSS 2.0.

Resolves: rhbz#2033299
 2021-12-16 08:22:26 -05:00
Petr Menšík
b7c6e022d4 Add timeout and verbosity to tests 
In case any test hangs, ensure it would release builder.
Increase verbosity to know more about possible failures. Interactive
debugging is not possible on builders.
 2021-11-12 21:12:04 +01:00
Petr Menšík
0e9ffbc66d Enable additional module for testing 2021-11-12 21:12:04 +01:00
Petr Menšík
f751d41f23 Add quirks needed for python install 
--enable-python-eggs is required to provide correct version. But
otherwise does different thing than is required for python bindings
package. Rebuild python after installation of main package, because it
changed destination directory used later by install.

Related: rhbz#1419441
 2021-11-12 21:12:04 +01:00
Petr Menšík
3d925e79dd Add optional support for tests running 
Now my tests did not finish successfully even on local build. Not
enabling them by default.
 2021-11-12 21:12:02 +01:00
Petr Menšík
b097119cff Add pytest 2021-11-12 21:10:01 +01:00
Petr Menšík
a894518822 Add python3 and perl vici bindings 
Work in progress to enable vici bindings. It seems they are not under
active support, because changes required for python3 are not in upstream
code.
 2021-11-12 21:09:58 +01:00
Paul Wouters
8d04445d34 strongswan: don't use RuntimeDirectory in systemd service file 
Because there are two services, strongswan and strongswan-starter
that use this directory. Otherwise when stopping a service, the
directory is removed from /run and the other service that does
not start anymore.

Also cleanup old patches that are obsolete.
 2021-11-08 20:45:23 -05:00
Paul Wouters
28ee63eed5 * Wed Oct 20 2021 Paul Wouters <paul.wouters@aiven.io> - 5.9.4-1 
- Resolves: rhbz#2015165 strongswan-5.9.4 is available
- Resolves: rhbz#2015611 CVE-2021-41990 strongswan: gmp plugin: integer overflow via a crafted certificate with an RSASSA-PSS signature
- Resolves: rhbz#2015614 CVE-2021-41991 strongswan: integer overflow when replacing certificates in cache
- Add BuildRequire for tpm2-tss-devel and weak dependency for tpm2-tools
 2021-10-20 17:47:06 -04:00
Sahana Prasad
23b5b73cd8 Rebuilt with OpenSSL 3.0.0 2021-09-14 19:15:51 +02:00
Fedora Release Engineering
48629b5950 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2021-07-23 18:23:56 +00:00
Björn Esser
8ce4072e4d Rebuild for versioned symbols in json-c 2021-07-10 11:58:08 +02:00
Paul Wouters
6ccc325c15 - Resolves: rhbz#1979574 strongswan-5.9.3 is available 
- Make strongswan main dir world readable so apps can find strongswan.conf
 2021-07-06 17:31:55 -04:00
Paul Wouters
4d2f255b10 - Resolves: rhbz#1896545 strongswan-5.9.2 is available 2021-06-02 20:28:03 -04:00
Zbigniew Jędrzejewski-Szmek
12be37ab1b Rebuilt for updated systemd-rpm-macros 
See https://pagure.io/fesco/issue/2583.
 2021-03-02 16:12:17 +01:00
Paul Wouters
dafd128e1f update rundir patch 2021-02-12 14:07:45 -05:00
Paul Wouters
7e67e8cca6 - Resolves: rhbz# 1896545 strongswan-5.9.1 is available 2021-02-12 13:52:44 -05:00
Paul Wouters
04aee4b450 update changelog with rhbz 2021-02-12 13:47:19 -05:00
Davide Cavalca
8f80a71a01 Build with with capabilities support 2021-02-11 13:26:29 -08:00
Fedora Release Engineering
5449a7c2dc - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2021-01-27 21:09:17 +00:00
Tom Stellard
0bc1b9e952 Add BuildRequires: make 
https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot
 2021-01-08 22:02:14 +00:00
Paul Wouters
d2bf10503b * Thu Oct 22 12:43:48 EDT 2020 Paul Wouters <pwouters@redhat.com> - 5.9.0-2 
- Resolves: rhbz#1886759 charon looking for certificates in the wrong place
 2020-10-22 12:46:04 -04:00
Paul Wouters
206f1fff39 * Mon Sep 28 12:36:45 EDT 2020 Paul Wouters <pwouters@redhat.com> - 5.9.0-1 
- Resolves: rhbz#1861747 strongswan-5.9.0 is available
- Remove --enable-fips-mode=2, which defaults strongswan to FIPS only.
  (use fips_mode = 2 in plugins {} openssl {} in strongswan.conf to enable FIPS)
 2020-09-28 13:15:59 -04:00
Fedora Release Engineering
c671c8eddf - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2020-08-01 09:12:59 +00:00
Fedora Release Engineering
2054770361 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2020-07-29 11:35:14 +00:00
Björn Esser
1bd38c323e Rebuild (json-c) 2020-04-22 00:12:55 +02:00
Mikhail Zabaluev
6c46f34786 Patch0: Add RuntimeDirectory options to service files (#1789263) 2020-04-12 12:13:28 +03:00
Mikhail Zabaluev
66c97839f3 Updated to 5.8.4 
Patch4 has been applied upstream
 2020-04-12 11:24:37 +03:00
Mikhail Zabaluev
20b5f4d7fd Patch to declare a global variable with extern (#1800117) 2020-02-23 00:52:02 +02:00
Paul Wouters
d2e288f585 Merge branch 'f31' 2020-02-10 13:48:39 -05:00
Paul Wouters
a7360fff44 - use tmpfile to ensure rundir is present 2020-02-10 13:40:59 -05:00
Fedora Release Engineering
ad83060f5e - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2020-01-31 00:27:06 +00:00
Paul Wouters
77923c7621 - Use /run/strongswan as rundir to support strongswans in namespaces 2019-12-28 17:59:54 -05:00
Mikhail Zabaluev
457ad9b702 Update to 5.8.2 (#1784457) 
The D-Bus config file moved under datadir
 2019-12-18 14:45:28 +02:00
Mikhail Zabaluev
2d2adcb664 Update to 5.8.1 (#1711920) 
No more separate strongswan-swanctl.service to start out of order (#1775548)
Added strongswan-starter.service
 2019-11-24 09:06:56 +02:00
Fedora Release Engineering
be375bffce - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2019-07-27 00:20:09 +00:00
Fedora Release Engineering
cb849f3fc5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2019-02-03 08:44:54 +00:00
Paul Wouters
1d3dc6a769 - Updated to 5.7.2 2019-01-09 12:51:29 -05:00
Mikhail Zabaluev
2271eb0481 Updated to 5.7.1 
Resolves rhbz#1635872 CVE-2018-16152
Resolves rhbz#1635875 CVE-2018-16151
 2018-10-05 01:36:33 +03:00
Mikhail Zabaluev
bc2de6a760 Release 5.6.3-3 2018-08-24 09:38:50 +03:00
Mikhail Zabaluev
2be3ca7a8f Mark file conflict with NetworkManager-strongswan 
File /etc/dbus-1/system.d/nm-strongswan-service.conf is now packaged
in strongswan-charon-nm, so older versions of
NetworkManager-strongswan that used to package it need to be marked
as a file conflict.

Fixes BZ#1554479.
 2018-08-24 09:16:24 +03:00
Mikhail Zabaluev
9fc9ec766f Disable bypass-lan by default in daemon configuration 2018-08-23 08:02:12 +03:00
Mikhail Zabaluev
494fc77865 Remove unnecessary uses of %{name} macro 
The configuration directory is named explicitly elsewhere.
 2018-08-23 08:00:56 +03:00
Martin Strigl
0ceb4f694a * added bypass-lan 
Signed-off-by: Mikhail Zabaluev <mikhail.zabaluev@gmail.com>
 2018-08-23 08:00:33 +03:00
Fedora Release Engineering
2e257b580b - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild 
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
 2018-07-14 06:49:38 +00:00
Igor Gnatenko
1e4615cbf0 add BuildRequires: gcc 
Reference: https://fedoraproject.org/wiki/Changes/Remove_GCC_from_BuildRoot
 2018-07-09 19:06:52 +02:00
Mikhail Zabaluev
8953e7a8a9 New version 5.6.3 
Patch strongswan-5.6.2-1574939-VPN-DNS has been applied upstream.
 2018-05-29 23:17:39 +03:00
Paul Wouters
9f0f5a9d4f - Resolves rhbz#1581868 CVE-2018-5388 strongswan: buffer underflow in stroke_socket.c 2018-05-24 00:09:54 -04:00
Paul Wouters
ad2751324a - Resolves rhbz#1449875 Strongswan on epel built without the sql plugin but with the sqlite plugin 2018-05-23 23:54:39 -04:00