Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | main/strongswan: security upgrade to 5.3.2 (CVE-2015-4171) | Timo Teräs | 2015-06-11 | 2 | -46/+6 |
| | | | | | This also removes the GRE key patch -- it was incomplete and does not fully fix the issues. | ||||
* | main/strongswan: don't set gre ports for SPDs | Timo Teräs | 2015-06-05 | 2 | -1/+41 |
| | | | | | workaround for certain dmvpn issues due to not supporting grekey handling in charon. | ||||
* | main/strongswan: add patches for quagga/nrhpd support | Timo Teräs | 2015-06-04 | 5 | -1/+968 |
| | |||||
* | main/strongswan: security upgrade to 5.3.1 (CVE-2015-3991) | Timo Teräs | 2015-06-04 | 1 | -10/+12 |
| | |||||
* | main/strongswan: run as non-root | Timo Teräs | 2015-05-01 | 4 | -7/+57 |
| | | | | | | | | | | | | Make charon use 'ipsec' user and group, and enable the libcap support as few capabilities need to be retained for configuring IPsec SAs in to kernel. This also introduces charon.initd which starts charon daemon only and uses swanctl for configuration. It is a little bit more light weight than running the 'starter' which seems to be deprecated. Also the config format is completely different, but more flexible and extensive. | ||||
* | main/*: replace all sbin/runscript with sbin/openrc-run | Natanael Copa | 2015-04-28 | 2 | -5/+5 |
| | |||||
* | main/strongswan: upgrade to 5.3.0 | Timo Teräs | 2015-04-07 | 1 | -4/+4 |
| | |||||
* | main/strongswan: security upgrade to 5.2.2 (CVE-2014-9221) | Timo Teräs | 2015-01-30 | 1 | -5/+5 |
| | |||||
* | main/strongswan: enable EAP TLS | Natanael Copa | 2015-01-01 | 1 | -1/+2 |
| | |||||
* | main/strongswan: linux-headers build fix | Natanael Copa | 2015-01-01 | 1 | -1/+1 |
| | |||||
* | main/strongswan: enable vici and swanctl | Timo Teräs | 2014-08-20 | 1 | -1/+3 |
| | |||||
* | main/strongswan: upgrade to 5.2.0 | Timo Teräs | 2014-08-06 | 1 | -6/+4 |
| | |||||
* | main/strongswan: security upgrade to 5.1.3 | Timo Teräs | 2014-04-15 | 2 | -33/+5 |
| | | | | fixes CVE-2014-2338 along with multiple bug fixes | ||||
* | main/strongswan: define _GNU_SOURCE | Natanael Copa | 2014-02-24 | 1 | -3/+5 |
| | | | | | | | | We need define _GNU_SOURCE for strndup and others. It has been fixed upstream. see http://wiki.strongswan.org/issues/516 But rather than apply the patches we simply add _GNU_SOURCE to CFLAGS for now. | ||||
* | main/strongswan: fix from upstream for a segfault | Natanael Copa | 2014-02-17 | 2 | -1/+29 |
| | | | | http://wiki.strongswan.org/issues/452 | ||||
* | main/strongswan: moved from testing | Natanael Copa | 2014-02-05 | 2 | -0/+126 |