commit strongswan for openSUSE:Factory
Hello community,
here is the log from the commit of package strongswan for openSUSE:Factory checked in at 2012-02-16 15:01:43
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/strongswan (Old)
and /work/SRC/openSUSE:Factory/.strongswan.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "strongswan", Maintainer is "mt@suse.com"
Changes:
--------
--- /work/SRC/openSUSE:Factory/strongswan/strongswan.changes 2011-12-25 17:42:14.000000000 +0100
+++ /work/SRC/openSUSE:Factory/.strongswan.new/strongswan.changes 2012-02-16 15:02:26.000000000 +0100
@@ -1,0 +2,53 @@
+Wed Feb 15 13:31:40 UTC 2012 - mt@suse.com
+
+- Updated to strongSwan 4.6.1 release:
+ Changes in 4.6.1:
+ - Because of changing checksums before and after installation which caused
+ the integrity tests to fail we avoided directly linking libsimaka,
+ libtls and libtnccs to those libcharon plugins which make use of these
+ dynamiclibraries.
+ Instead we linked the libraries to the charon daemon. Unfortunately
+ Ubuntu 11.10 activated the --as-needed ld option which discards explicit
+ links to dynamic libraries that are not actually used by the charon
+ daemon itself, thus causing failures during the loading of the plugins
+ which depend on these libraries for resolving external symbols.
+ - Therefore our approach of computing integrity checksums for plugins had
+ to be changed radically by moving the hash generation from the
+ compilation to the post-installation phase.
+ Changes in 4.6.0:
+ - The new libstrongswan certexpire plugin collects expiration information
+ of all used certificates and exports them to CSV files. It either
+ directly exports them or uses cron style scheduling for batch exports.
+ - Starter passes unresolved hostnames to charon, allowing it to do name
+ resolution not before the connection attempt. This is especially useful
+ with connections between hosts using dynamic IP addresses.
+ Thanks to Mirko Parthey for the initial patch.
+ - The android plugin can now be used without the Android frontend patch
+ and provides DNS server registration and logging to logcat.
+ - Pluto and starter (plus stroke and whack) have been ported to Android.
+ - Support for ECDSA private and public key operations has been added to
+ the pkcs11 plugin. The plugin now also provides DH and ECDH via PKCS#11
+ and can use tokens as random number generators (RNG). By default only
+ private key operations are enabled, more advanced features have to be
+ enabled by their option in strongswan.conf. This also applies to public
+ key operations (even for keys not stored on the token) which were
+ enabled by default before.
+ - The libstrongswan plugin system now supports detailed plugin
+ dependencies. Many plugins have been extended to export its capabilities
+ and requirements. This allows the plugin loader to resolve plugin
+ loading order automatically, and in future releases, to dynamically load
+ the required features on demand.
+ Existing third party plugins are source (but not binary) compatible if
+ they properly initialize the new get_features() plugin function to NULL.
+ - The tnc-ifmap plugin implements a TNC IF-MAP 2.0 client which can
+ deliver metadata about IKE_SAs via a SOAP interface to a MAP server.
+ The tnc-ifmap plugin requires the Apache Axis2/C library.
+- Merged patches, changed strongswan-doc to be a noarch package.
+- Fixed rpmlint runlevel & fsf warnings, updated rpmlintrc
+
+-------------------------------------------------------------------
+Mon Feb 6 10:27:00 UTC 2012 - aj@suse.de
+
+- Only glib.h can be included, fix compilation.
+
+-------------------------------------------------------------------
Old:
----
strongswan-4.5.3-fmt-warnings.patch
strongswan-4.5.3-rpmlintrc
strongswan-4.5.3.tar.bz2
strongswan-4.5.3.tar.bz2.sig
New:
----
strongswan-4.6.1-fmt-warnings.patch
strongswan-4.6.1-glib.patch
strongswan-4.6.1-rpmlintrc
strongswan-4.6.1.tar.bz2
strongswan-4.6.1.tar.bz2.sig
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ strongswan.spec ++++++
--- /var/tmp/diff_new_pack.XrqVjV/_old 2012-02-16 15:02:27.000000000 +0100
+++ /var/tmp/diff_new_pack.XrqVjV/_new 2012-02-16 15:02:27.000000000 +0100
@@ -1,7 +1,7 @@
#
# spec file for package strongswan
#
-# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -15,8 +15,10 @@
# Please submit bugfixes or comments via http://bugs.opensuse.org/
#
+
+
Name: strongswan
-Version: 4.5.3
+Version: 4.6.1
Release: 0
%define upstream_version %{version}
%define strongswan_docdir %{_docdir}/%{name}
@@ -41,6 +43,7 @@
Source4: README.SUSE
Patch1: %{name}_modprobe_syslog.patch
Patch2: %{name}-%{version}-fmt-warnings.patch
+Patch3: %{name}-%{version}-glib.patch
BuildRoot: %{_tmppath}/%{name}-%{version}-build
BuildRequires: bison
BuildRequires: curl-devel
@@ -105,6 +108,7 @@
and others
%package doc
+BuildArch: noarch
Summary: OpenSource IPsec-based VPN Solution
%description doc
@@ -234,6 +238,7 @@
%setup -q -n %{name}-%{upstream_version}
%patch1 -p0
%patch2 -p0
+%patch3 -p1
sed -e 's|@libexecdir@|%_libexecdir|g' \
< $RPM_SOURCE_DIR/strongswan.init.in \
> strongswan.init
@@ -313,7 +318,7 @@
#
EOT
#
-rm -f $RPM_BUILD_ROOT%{strongswan_libdir}/lib{charon,hydra,strongswan}.so
+rm -f $RPM_BUILD_ROOT%{strongswan_libdir}/lib{charon,hydra,strongswan,simaka}.so
find $RPM_BUILD_ROOT%{strongswan_libdir} \
-name "*.a" -o -name "*.la" | xargs -r rm -f
#
@@ -436,6 +441,8 @@
%{strongswan_libdir}/libhydra.so.0.0.0
%{strongswan_libdir}/libcharon.so.0
%{strongswan_libdir}/libcharon.so.0.0.0
+%{strongswan_libdir}/libsimaka.so.0
+%{strongswan_libdir}/libsimaka.so.0.0.0
%{strongswan_libdir}/libstrongswan.so.0
%{strongswan_libdir}/libstrongswan.so.0.0.0
%dir %{strongswan_plugins}
@@ -471,6 +478,7 @@
%{strongswan_plugins}/libstrongswan-ha.so
%{strongswan_plugins}/libstrongswan-hmac.so
%{strongswan_plugins}/libstrongswan-kernel-netlink.so
+%{strongswan_plugins}/libstrongswan-kernel-netlink.so
%{strongswan_plugins}/libstrongswan-ldap.so
%{strongswan_plugins}/libstrongswan-md4.so
%{strongswan_plugins}/libstrongswan-md5.so
++++++ strongswan-4.5.3-fmt-warnings.patch -> strongswan-4.6.1-fmt-warnings.patch ++++++
--- /work/SRC/openSUSE:Factory/strongswan/strongswan-4.5.3-fmt-warnings.patch 2011-09-23 12:46:59.000000000 +0200
+++ /work/SRC/openSUSE:Factory/.strongswan.new/strongswan-4.6.1-fmt-warnings.patch 2012-02-16 15:02:25.000000000 +0100
@@ -1,14 +1,14 @@
--- src/checksum/checksum_builder.c
-+++ src/checksum/checksum_builder.c 2011/09/08 15:45:10
++++ src/checksum/checksum_builder.c 2012/02/15 13:08:35
@@ -64,9 +64,9 @@ static void build_checksum(char *path, c
fprintf(stderr, "dlopen failed: %s\n", dlerror());
}
}
-- printf("\t{\"%-20s%7u, 0x%08x, %6u, 0x%08x},\n",
-+ printf("\t{\"%-20s%7zu, 0x%08x, %6zu, 0x%08x},\n",
+- printf("\t{\"%-25s%7u, 0x%08x, %6u, 0x%08x},\n",
++ printf("\t{\"%-25s%7zu, 0x%08x, %6zu, 0x%08x},\n",
name, fsize, fsum, ssize, ssum);
-- fprintf(stderr, "\"%-20s%7u / 0x%08x %6u / 0x%08x\n",
-+ fprintf(stderr, "\"%-20s%7zu / 0x%08x %6zu / 0x%08x\n",
+- fprintf(stderr, "\"%-25s%7u / 0x%08x %6u / 0x%08x\n",
++ fprintf(stderr, "\"%-25s%7zu / 0x%08x %6zu / 0x%08x\n",
name, fsize, fsum, ssize, ssum);
}
++++++ strongswan-4.6.1-glib.patch ++++++
Index: strongswan-4.5.3/src/libcharon/plugins/nm/nm_service.h
===================================================================
--- strongswan-4.5.3.orig/src/libcharon/plugins/nm/nm_service.h
+++ strongswan-4.5.3/src/libcharon/plugins/nm/nm_service.h
@@ -21,8 +21,7 @@
#ifndef NM_SERVICE_H_
#define NM_SERVICE_H_
-#include
participants (1)
-
root@hilbert.suse.de