Hello community, here is the log from the commit of package strongswan for openSUSE:Factory checked in at Thu Jul 30 23:00:07 CEST 2009. -------- --- strongswan/strongswan.changes 2009-07-02 17:48:26.000000000 +0200 +++ /mounts/work_src_done/STABLE/strongswan/strongswan.changes 2009-07-30 16:35:11.000000000 +0200 @@ -1,0 +2,25 @@ +Mon Jul 27 13:40:57 CEST 2009 - mt@suse.de + +- Updated to strongSwan 4.3.3 release: + * The configuration option --enable-integrity-test plus the + strongswan.conf option libstrongswan.integrity_test = yes + activate integrity tests of the IKE daemons charon and pluto, + libstrongswan and all loaded plugins. Thus dynamic library + misconfigurations and non-malicious file manipulations can be + reliably detected. + * The new default setting libstrongswan.ecp_x_coordinate_only=yes + allows IKEv1 interoperability with MS Windows using the ECP DH + groups 19 and 20. + * The IKEv1 pluto daemon now supports the AES-CCM and AES-GCM ESP + authenticated encryption algorithms. + * The IKEv1 pluto daemon now supports V4 OpenPGP keys. + * The RDN parser vulnerability discovered by Orange Labs research + team was not completely fixed in version 4.3.2. Some more + modifications had to be applied to the asn1_length() function to + make it robust. +- Enabled --enable-integrity-test configure option (new feature). +- Removed patch to avoid plugin versions (accepted by upstream) + and added patch to avoid version for new libchecksum library. +- Added -Wno-pointer-sign -Wno-strict-aliasing CFLAGS in the spec. + +------------------------------------------------------------------- calling whatdependson for head-i586 Old: ---- strongswan-4.3.2-rpmlintrc strongswan-4.3.2.tar.bz2 strongswan-4.3.2.tar.bz2.sig strongswan_no_plugin_version.patch New: ---- strongswan-4.3.3-rpmlintrc strongswan-4.3.3.tar.bz2 strongswan-4.3.3.tar.bz2.sig strongswan_no_libchecksum_version.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ strongswan.spec ++++++ --- /var/tmp/diff_new_pack.3VQweu/_old 2009-07-30 22:59:04.000000000 +0200 +++ /var/tmp/diff_new_pack.3VQweu/_new 2009-07-30 22:59:04.000000000 +0200 @@ -1,5 +1,5 @@ # -# spec file for package strongswan (Version 4.3.2) +# spec file for package strongswan (Version 4.3.3) # # Copyright (c) 2009 SUSE LINUX Products GmbH, Nuernberg, Germany. # @@ -19,9 +19,9 @@ Name: strongswan -%define upstream_version 4.3.2 +%define upstream_version 4.3.3 %define strongswan_docdir %{_docdir}/%{name} -Version: 4.3.2 +Version: 4.3.3 Release: 1 License: GPL v2 or later Group: Productivity/Networking/Security @@ -38,7 +38,7 @@ Source2: %{name}.init.in Source3: %{name}-%{version}-rpmlintrc Patch1: %{name}_modprobe_syslog.patch -Patch2: %{name}_no_plugin_version.patch +Patch2: %{name}_no_libchecksum_version.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildRequires: bison flex gmp-devel gperf pkg-config BuildRequires: libcap-devel @@ -130,24 +130,19 @@ %prep %setup -q -n %{name}-%{upstream_version} %patch1 -p0 -# => no_plugin_version.patch creation cmd: -# -#find . -type f -name Makefile.am -exec \ -# grep -l 'la_LDFLAGS.*-module' \{\} \; | \ -# xargs -r sed -e "s/\(.*la_LDFLAGS.*-module.*\)/\1 -avoid-version/g" -i -# %patch2 -p0 sed -e 's|@libexecdir@|%_libexecdir|g' \ < $RPM_SOURCE_DIR/strongswan.init.in \ > strongswan.init %build -export RPM_OPT_FLAGS="$RPM_OPT_FLAGS -W -Wall" -export CFLAGS="$RPM_OPT_FLAGS" +CFLAGS="$RPM_OPT_FLAGS -W -Wall -Wno-pointer-sign -Wno-strict-aliasing" +export RPM_OPT_FLAGS CFLAGS libtoolize --force %{?suse_update_config:%{suse_update_config -f}} autoreconf %configure \ + --enable-integrity-test \ --with-capabilities=libcap \ --with-resolv-conf=%{_localstatedir}/run/strongswan/resolv.conf \ --enable-smartcard \ @@ -180,18 +175,17 @@ EOT # rm -f $RPM_BUILD_ROOT%{_libdir}/libstrongswan.{so,a,la} -find $RPM_BUILD_ROOT%{_libdir}/ipsec \ +find $RPM_BUILD_ROOT%{_libexecdir}/ipsec \ -name "*.a" -o -name "*.la" | xargs -r rm -f # install -m755 -d ${RPM_BUILD_ROOT}%{strongswan_docdir}/ install -m644 TODO NEWS README COPYING CREDITS \ ${RPM_BUILD_ROOT}%{strongswan_docdir}/ install -m755 -d $RPM_BUILD_ROOT%{_localstatedir}/run/strongswan - -%clean -if [ -n "$RPM_BUILD_ROOT" ] && [ "$RPM_BUILD_ROOT" != "/" ] ; then - rm -rf "$RPM_BUILD_ROOT" -fi +#%clean +#if [ -n "$RPM_BUILD_ROOT" ] && [ "$RPM_BUILD_ROOT" != "/" ] ; then +# rm -rf "$RPM_BUILD_ROOT" +#fi %post %{run_ldconfig} @@ -227,11 +221,8 @@ %config %{_sysconfdir}/init.d/ipsec %{_sbindir}/rcipsec %{_sbindir}/ipsec -%{_libdir}/ipsec -%{_libdir}/libstrongswan.* -%if "%{_libdir}" != "%{_libexecdir}" %{_libexecdir}/ipsec -%endif +%{_libdir}/libstrongswan.* %{_mandir}/man5/ipsec.conf.5* %{_mandir}/man5/ipsec.secrets.5* %{_mandir}/man8/ipsec.8* ++++++ strongswan-4.3.2-rpmlintrc -> strongswan-4.3.3-rpmlintrc ++++++ ++++++ strongswan-4.3.2.tar.bz2 -> strongswan-4.3.3.tar.bz2 ++++++ ++++ 16915 lines of diff (skipped) ++++++ strongswan_no_libchecksum_version.patch ++++++ --- src/checksum/Makefile.am +++ src/checksum/Makefile.am 2009/07/27 12:30:23 @@ -2,6 +2,7 @@ ipsec_LTLIBRARIES = libchecksum.la noinst_PROGRAMS = checksum_builder nodist_libchecksum_la_SOURCES = checksum.c +libchecksum_la_LDFLAGS = -module -avoid-version checksum_builder_SOURCES = checksum_builder.c checksum_builder_LDADD = $(top_builddir)/src/libstrongswan/libstrongswan.la ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org