aboutsummaryrefslogtreecommitdiff
path: root/net/libreswan
Commit message (Collapse)AuthorAge
* libreswan: uci configuration supportJaymin Patel2023-10-30
| | | | | | Add libreswan UCI configuration and hotplug support Signed-off-by: Jaymin Patel <jem.patel@gmail.com>
* libreswan: update to 4.12Lucian Cristian2023-08-31
| | | | | | fix CVE-2023-38710, CVE-2023-38711, CVE-2023-38712 Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* libreswan: update to 4.11Lucian Cristian2023-05-17
| | | | | | Fixes https://libreswan.org/security/CVE-2023-30570 Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* libreswan: update to 4.10Nick Hainke2023-04-27
| | | | | | | | Release Notes: https://github.com/libreswan/libreswan/releases/tag/v4.10 Fixes: CVE-2023-23009 Signed-off-by: Nick Hainke <vincent@systemli.org>
* treewide: refactor to use PKG_BUILD_FLAGS:=ltoAndre Heider2023-04-08
| | | | | | | | | | See commit 07730ff3 "treewide: add support for "lto" in PKG_BUILD_FLAGS" on the main repository. Note: Some packages only added `-flto` to CFLAGS and not LDFLAGS. This fixes it and properly enables LTO. Signed-off-by: Andre Heider <a.heider@gmail.com>
* libreswan: set DNSSEC_ROOTKEY_FILE, LINUX_VARIANTEneas U de Queiroz2023-01-13
| | | | | | | | | | Libreswan will set DEFAULT_DNSSEC_ROOTKEY_FILE from the LINUX_VARIANT variable, which is taken from the ID field in /etc/os-release. This points to the host file, which is wrong. Set both variables when calling make. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
* libreswan: update to 4.9Lucian Cristian2022-10-21
| | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* libreswan: update to 4.7Lucian Cristian2022-05-30
| | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* libreswan: fix build on macosSergey V. Lobanov2022-01-20
| | | | | | | | | | libreswan makefile detects macos (darwin) and changes build logic but OpenWrt is always Linux so it is required to specify linux as target platfrom This patch specifies Linux as a target platfrom Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
* libreswan: update to 4.6Lucian Cristian2022-01-17
| | | | | | this update also fixes a CVE Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* libreswan: update to 4.5Lucian Cristian2021-09-12
| | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* libreswan: update to 4.4Lucian Cristian2021-05-21
| | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* libreswan: update to 4.3Lucian Cristian2021-02-28
| | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* treewide: Run refresh on all packagesIlya Lipnitskiy2021-02-20
| | | | | | | | | The crude loop I wrote to come up with this changeset: find -L package/feeds/packages/ -name patches | \ sed 's/patches$/refresh/' | sort | xargs make Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>
* libreswan: update to 4.2Lucian Cristian2021-02-04
| | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* libreswan: add xfrm interface dependsLucian Cristian2020-12-14
| | | | | | ipsec needs xfrmi support Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* libreswan: update to 4.1Lucian Cristian2020-10-25
| | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* libreswan: drop support for kernel 4.14Adrian Schmutzler2020-09-02
| | | | | | | Support for kernel 4.14 has been dropped in main repo, so remove it here as well. Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
* unbound: refactor build options to select switchesEric Luehrsen2020-06-27
| | | | | | | | | | The two unique packages "Unbound light" and "Unbound heavy" were not working well due to the fact that Unbound is mostly its library. Tools and helpers would crash. Instead a reasonable default Unbound is built. Also up select options like python are added. libevent and libpthreads are options to down select. Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
* libreswan: various fixesLucian Cristian2020-05-17
| | | | | | | | start if kernel has missing ipv6 support add libcap-ng support fix some errors displayed on syslog Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* libreswan: update to 3.32Lucian Cristian2020-05-14
| | | | | | also add -flto to compiler flags Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* libreswan: fix compilation with Linux 4.14Eneas U de Queiroz2020-05-12
| | | | | | | | | According to a comment in programs/pluto/kernel_xfrm_interface.c:177: * IFLA_XFRM_IF_ID was added to mainline kernel 4.19 linux/if_link.h with older kernel headers 'make USE_XFRM_INTERFACE_IFLA_HEADER=true' Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
* libreswan: update to 3.31Lucian Cristian2020-03-25
| | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* libreswan: update to 3.30Lucian Cristian2020-02-25
| | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* libreswan: fix compilation with muslRosen Penev2020-02-03
| | | | | | | Added missing limits header. This is normally included in fortify-headers, which I have disabled locally. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* libreswan: switch to procdLucian Cristian2019-10-24
| | | | Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* libreswan: Replace usleep with nanosleepRosen Penev2019-07-19
| | | | | | | | | | usleep is optionally unavailable with uClibc-ng. Added PKG_LICENSE_FILES Added PKG_CPE_ID for proper CVE tracking. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* libreswan: update to libreswan 3.29-1Antony Antony2019-06-16
| | | | | | | | remove unused patches Add patch to: Automatically detect whether Curve25519 is available in NSS for USE_DH31 Signed-off-by: Antony Antony <antony@phenome.org>
* libreswan: add libunbound and minor fixesAntony Antony2019-06-16
| | | | | | | | | | | | | | | | | | | | | | enable libunbound, along with dependency add kmod-crypto-aead kmod-crypto-gcm dependency to support AES GCM disable libseccomp /git/openwrt/build_dir/target-mips_24kc_musl/libreswan-3.27/include/lswseccomp.h:24:10: fatal error: seccomp.h: No such file or directory #include <seccomp.h> ^~~~~~~~~~~ add missing dependency nspr add nss-utils dependency to able to import x509 Certificates to fix the error ipsec import west.p12 /usr/sbin/ipsec: line 239: pk12util: not found /usr/sbin/ipsec: line 84: certutil: not found remove libnss dependency, nss-utils util will pull it. remove unused build option KERNELSRC not necesscay since b4b98e2922. Signed-off-by: Antony Antony <antony@phenome.org>
* libreswan: backport deprecating KLIPSLucian Cristian2019-04-21
| | | | | | | | remove building kernel module, it is not used and is not working with 4.19 rework the ready to use l2tp-ipsec example Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* libreswan: kernel module fixLucian Cristian2019-04-11
| | | | | | use the kernel arch for building the modules Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
* libreswan: add packageLucian Cristian2019-04-08
Libreswan is a free software implementation of the most widely supported and standardized VPN protocol based on ("IPsec") and the Internet Key Exchange ("IKE"). These standards are produced and maintained by the Internet Engineering Task Force ("IETF"). Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
Powered by cgit, Themed by Ted Yin.