[PATCHv2] strongswan: Update to 5.3.3
Message ID | 1445029684-15245-1-git-send-email-stefan.schantl@ipfire.org |
---|---|
State | Superseded, archived |
Delegated to: | Michael Tremer |
Headers |
Return-Path: <development-bounces@lists.ipfire.org> Received: from mail01.ipfire.org (mail01.tremer.info [172.28.1.200]) by septima.ipfire.org (Postfix) with ESMTP id E597962021 for <patchwork@ipfire.org>; Fri, 16 Oct 2015 23:08:16 +0200 (CEST) Received: from hedwig.ipfire.org (localhost [IPv6:::1]) by mail01.ipfire.org (Postfix) with ESMTP id C029AD6E; Fri, 16 Oct 2015 23:08:16 +0200 (CEST) Received: from tuxedo.stevee (host228-133-28-81.hiway.at [81.28.133.228]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 5912C19B; Fri, 16 Oct 2015 23:08:15 +0200 (CEST) From: Stefan Schantl <stefan.schantl@ipfire.org> To: development@lists.ipfire.org Subject: [PATCHv2] strongswan: Update to 5.3.3 Date: Fri, 16 Oct 2015 23:08:04 +0200 Message-Id: <1445029684-15245-1-git-send-email-stefan.schantl@ipfire.org> X-Mailer: git-send-email 2.4.3 In-Reply-To: <1445028772.18375.94.camel@ipfire.org> References: <1445028772.18375.94.camel@ipfire.org> X-BeenThere: development@lists.ipfire.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: IPFire development talk <development.lists.ipfire.org> List-Unsubscribe: <http://lists.ipfire.org/mailman/options/development>, <mailto:development-request@lists.ipfire.org?subject=unsubscribe> List-Archive: <http://lists.ipfire.org/pipermail/development/> List-Post: <mailto:development@lists.ipfire.org> List-Help: <mailto:development-request@lists.ipfire.org?subject=help> List-Subscribe: <http://lists.ipfire.org/mailman/listinfo/development>, <mailto:development-request@lists.ipfire.org?subject=subscribe> Errors-To: development-bounces@lists.ipfire.org Sender: "Development" <development-bounces@lists.ipfire.org> |
Message
Stefan Schantl
Oct. 17, 2015, 8:08 a.m. UTC
This is a minor update to the latest stable version of strongswan.
The support and usage of systemd explicitly has been enabled and
the dependency to systemd has been updated because the configure script
of strongswan is looking for the systemd compat libraries which are provided
by systemd 221-2 and later versions.
There was also a requirenment to move some libraries to %{libdir} because
of a hardcoded RPATH which is against our guidelines.
Fixes #10896.
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
---
strongswan/patches/strongswan-swanctl-1193106.patch | 10 ++++++++++
strongswan/strongswan.nm | 21 +++++++++++++++++----
2 files changed, 27 insertions(+), 4 deletions(-)
create mode 100644 strongswan/patches/strongswan-swanctl-1193106.patch
Comments
On Fri, 2015-10-16 at 23:08 +0200, Stefan Schantl wrote: > This is a minor update to the latest stable version of strongswan. > > The support and usage of systemd explicitly has been enabled and > the dependency to systemd has been updated because the configure > script > of strongswan is looking for the systemd compat libraries which are > provided > by systemd 221-2 and later versions. > > There was also a requirenment to move some libraries to %{libdir} > because > of a hardcoded RPATH which is against our guidelines. Lots of typos in the sentence above. > > Fixes #10896. > > Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org> > --- > strongswan/patches/strongswan-swanctl-1193106.patch | 10 ++++++++++ > strongswan/strongswan.nm | 21 > +++++++++++++++++---- > 2 files changed, 27 insertions(+), 4 deletions(-) > create mode 100644 strongswan/patches/strongswan-swanctl > -1193106.patch > > diff --git a/strongswan/patches/strongswan-swanctl-1193106.patch > b/strongswan/patches/strongswan-swanctl-1193106.patch > new file mode 100644 > index 0000000..cecef1f > --- /dev/null > +++ b/strongswan/patches/strongswan-swanctl-1193106.patch > @@ -0,0 +1,10 @@ > +diff -urNp strongswan-5.2.2/init/systemd-swanctl/strongswan > -swanctl.service.in strongswan-5.2.2-patched/init/systemd > -swanctl/strongswan-swanctl.service.in > +--- strongswan-5.2.2/init/systemd-swanctl/strongswan > -swanctl.service.in 2014-09-26 09:04:24.000000000 -0400 > ++++ strongswan-5.2.2-patched/init/systemd-swanctl/strongswan > -swanctl.service.in 2015-02-20 09:42:17.822480297 -0500 > +@@ -7,3 +7,6 @@ Type=notify > + ExecStart=@SBINDIR@/charon-systemd > + ExecStartPost=@SBINDIR@/swanctl --load-all --noprompt > + ExecReload=@SBINDIR@/swanctl --reload > ++ > ++[Install] > ++WantedBy=multi-user.target > diff --git a/strongswan/strongswan.nm b/strongswan/strongswan.nm > index b386083..686fa40 100644 > --- a/strongswan/strongswan.nm > +++ b/strongswan/strongswan.nm > @@ -4,8 +4,8 @@ > #################################################################### > ########### > > name = strongswan > -version = 5.3.2 > -release = 1 > +version = 5.3.3 > +release = 1.3 This is an invalid release number. > > groups = Networking/VPN > url = http://www.strongswan.org/ > @@ -38,11 +38,12 @@ build > openssl-devel > perl > sqlite-devel > - systemd-devel > - systemd-units > + systemd-devel >= 221-2 > end > > configure_options += \ > + --disable-static \ > + --with-ipseclibdir=%{libdir}/ipsec \ > --enable-curl \ > --enable-ldap \ > --enable-openssl \ > @@ -61,6 +62,7 @@ build > --enable-eap-identity \ > --with-capabilities=libcap \ > --enable-swanctl \ > + --enable-systemd \ > --enable-kernel-libipsec > > if "%{DISTRO_ARCH}" == "i686" > @@ -72,6 +74,14 @@ build > #test > # make check > #end > + > + install_cmds > + # Drop unneeded files. > + rm -rvf %{BUILDROOT}%{libdir}/ipsec/lib*.so > + > + # Move libraries to libdir. > + mv %{BUILDROOT}%{libdir}/ipsec/lib*.so.* > %{BUILDROOT}%{libdir} > + end > end > > packages > @@ -83,11 +93,14 @@ packages > script postup > systemctl daemon-reload >/dev/null 2>&1 || : > systemctl reload-or-try-restart > strongswan.service >/dev/null 2>&1 || : > + systemctl reload-or-try-restart strongswan > -swanctl.service >/dev/null 2>&1 || : > end > > script preun > systemctl disable --no-reload > strongswan.service >/dev/null 2>&1 || : > + systemctl disable --no-reload strongswan > -swanctl.service >/dev/null 2>&1 || : > systemctl stop strongswan.service >/dev/null > 2>&1 || : > + systemctl stop strongswan-swanctl.service > >/dev/null 2>&1 || : > end > > script postun