You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

679 lines
21 KiB

  1. #
  2. # Copyright (C) 2012-2018 OpenWrt.org
  3. #
  4. # This is free software, licensed under the GNU General Public License v2.
  5. # See /LICENSE for more information.
  6. #
  7. include $(TOPDIR)/rules.mk
  8. PKG_NAME:=strongswan
  9. PKG_VERSION:=5.8.2
  10. PKG_RELEASE:=2
  11. PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2
  12. PKG_SOURCE_URL:=https://download.strongswan.org/ https://download2.strongswan.org/
  13. PKG_HASH:=86900ddbe7337c923dadf2c8339ae8ed2b9158e3691745884d08ae534677430e
  14. PKG_LICENSE:=GPL-2.0-or-later
  15. PKG_MAINTAINER:=Stijn Tintel <stijn@linux-ipv6.be>
  16. PKG_CPE_ID:=cpe:/a:strongswan:strongswan
  17. PKG_MOD_AVAILABLE:= \
  18. addrblock \
  19. aes \
  20. af-alg \
  21. agent \
  22. attr \
  23. attr-sql \
  24. blowfish \
  25. ccm \
  26. cmac \
  27. constraints \
  28. connmark \
  29. coupling \
  30. ctr \
  31. curl \
  32. curve25519 \
  33. des \
  34. dhcp \
  35. dnskey \
  36. duplicheck \
  37. eap-identity \
  38. eap-md5 \
  39. eap-mschapv2 \
  40. eap-radius \
  41. eap-tls \
  42. farp \
  43. fips-prf \
  44. forecast \
  45. gcm \
  46. gcrypt \
  47. gmp \
  48. gmpdh \
  49. ha \
  50. hmac \
  51. kernel-libipsec \
  52. kernel-netlink \
  53. ldap \
  54. led \
  55. load-tester \
  56. nonce \
  57. md4 \
  58. md5 \
  59. mysql \
  60. openssl \
  61. pem \
  62. pgp \
  63. pkcs1 \
  64. pkcs7 \
  65. pkcs8 \
  66. pkcs11 \
  67. pkcs12 \
  68. pubkey \
  69. random \
  70. rc2 \
  71. resolve \
  72. revocation \
  73. sha1 \
  74. sha2 \
  75. smp \
  76. socket-default \
  77. socket-dynamic \
  78. sql \
  79. sqlite \
  80. sshkey \
  81. stroke \
  82. test-vectors \
  83. unity \
  84. uci \
  85. updown \
  86. vici \
  87. whitelist \
  88. x509 \
  89. xauth-eap \
  90. xauth-generic \
  91. xcbc
  92. PKG_CONFIG_DEPENDS:= \
  93. CONFIG_STRONGSWAN_ROUTING_TABLE \
  94. CONFIG_STRONGSWAN_ROUTING_TABLE_PRIO \
  95. $(patsubst %,CONFIG_PACKAGE_strongswan-mod-%,$(PKG_MOD_AVAILABLE)) \
  96. PKG_FIXUP:=autoreconf
  97. PKG_INSTALL:=1
  98. PKG_BUILD_PARALLEL:=1
  99. include $(INCLUDE_DIR)/package.mk
  100. # strongswan-mod-mysql needs iconv
  101. include $(INCLUDE_DIR)/nls.mk
  102. define Package/strongswan/Default
  103. SUBMENU:=VPN
  104. SECTION:=net
  105. CATEGORY:=Network
  106. TITLE:=StrongSwan
  107. URL:=http://www.strongswan.org/
  108. endef
  109. define Package/strongswan/description/Default
  110. StrongSwan is an OpenSource IPsec implementation for the Linux operating system.
  111. endef
  112. define Package/strongswan
  113. $(call Package/strongswan/Default)
  114. MENU:=1
  115. DEPENDS:= +libpthread +ip \
  116. +kmod-crypto-authenc \
  117. +kmod-ipsec +kmod-ipsec4 +IPV6:kmod-ipsec6 \
  118. +kmod-ipt-ipsec +iptables-mod-ipsec
  119. endef
  120. define Package/strongswan/config
  121. source "$(SOURCE)/Config.in"
  122. endef
  123. define Package/strongswan/description
  124. $(call Package/strongswan/description/Default)
  125. This package contains shared libraries and scripts.
  126. endef
  127. define Package/strongswan-full
  128. $(call Package/strongswan/Default)
  129. TITLE+= (full)
  130. DEPENDS:= strongswan \
  131. +strongswan-charon \
  132. +strongswan-charon-cmd \
  133. +strongswan-ipsec \
  134. +strongswan-mod-addrblock \
  135. +strongswan-mod-aes \
  136. +strongswan-mod-af-alg \
  137. +strongswan-mod-agent \
  138. +strongswan-mod-attr \
  139. +strongswan-mod-attr-sql \
  140. +strongswan-mod-blowfish \
  141. +strongswan-mod-ccm \
  142. +strongswan-mod-cmac \
  143. +strongswan-mod-constraints \
  144. +strongswan-mod-connmark \
  145. +strongswan-mod-coupling \
  146. +strongswan-mod-ctr \
  147. +strongswan-mod-curl \
  148. +strongswan-mod-curve25519 \
  149. +strongswan-mod-des \
  150. +strongswan-mod-dhcp \
  151. +strongswan-mod-dnskey \
  152. +strongswan-mod-duplicheck \
  153. +strongswan-mod-eap-identity \
  154. +strongswan-mod-eap-md5 \
  155. +strongswan-mod-eap-mschapv2 \
  156. +strongswan-mod-eap-radius \
  157. +strongswan-mod-eap-tls \
  158. +strongswan-mod-farp \
  159. +strongswan-mod-fips-prf \
  160. +strongswan-mod-forecast \
  161. +strongswan-mod-gcm \
  162. +strongswan-mod-gcrypt \
  163. +strongswan-mod-gmp \
  164. +strongswan-mod-ha \
  165. +strongswan-mod-hmac \
  166. +strongswan-mod-kernel-netlink \
  167. +strongswan-mod-ldap \
  168. +strongswan-mod-led \
  169. +strongswan-mod-load-tester \
  170. +strongswan-mod-nonce \
  171. +strongswan-mod-md4 \
  172. +strongswan-mod-md5 \
  173. +strongswan-mod-mysql \
  174. +strongswan-mod-openssl \
  175. +strongswan-mod-pem \
  176. +strongswan-mod-pgp \
  177. +strongswan-mod-pkcs1 \
  178. +strongswan-mod-pkcs7 \
  179. +strongswan-mod-pkcs8 \
  180. +strongswan-mod-pkcs11 \
  181. +strongswan-mod-pkcs12 \
  182. +strongswan-mod-pubkey \
  183. +strongswan-mod-random \
  184. +strongswan-mod-rc2 \
  185. +strongswan-mod-resolve \
  186. +strongswan-mod-revocation \
  187. +strongswan-mod-sha1 \
  188. +strongswan-mod-sha2 \
  189. +strongswan-mod-smp \
  190. +strongswan-mod-socket-default \
  191. +strongswan-mod-sql \
  192. +strongswan-mod-sqlite \
  193. +strongswan-mod-sshkey \
  194. +strongswan-mod-stroke \
  195. +strongswan-mod-test-vectors \
  196. +strongswan-mod-uci \
  197. +strongswan-mod-unity \
  198. +strongswan-mod-updown \
  199. +strongswan-mod-vici \
  200. +strongswan-mod-whitelist \
  201. +strongswan-mod-x509 \
  202. +strongswan-mod-xauth-eap \
  203. +strongswan-mod-xauth-generic \
  204. +strongswan-mod-xcbc \
  205. +strongswan-pki \
  206. +strongswan-scepclient \
  207. +strongswan-swanctl \
  208. @DEVEL
  209. endef
  210. define Package/strongswan-full/description
  211. $(call Package/strongswan/description/Default)
  212. This meta-package contains dependencies for all of the strongswan plugins
  213. except kernel-libipsec,
  214. socket-dynamic and which are omitted in favor of the kernel-netlink and
  215. socket-default plugins.
  216. endef
  217. define Package/strongswan-default
  218. $(call Package/strongswan/Default)
  219. TITLE+= (default)
  220. DEPENDS:= strongswan \
  221. +strongswan-charon \
  222. +strongswan-ipsec \
  223. +strongswan-mod-aes \
  224. +strongswan-mod-attr \
  225. +strongswan-mod-connmark \
  226. +strongswan-mod-constraints \
  227. +strongswan-mod-des \
  228. +strongswan-mod-dnskey \
  229. +strongswan-mod-fips-prf \
  230. +strongswan-mod-gmp \
  231. +strongswan-mod-hmac \
  232. +strongswan-mod-kernel-netlink \
  233. +strongswan-mod-md5 \
  234. +strongswan-mod-nonce \
  235. +strongswan-mod-pem \
  236. +strongswan-mod-pgp \
  237. +strongswan-mod-pkcs1 \
  238. +strongswan-mod-pubkey \
  239. +strongswan-mod-random \
  240. +strongswan-mod-rc2 \
  241. +strongswan-mod-resolve \
  242. +strongswan-mod-revocation \
  243. +strongswan-mod-sha1 \
  244. +strongswan-mod-sha2 \
  245. +strongswan-mod-socket-default \
  246. +strongswan-mod-sshkey \
  247. +strongswan-mod-stroke \
  248. +strongswan-mod-updown \
  249. +strongswan-mod-x509 \
  250. +strongswan-mod-xauth-generic \
  251. +strongswan-mod-xcbc
  252. endef
  253. define Package/strongswan-default/description
  254. $(call Package/strongswan/description/Default)
  255. This meta-package contains only dependencies to match upstream defaults.
  256. endef
  257. define Package/strongswan-isakmp
  258. $(call Package/strongswan/Default)
  259. TITLE+= (isakmp)
  260. DEPENDS:= strongswan \
  261. +strongswan-charon \
  262. +strongswan-ipsec \
  263. +strongswan-mod-aes \
  264. +strongswan-mod-des \
  265. +strongswan-mod-gmpdh \
  266. +strongswan-mod-hmac \
  267. +strongswan-mod-kernel-netlink \
  268. +strongswan-mod-md5 \
  269. +strongswan-mod-nonce \
  270. +strongswan-mod-pubkey \
  271. +strongswan-mod-random \
  272. +strongswan-mod-sha1 \
  273. +strongswan-mod-socket-default \
  274. +strongswan-mod-stroke \
  275. +strongswan-mod-uci \
  276. +strongswan-mod-updown
  277. endef
  278. define Package/strongswan-isakmp/description
  279. $(call Package/strongswan/description/Default)
  280. This meta-package contains only dependencies to establish ISAKMP /
  281. IKE PSK connections, dropping other capabilities in favor of small size
  282. Can fit most routers even with 4Mb flash (after removing IPv6 support).
  283. endef
  284. define Package/strongswan-minimal
  285. $(call Package/strongswan/Default)
  286. TITLE+= (minimal)
  287. DEPENDS:= strongswan \
  288. +strongswan-charon \
  289. +strongswan-mod-aes \
  290. +strongswan-mod-gmp \
  291. +strongswan-mod-hmac \
  292. +strongswan-mod-kernel-netlink \
  293. +strongswan-mod-nonce \
  294. +strongswan-mod-pubkey \
  295. +strongswan-mod-random \
  296. +strongswan-mod-sha1 \
  297. +strongswan-mod-socket-default \
  298. +strongswan-mod-stroke \
  299. +strongswan-mod-updown \
  300. +strongswan-mod-x509 \
  301. +strongswan-mod-xcbc
  302. endef
  303. define Package/strongswan-minimal/description
  304. $(call Package/strongswan/description/Default)
  305. This meta-package contains only dependencies for a minimal IKEv2 setup.
  306. endef
  307. define Package/strongswan-charon
  308. $(call Package/strongswan/Default)
  309. TITLE+= IKEv1/IKEv2 keying daemon
  310. DEPENDS:= strongswan
  311. endef
  312. define Package/strongswan-charon/description
  313. $(call Package/strongswan/description/Default)
  314. This package contains charon, an IKEv2 keying daemon.
  315. endef
  316. define Package/strongswan-charon-cmd
  317. $(call Package/strongswan/Default)
  318. TITLE+= charon-cmd utility
  319. DEPENDS:= strongswan +strongswan-charon
  320. endef
  321. define Package/strongswan-charon-cmd/description
  322. $(call Package/strongswan/description/Default)
  323. This package contains the charon-cmd utility.
  324. endef
  325. define Package/strongswan-ipsec
  326. $(call Package/strongswan/Default)
  327. TITLE+= utilities
  328. DEPENDS:= strongswan
  329. endef
  330. define Package/strongswan-ipsec/description
  331. $(call Package/strongswan/description/Default)
  332. This package contains the ipsec utility.
  333. endef
  334. define Package/strongswan-pki
  335. $(call Package/strongswan/Default)
  336. TITLE+= PKI tool
  337. DEPENDS:= strongswan
  338. endef
  339. define Package/strongswan-pki/description
  340. $(call Package/strongswan/description/Default)
  341. This package contains the pki tool.
  342. endef
  343. define Package/strongswan-scepclient
  344. $(call Package/strongswan/Default)
  345. TITLE+= SCEP client
  346. DEPENDS:= strongswan
  347. endef
  348. define Package/strongswan-scepclient/description
  349. $(call Package/strongswan/description/Default)
  350. This package contains the SCEP client.
  351. endef
  352. define Package/strongswan-swanctl
  353. $(call Package/strongswan/Default)
  354. TITLE+= swanctl utility
  355. DEPENDS:= strongswan +strongswan-mod-vici
  356. endef
  357. define Package/strongswan-swanctl/description
  358. $(call Package/strongswan/description/Default)
  359. This package contains the swanctl utility.
  360. endef
  361. define Package/strongswan-libtls
  362. $(call Package/strongswan/Default)
  363. TITLE+= libtls
  364. DEPENDS:= strongswan
  365. endef
  366. define Package/strongswan-libtls/description
  367. $(call Package/strongswan/description/Default)
  368. This package contains libtls for strongSwan plugins eap-tls, eap-ttls,
  369. eap-peap, tnc-tnccs
  370. endef
  371. define BuildPlugin
  372. define Package/strongswan-mod-$(1)
  373. $$(call Package/strongswan/Default)
  374. TITLE:= StrongSwan $(2) plugin
  375. DEPENDS:= strongswan $(3)
  376. endef
  377. define Package/strongswan-mod-$(1)/install
  378. $(INSTALL_DIR) $$(1)/etc/strongswan.d/charon
  379. if [ -f $(PKG_INSTALL_DIR)/etc/strongswan.d/charon/$(1).conf ]; then \
  380. $(INSTALL_DATA) $(PKG_INSTALL_DIR)/etc/strongswan.d/charon/$(1).conf $$(1)/etc/strongswan.d/charon/; fi
  381. $(INSTALL_DIR) $$(1)/usr/lib/ipsec/plugins
  382. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-$(1).so \
  383. $$(1)/usr/lib/ipsec/plugins/
  384. $(call Plugin/$(1)/install,$$(1))
  385. endef
  386. $$(eval $$(call BuildPackage,strongswan-mod-$(1)))
  387. endef
  388. CONFIGURE_ARGS+= \
  389. --disable-scripts \
  390. --disable-static \
  391. --disable-fast \
  392. --enable-mediation \
  393. --with-systemdsystemunitdir=no \
  394. $(if $(CONFIG_PACKAGE_strongswan-charon-cmd),--enable-cmd,--disable-cmd) \
  395. $(if $(CONFIG_PACKAGE_strongswan-pki),--enable-pki,--disable-pki) \
  396. $(if $(CONFIG_PACKAGE_strongswan-scepclient),--enable-scepclient,--disable-scepclient) \
  397. --with-random-device=/dev/random \
  398. --with-urandom-device=/dev/urandom \
  399. --with-routing-table="$(call qstrip,$(CONFIG_STRONGSWAN_ROUTING_TABLE))" \
  400. --with-routing-table-prio="$(call qstrip,$(CONFIG_STRONGSWAN_ROUTING_TABLE_PRIO))" \
  401. $(foreach m,$(PKG_MOD_AVAILABLE), \
  402. $(if $(CONFIG_PACKAGE_strongswan-mod-$(m)),--enable-$(m),--disable-$(m)) \
  403. ) \
  404. ac_cv_search___atomic_load=no
  405. EXTRA_LDFLAGS+= -Wl,-rpath-link,$(STAGING_DIR)/usr/lib
  406. define Package/strongswan/conffiles
  407. /etc/ipsec.d/
  408. /etc/ipsec.conf
  409. /etc/ipsec.secrets
  410. /etc/ipsec.user
  411. /etc/strongswan.conf
  412. /etc/strongswan.d/
  413. endef
  414. define Package/strongswan/install
  415. $(INSTALL_DIR) $(1)/etc
  416. $(INSTALL_CONF) $(PKG_INSTALL_DIR)/etc/ipsec.conf $(1)/etc/
  417. $(INSTALL_CONF) $(PKG_INSTALL_DIR)/etc/strongswan.conf $(1)/etc/
  418. $(INSTALL_DIR) $(1)/usr/lib/ipsec
  419. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libstrongswan.so.* $(1)/usr/lib/ipsec/
  420. $(INSTALL_CONF) ./files/ipsec.secrets $(1)/etc/
  421. $(INSTALL_CONF) ./files/ipsec.user $(1)/etc/
  422. $(INSTALL_DIR) $(1)/etc/init.d
  423. $(INSTALL_BIN) ./files/ipsec.init $(1)/etc/init.d/ipsec
  424. endef
  425. define Package/strongswan-default/install
  426. true
  427. endef
  428. define Package/strongswan-full/install
  429. true
  430. endef
  431. define Package/strongswan-isakmp/install
  432. true
  433. endef
  434. define Package/strongswan-minimal/install
  435. true
  436. endef
  437. define Package/strongswan-charon/install
  438. $(INSTALL_DIR) $(1)/etc/strongswan.d
  439. $(CP) $(PKG_INSTALL_DIR)/etc/strongswan.d/charon.conf $(1)/etc/strongswan.d
  440. $(CP) $(PKG_INSTALL_DIR)/etc/strongswan.d/charon-logging.conf $(1)/etc/strongswan.d
  441. $(INSTALL_DIR) $(1)/usr/lib/ipsec
  442. $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/lib/ipsec/charon $(1)/usr/lib/ipsec/
  443. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libcharon.so.* $(1)/usr/lib/ipsec/
  444. endef
  445. define Package/strongswan-charon-cmd/install
  446. $(INSTALL_DIR) $(1)/usr/sbin
  447. $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/sbin/charon-cmd $(1)/usr/sbin/
  448. endef
  449. define Package/strongswan-ipsec/install
  450. $(INSTALL_DIR) $(1)/usr/sbin
  451. $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/sbin/ipsec $(1)/usr/sbin/
  452. endef
  453. define Package/strongswan-pki/install
  454. $(INSTALL_DIR) $(1)/etc/strongswan.d
  455. $(CP) $(PKG_INSTALL_DIR)/etc/strongswan.d/pki.conf $(1)/etc/strongswan.d/
  456. $(INSTALL_DIR) $(1)/usr/bin
  457. $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/pki $(1)/usr/bin/
  458. endef
  459. define Package/strongswan-scepclient/install
  460. $(INSTALL_DIR) $(1)/etc/strongswan.d
  461. $(CP) $(PKG_INSTALL_DIR)/etc/strongswan.d/scepclient.conf $(1)/etc/strongswan.d/
  462. $(INSTALL_DIR) $(1)/usr/lib/ipsec
  463. $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/lib/ipsec/scepclient $(1)/usr/lib/ipsec/
  464. endef
  465. define Package/strongswan-swanctl/conffiles
  466. /etc/swanctl/
  467. endef
  468. define Package/strongswan-swanctl/install
  469. $(INSTALL_DIR) $(1)/etc/swanctl/{bliss,ecdsa,pkcs{12,8},private,pubkey,rsa}
  470. $(INSTALL_DIR) $(1)/etc/swanctl/x509{,aa,ac,ca,crl,ocsp}
  471. $(CP) $(PKG_INSTALL_DIR)/etc/swanctl/swanctl.conf $(1)/etc/swanctl/
  472. $(INSTALL_DIR) $(1)/usr/sbin
  473. $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/sbin/swanctl $(1)/usr/sbin/
  474. endef
  475. define Package/strongswan-libtls/install
  476. $(INSTALL_DIR) $(1)/usr/lib/ipsec
  477. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libtls.so.* $(1)/usr/lib/ipsec/
  478. endef
  479. define Plugin/duplicheck/install
  480. $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
  481. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/duplicheck $(1)/usr/lib/ipsec/
  482. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-duplicheck.so $(1)/usr/lib/ipsec/plugins/
  483. endef
  484. define Plugin/eap-radius/install
  485. $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
  486. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libradius.so.* $(1)/usr/lib/ipsec/
  487. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-eap-radius.so $(1)/usr/lib/ipsec/plugins/
  488. endef
  489. define Plugin/attr-sql/install
  490. $(INSTALL_DIR) $(1)/usr/lib/ipsec
  491. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/pool $(1)/usr/lib/ipsec/
  492. endef
  493. define Plugin/stroke/install
  494. $(INSTALL_DIR) $(1)/etc/ipsec.d/aacerts
  495. $(INSTALL_DIR) $(1)/etc/ipsec.d/acerts
  496. $(INSTALL_DIR) $(1)/etc/ipsec.d/cacerts
  497. $(INSTALL_DIR) $(1)/etc/ipsec.d/certs
  498. $(INSTALL_DIR) $(1)/etc/ipsec.d/crls
  499. $(INSTALL_DIR) $(1)/etc/ipsec.d/ocspcerts
  500. $(INSTALL_DIR) $(1)/etc/ipsec.d/private
  501. $(INSTALL_DIR) $(1)/etc/ipsec.d/reqs
  502. $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
  503. $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/lib/ipsec/{starter,stroke} $(1)/usr/lib/ipsec/
  504. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-stroke.so $(1)/usr/lib/ipsec/plugins/
  505. endef
  506. define Plugin/updown/install
  507. $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
  508. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/_updown $(1)/usr/lib/ipsec/
  509. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-updown.so $(1)/usr/lib/ipsec/plugins/
  510. $(INSTALL_DIR) $(1)/etc/hotplug.d/ipsec
  511. $(CP) ./files/etc/hotplug.d/ipsec/01-user \
  512. $(1)/etc/hotplug.d/ipsec/01-user
  513. endef
  514. define Plugin/vici/install
  515. $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
  516. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libvici.so.* $(1)/usr/lib/ipsec/
  517. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-vici.so $(1)/usr/lib/ipsec/plugins/
  518. endef
  519. define Plugin/whitelist/install
  520. $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
  521. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/whitelist $(1)/usr/lib/ipsec/
  522. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-whitelist.so $(1)/usr/lib/ipsec/plugins/
  523. endef
  524. define Plugin/kernel-libipsec/install
  525. $(INSTALL_DIR) $(1)/usr/lib/ipsec
  526. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libipsec.so.* $(1)/usr/lib/ipsec/
  527. endef
  528. $(eval $(call BuildPackage,strongswan))
  529. $(eval $(call BuildPackage,strongswan-default))
  530. $(eval $(call BuildPackage,strongswan-full))
  531. $(eval $(call BuildPackage,strongswan-minimal))
  532. $(eval $(call BuildPackage,strongswan-isakmp))
  533. $(eval $(call BuildPackage,strongswan-charon))
  534. $(eval $(call BuildPackage,strongswan-charon-cmd))
  535. $(eval $(call BuildPackage,strongswan-ipsec))
  536. $(eval $(call BuildPackage,strongswan-pki))
  537. $(eval $(call BuildPackage,strongswan-scepclient))
  538. $(eval $(call BuildPackage,strongswan-swanctl))
  539. $(eval $(call BuildPackage,strongswan-libtls))
  540. $(eval $(call BuildPlugin,addrblock,RFC 3779 address block constraint support,))
  541. $(eval $(call BuildPlugin,aes,AES crypto,))
  542. $(eval $(call BuildPlugin,af-alg,AF_ALG crypto interface to Linux Crypto API,+kmod-crypto-user))
  543. $(eval $(call BuildPlugin,agent,SSH agent signing,))
  544. $(eval $(call BuildPlugin,attr,file based config,))
  545. $(eval $(call BuildPlugin,attr-sql,SQL based config,+strongswan-charon))
  546. $(eval $(call BuildPlugin,blowfish,Blowfish crypto,))
  547. $(eval $(call BuildPlugin,ccm,CCM AEAD wrapper crypto,))
  548. $(eval $(call BuildPlugin,cmac,CMAC crypto,))
  549. $(eval $(call BuildPlugin,connmark,netfilter connection marking,))
  550. $(eval $(call BuildPlugin,constraints,advanced X509 constraint checking,))
  551. $(eval $(call BuildPlugin,coupling,IKEv2 plugin to couple peer certificates permanently to authentication,))
  552. $(eval $(call BuildPlugin,ctr,Counter Mode wrapper crypto,))
  553. $(eval $(call BuildPlugin,curl,cURL fetcher plugin,+PACKAGE_strongswan-mod-curl:libcurl))
  554. $(eval $(call BuildPlugin,curve25519,Curve25519 Diffie-Hellman,))
  555. $(eval $(call BuildPlugin,des,DES crypto,))
  556. $(eval $(call BuildPlugin,dhcp,DHCP based attribute provider,))
  557. $(eval $(call BuildPlugin,dnskey,DNS RR key decoding,))
  558. $(eval $(call BuildPlugin,duplicheck,advanced duplicate checking,))
  559. $(eval $(call BuildPlugin,eap-identity,EAP identity helper,))
  560. $(eval $(call BuildPlugin,eap-md5,EAP MD5 (CHAP) EAP auth,))
  561. $(eval $(call BuildPlugin,eap-mschapv2,EAP MS-CHAPv2 EAP auth,+strongswan-mod-md4 +strongswan-mod-des))
  562. $(eval $(call BuildPlugin,eap-radius,EAP RADIUS auth,))
  563. $(eval $(call BuildPlugin,eap-tls,EAP TLS auth,+strongswan-libtls))
  564. $(eval $(call BuildPlugin,farp,fake arp respsonses,))
  565. $(eval $(call BuildPlugin,fips-prf,FIPS PRF crypto,+strongswan-mod-sha1))
  566. $(eval $(call BuildPlugin,forecast,forward multi/broadcast traffic,+kmod-ipt-conntrack-extra))
  567. $(eval $(call BuildPlugin,gcm,GCM AEAD wrapper crypto,))
  568. $(eval $(call BuildPlugin,gcrypt,libgcrypt,+PACKAGE_strongswan-mod-gcrypt:libgcrypt))
  569. $(eval $(call BuildPlugin,gmp,libgmp,+PACKAGE_strongswan-mod-gmp:libgmp))
  570. $(eval $(call BuildPlugin,gmpdh,DH-Groups; no libgmp dep,))
  571. $(eval $(call BuildPlugin,ha,high availability cluster,))
  572. $(eval $(call BuildPlugin,hmac,HMAC crypto,))
  573. $(eval $(call BuildPlugin,kernel-libipsec,libipsec kernel interface,))
  574. $(eval $(call BuildPlugin,kernel-netlink,netlink kernel interface,))
  575. $(eval $(call BuildPlugin,ldap,LDAP,+PACKAGE_strongswan-mod-ldap:libopenldap))
  576. $(eval $(call BuildPlugin,led,LED blink on IKE activity,))
  577. $(eval $(call BuildPlugin,load-tester,load testing,))
  578. $(eval $(call BuildPlugin,nonce,nonce genereation,))
  579. $(eval $(call BuildPlugin,md4,MD4 crypto,))
  580. $(eval $(call BuildPlugin,md5,MD5 crypto,))
  581. $(eval $(call BuildPlugin,mysql,MySQL database interface,+strongswan-mod-sql +PACKAGE_strongswan-mod-mysql:libmysqlclient-r))
  582. $(eval $(call BuildPlugin,openssl,OpenSSL crypto,+PACKAGE_strongswan-mod-openssl:libopenssl))
  583. $(eval $(call BuildPlugin,pem,PEM decoding,))
  584. $(eval $(call BuildPlugin,pgp,PGP key decoding,))
  585. $(eval $(call BuildPlugin,pkcs1,PKCS1 key decoding,))
  586. $(eval $(call BuildPlugin,pkcs7,PKCS7 key decoding,))
  587. $(eval $(call BuildPlugin,pkcs8,PKCS8 key decoding,))
  588. $(eval $(call BuildPlugin,pkcs11,PKCS11 key decoding,))
  589. $(eval $(call BuildPlugin,pkcs12,PKCS12 key decoding,))
  590. $(eval $(call BuildPlugin,pubkey,raw public key,))
  591. $(eval $(call BuildPlugin,random,RNG,))
  592. $(eval $(call BuildPlugin,rc2,RC2 crypto,))
  593. $(eval $(call BuildPlugin,resolve,DNS resolver,))
  594. $(eval $(call BuildPlugin,revocation,X509 CRL/OCSP revocation,))
  595. $(eval $(call BuildPlugin,sha1,SHA1 crypto,))
  596. $(eval $(call BuildPlugin,sha2,SHA2 crypto,))
  597. $(eval $(call BuildPlugin,smp,SMP configuration and control interface,+PACKAGE_strongswan-mod-smp:libxml2))
  598. $(eval $(call BuildPlugin,socket-default,default socket implementation for charon,))
  599. $(eval $(call BuildPlugin,socket-dynamic,dynamic socket implementation for charon,))
  600. $(eval $(call BuildPlugin,sql,SQL database interface,))
  601. $(eval $(call BuildPlugin,sqlite,SQLite database interface,+strongswan-mod-sql +PACKAGE_strongswan-mod-sqlite:libsqlite3))
  602. $(eval $(call BuildPlugin,sshkey,SSH key decoding,))
  603. $(eval $(call BuildPlugin,stroke,Stroke,+strongswan-charon +strongswan-ipsec))
  604. $(eval $(call BuildPlugin,test-vectors,crypto test vectors,))
  605. $(eval $(call BuildPlugin,uci,UCI config interface,+PACKAGE_strongswan-mod-uci:libuci))
  606. $(eval $(call BuildPlugin,unity,Cisco Unity extension,))
  607. $(eval $(call BuildPlugin,updown,updown firewall,))
  608. $(eval $(call BuildPlugin,vici,Versatile IKE Configuration Interface,))
  609. $(eval $(call BuildPlugin,whitelist,peer identity whitelisting,))
  610. $(eval $(call BuildPlugin,x509,x509 certificate,))
  611. $(eval $(call BuildPlugin,xauth-eap,EAP XAuth backend,))
  612. $(eval $(call BuildPlugin,xauth-generic,generic XAuth backend,))
  613. $(eval $(call BuildPlugin,xcbc,xcbc crypto,))