You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

580 lines
18 KiB

  1. #
  2. # Copyright (C) 2012-2015 OpenWrt.org
  3. #
  4. # This is free software, licensed under the GNU General Public License v2.
  5. # See /LICENSE for more information.
  6. #
  7. include $(TOPDIR)/rules.mk
  8. PKG_NAME:=strongswan
  9. PKG_VERSION:=5.5.3
  10. PKG_RELEASE:=1
  11. PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2
  12. PKG_HASH:=c5ea54b199174708de11af9b8f4ecf28b5b0743d4bc0e380e741f25b28c0f8d4
  13. PKG_SOURCE_URL:=http://download.strongswan.org/ http://download2.strongswan.org/
  14. PKG_LICENSE:=GPL-2.0+
  15. PKG_MAINTAINER:=Stijn Tintel <stijn@linux-ipv6.be>
  16. PKG_MOD_AVAILABLE:= \
  17. addrblock \
  18. aes \
  19. af-alg \
  20. agent \
  21. attr \
  22. attr-sql \
  23. blowfish \
  24. ccm \
  25. cmac \
  26. constraints \
  27. connmark \
  28. coupling \
  29. ctr \
  30. curl \
  31. curve25519 \
  32. des \
  33. dhcp \
  34. dnskey \
  35. duplicheck \
  36. eap-identity \
  37. eap-md5 \
  38. eap-mschapv2 \
  39. eap-radius \
  40. eap-tls \
  41. farp \
  42. fips-prf \
  43. forecast \
  44. gcm \
  45. gcrypt \
  46. gmp \
  47. gmpdh \
  48. ha \
  49. hmac \
  50. kernel-libipsec \
  51. kernel-netlink \
  52. ldap \
  53. led \
  54. load-tester \
  55. nonce \
  56. md4 \
  57. md5 \
  58. mysql \
  59. openssl \
  60. pem \
  61. pgp \
  62. pkcs1 \
  63. pkcs7 \
  64. pkcs8 \
  65. pkcs11 \
  66. pkcs12 \
  67. pubkey \
  68. random \
  69. rc2 \
  70. resolve \
  71. revocation \
  72. sha1 \
  73. sha2 \
  74. smp \
  75. socket-default \
  76. socket-dynamic \
  77. sql \
  78. sqlite \
  79. sshkey \
  80. stroke \
  81. test-vectors \
  82. unity \
  83. uci \
  84. updown \
  85. whitelist \
  86. x509 \
  87. xauth-eap \
  88. xauth-generic \
  89. xcbc
  90. PKG_CONFIG_DEPENDS:= \
  91. CONFIG_STRONGSWAN_ROUTING_TABLE \
  92. CONFIG_STRONGSWAN_ROUTING_TABLE_PRIO \
  93. $(patsubst %,CONFIG_PACKAGE_strongswan-mod-%,$(PKG_MOD_AVAILABLE)) \
  94. PKG_FIXUP:=autoreconf
  95. PKG_INSTALL:=1
  96. PKG_BUILD_PARALLEL:=1
  97. include $(INCLUDE_DIR)/package.mk
  98. define Package/strongswan/Default
  99. SUBMENU:=VPN
  100. SECTION:=net
  101. CATEGORY:=Network
  102. TITLE:=StrongSwan
  103. URL:=http://www.strongswan.org/
  104. endef
  105. define Package/strongswan/description/Default
  106. StrongSwan is an OpenSource IPsec implementation for the Linux operating system.
  107. endef
  108. define Package/strongswan
  109. $(call Package/strongswan/Default)
  110. DEPENDS:= +libpthread +ip \
  111. +kmod-crypto-authenc \
  112. +kmod-ipsec +kmod-ipsec4 +IPV6:kmod-ipsec6 \
  113. +kmod-ipt-ipsec +iptables-mod-ipsec
  114. endef
  115. define Package/strongswan/config
  116. source "$(SOURCE)/Config.in"
  117. endef
  118. define Package/strongswan/description
  119. $(call Package/strongswan/description/Default)
  120. This package contains shared libraries and scripts.
  121. endef
  122. define Package/strongswan-full
  123. $(call Package/strongswan/Default)
  124. TITLE+= (full)
  125. DEPENDS:= +strongswan \
  126. +strongswan-charon \
  127. +strongswan-mod-addrblock \
  128. +strongswan-mod-aes \
  129. +strongswan-mod-af-alg \
  130. +strongswan-mod-agent \
  131. +strongswan-mod-attr \
  132. +strongswan-mod-attr-sql \
  133. +strongswan-mod-blowfish \
  134. +strongswan-mod-ccm \
  135. +strongswan-mod-cmac \
  136. +strongswan-mod-constraints \
  137. +strongswan-mod-connmark \
  138. +strongswan-mod-coupling \
  139. +strongswan-mod-ctr \
  140. +strongswan-mod-curl \
  141. +strongswan-mod-curve25519 \
  142. +strongswan-mod-des \
  143. +strongswan-mod-dhcp \
  144. +strongswan-mod-dnskey \
  145. +strongswan-mod-duplicheck \
  146. +strongswan-mod-eap-identity \
  147. +strongswan-mod-eap-md5 \
  148. +strongswan-mod-eap-mschapv2 \
  149. +strongswan-mod-eap-radius \
  150. +strongswan-mod-eap-tls \
  151. +strongswan-mod-farp \
  152. +strongswan-mod-fips-prf \
  153. +strongswan-mod-forecast \
  154. +strongswan-mod-gcm \
  155. +strongswan-mod-gcrypt \
  156. +strongswan-mod-gmp \
  157. +strongswan-mod-ha \
  158. +strongswan-mod-hmac \
  159. +strongswan-mod-kernel-netlink \
  160. +strongswan-mod-ldap \
  161. +strongswan-mod-led \
  162. +strongswan-mod-load-tester \
  163. +strongswan-mod-nonce \
  164. +strongswan-mod-md4 \
  165. +strongswan-mod-md5 \
  166. +strongswan-mod-mysql \
  167. +strongswan-mod-openssl \
  168. +strongswan-mod-pem \
  169. +strongswan-mod-pgp \
  170. +strongswan-mod-pkcs1 \
  171. +strongswan-mod-pkcs7 \
  172. +strongswan-mod-pkcs8 \
  173. +strongswan-mod-pkcs11 \
  174. +strongswan-mod-pkcs12 \
  175. +strongswan-mod-pubkey \
  176. +strongswan-mod-random \
  177. +strongswan-mod-rc2 \
  178. +strongswan-mod-resolve \
  179. +strongswan-mod-revocation \
  180. +strongswan-mod-sha1 \
  181. +strongswan-mod-sha2 \
  182. +strongswan-mod-smp \
  183. +strongswan-mod-socket-default \
  184. +strongswan-mod-sql \
  185. +strongswan-mod-sqlite \
  186. +strongswan-mod-sshkey \
  187. +strongswan-mod-stroke \
  188. +strongswan-mod-test-vectors \
  189. +strongswan-mod-uci \
  190. +strongswan-mod-unity \
  191. +strongswan-mod-updown \
  192. +strongswan-mod-whitelist \
  193. +strongswan-mod-x509 \
  194. +strongswan-mod-xauth-eap \
  195. +strongswan-mod-xauth-generic \
  196. +strongswan-mod-xcbc \
  197. +strongswan-utils \
  198. @DEVEL
  199. endef
  200. define Package/strongswan-full/description
  201. $(call Package/strongswan/description/Default)
  202. This meta-package contains dependencies for all of the strongswan plugins
  203. except kernel-libipsec,
  204. socket-dynamic and which are omitted in favor of the kernel-netlink and
  205. socket-default plugins.
  206. endef
  207. define Package/strongswan-default
  208. $(call Package/strongswan/Default)
  209. TITLE+= (default)
  210. DEPENDS:= +strongswan \
  211. +strongswan-charon \
  212. +strongswan-mod-aes \
  213. +strongswan-mod-attr \
  214. +strongswan-mod-connmark \
  215. +strongswan-mod-constraints \
  216. +strongswan-mod-des \
  217. +strongswan-mod-dnskey \
  218. +strongswan-mod-fips-prf \
  219. +strongswan-mod-gmp \
  220. +strongswan-mod-hmac \
  221. +strongswan-mod-kernel-netlink \
  222. +strongswan-mod-md5 \
  223. +strongswan-mod-nonce \
  224. +strongswan-mod-pem \
  225. +strongswan-mod-pgp \
  226. +strongswan-mod-pkcs1 \
  227. +strongswan-mod-pubkey \
  228. +strongswan-mod-random \
  229. +strongswan-mod-rc2 \
  230. +strongswan-mod-resolve \
  231. +strongswan-mod-revocation \
  232. +strongswan-mod-sha1 \
  233. +strongswan-mod-sha2 \
  234. +strongswan-mod-socket-default \
  235. +strongswan-mod-sshkey \
  236. +strongswan-mod-stroke \
  237. +strongswan-mod-updown \
  238. +strongswan-mod-x509 \
  239. +strongswan-mod-xauth-generic \
  240. +strongswan-mod-xcbc \
  241. +strongswan-utils
  242. endef
  243. define Package/strongswan-default/description
  244. $(call Package/strongswan/description/Default)
  245. This meta-package contains only dependencies to match upstream defaults.
  246. endef
  247. define Package/strongswan-isakmp
  248. $(call Package/strongswan/Default)
  249. TITLE+= (isakmp)
  250. DEPENDS:= +strongswan \
  251. +strongswan-charon \
  252. +strongswan-mod-aes \
  253. +strongswan-mod-des \
  254. +strongswan-mod-gmpdh \
  255. +strongswan-mod-hmac \
  256. +strongswan-mod-kernel-netlink \
  257. +strongswan-mod-md5 \
  258. +strongswan-mod-nonce \
  259. +strongswan-mod-pubkey \
  260. +strongswan-mod-random \
  261. +strongswan-mod-sha1 \
  262. +strongswan-mod-socket-default \
  263. +strongswan-mod-stroke \
  264. +strongswan-mod-uci \
  265. +strongswan-mod-updown \
  266. +strongswan-utils
  267. endef
  268. define Package/strongswan-isakmp/description
  269. $(call Package/strongswan/description/Default)
  270. This meta-package contains only dependencies to establish ISAKMP /
  271. IKE PSK connections, dropping other capabilities in favor of small size
  272. Can fit most routers even with 4Mb flash (after removing IPv6 support).
  273. endef
  274. define Package/strongswan-minimal
  275. $(call Package/strongswan/Default)
  276. TITLE+= (minimal)
  277. DEPENDS:= +strongswan \
  278. +strongswan-charon \
  279. +strongswan-mod-aes \
  280. +strongswan-mod-gmp \
  281. +strongswan-mod-hmac \
  282. +strongswan-mod-kernel-netlink \
  283. +strongswan-mod-nonce \
  284. +strongswan-mod-pubkey \
  285. +strongswan-mod-random \
  286. +strongswan-mod-sha1 \
  287. +strongswan-mod-socket-default \
  288. +strongswan-mod-stroke \
  289. +strongswan-mod-updown \
  290. +strongswan-mod-x509 \
  291. +strongswan-mod-xcbc
  292. endef
  293. define Package/strongswan-minimal/description
  294. $(call Package/strongswan/description/Default)
  295. This meta-package contains only dependencies for a minimal IKEv2 setup.
  296. endef
  297. define Package/strongswan-charon
  298. $(call Package/strongswan/Default)
  299. TITLE+= IKEv1/IKEv2 keying daemon
  300. DEPENDS:= +strongswan
  301. endef
  302. define Package/strongswan-charon/description
  303. $(call Package/strongswan/description/Default)
  304. This package contains charon, an IKEv2 keying daemon.
  305. endef
  306. define Package/strongswan-utils
  307. $(call Package/strongswan/Default)
  308. TITLE+= utilities
  309. DEPENDS:= +strongswan
  310. endef
  311. define Package/strongswan-utils/description
  312. $(call Package/strongswan/description/Default)
  313. This package contains the pki & scepclient utilities.
  314. endef
  315. define Package/strongswan-libtls
  316. $(call Package/strongswan/Default)
  317. TITLE+= libtls
  318. DEPENDS:= +strongswan
  319. endef
  320. define Package/strongswan-libtls/description
  321. $(call Package/strongswan/description/Default)
  322. This package contains libtls for strongSwan plugins eap-tls, eap-ttls,
  323. eap-peap, tnc-tnccs
  324. endef
  325. define BuildPlugin
  326. define Package/strongswan-mod-$(1)
  327. $$(call Package/strongswan/Default)
  328. TITLE:= StrongSwan $(2) plugin
  329. DEPENDS:= +strongswan $(3)
  330. endef
  331. define Package/strongswan-mod-$(1)/install
  332. $(INSTALL_DIR) $$(1)/etc/strongswan.d/charon
  333. if [ -f $(PKG_INSTALL_DIR)/etc/strongswan.d/charon/$(1).conf ]; then \
  334. $(INSTALL_DATA) $(PKG_INSTALL_DIR)/etc/strongswan.d/charon/$(1).conf $$(1)/etc/strongswan.d/charon/; fi
  335. $(INSTALL_DIR) $$(1)/usr/lib/ipsec/plugins
  336. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-$(1).so \
  337. $$(1)/usr/lib/ipsec/plugins/
  338. $(call Plugin/$(1)/install,$$(1))
  339. endef
  340. $$(eval $$(call BuildPackage,strongswan-mod-$(1)))
  341. endef
  342. CONFIGURE_ARGS+= \
  343. --disable-scripts \
  344. --disable-static \
  345. --disable-fast \
  346. --enable-mediation \
  347. --with-systemdsystemunitdir=no \
  348. $(if $(CONFIG_PACKAGE_strongswan-utils),--enable-pki --enable-scepclient,--disable-pki --disable-scepclient) \
  349. --with-random-device=/dev/random \
  350. --with-urandom-device=/dev/urandom \
  351. --with-routing-table="$(call qstrip,$(CONFIG_STRONGSWAN_ROUTING_TABLE))" \
  352. --with-routing-table-prio="$(call qstrip,$(CONFIG_STRONGSWAN_ROUTING_TABLE_PRIO))" \
  353. $(foreach m,$(PKG_MOD_AVAILABLE), \
  354. $(if $(CONFIG_PACKAGE_strongswan-mod-$(m)),--enable-$(m),--disable-$(m)) \
  355. ) \
  356. ac_cv_search___atomic_load=no
  357. EXTRA_LDFLAGS+= -Wl,-rpath-link,$(STAGING_DIR)/usr/lib
  358. define Package/strongswan/conffiles
  359. /etc/ipsec.d/
  360. /etc/ipsec.conf
  361. /etc/ipsec.secrets
  362. /etc/ipsec.user
  363. /etc/strongswan.conf
  364. /etc/strongswan.d/
  365. endef
  366. define Package/strongswan/install
  367. $(INSTALL_DIR) $(1)/etc
  368. $(INSTALL_CONF) $(PKG_INSTALL_DIR)/etc/ipsec.conf $(1)/etc/
  369. $(INSTALL_CONF) $(PKG_INSTALL_DIR)/etc/strongswan.conf $(1)/etc/
  370. $(INSTALL_DIR) $(1)/usr/lib/ipsec
  371. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libstrongswan.so.* $(1)/usr/lib/ipsec/
  372. $(INSTALL_CONF) ./files/ipsec.secrets $(1)/etc/
  373. $(INSTALL_CONF) ./files/ipsec.user $(1)/etc/
  374. $(INSTALL_DIR) $(1)/etc/init.d
  375. $(INSTALL_BIN) ./files/ipsec.init $(1)/etc/init.d/ipsec
  376. endef
  377. define Package/strongswan-default/install
  378. true
  379. endef
  380. define Package/strongswan-full/install
  381. true
  382. endef
  383. define Package/strongswan-isakmp/install
  384. true
  385. endef
  386. define Package/strongswan-minimal/install
  387. true
  388. endef
  389. define Package/strongswan-charon/install
  390. $(INSTALL_DIR) $(1)/usr/lib/ipsec
  391. $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/lib/ipsec/charon $(1)/usr/lib/ipsec/
  392. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libcharon.so.* $(1)/usr/lib/ipsec/
  393. endef
  394. define Package/strongswan-utils/install
  395. $(INSTALL_DIR) $(1)/usr/sbin
  396. $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/sbin/ipsec $(1)/usr/sbin/
  397. $(INSTALL_DIR) $(1)/usr/bin
  398. $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/pki $(1)/usr/bin/
  399. $(INSTALL_DIR) $(1)/usr/lib/ipsec
  400. $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/lib/ipsec/scepclient $(1)/usr/lib/ipsec/
  401. endef
  402. define Package/strongswan-libtls/install
  403. $(INSTALL_DIR) $(1)/usr/lib/ipsec
  404. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libtls.so.* $(1)/usr/lib/ipsec/
  405. endef
  406. define Plugin/duplicheck/install
  407. $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
  408. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/duplicheck $(1)/usr/lib/ipsec/
  409. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-duplicheck.so $(1)/usr/lib/ipsec/plugins/
  410. endef
  411. define Plugin/eap-radius/install
  412. $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
  413. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libradius.so.* $(1)/usr/lib/ipsec/
  414. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-eap-radius.so $(1)/usr/lib/ipsec/plugins/
  415. endef
  416. define Plugin/attr-sql/install
  417. $(INSTALL_DIR) $(1)/usr/lib/ipsec
  418. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/pool $(1)/usr/lib/ipsec/
  419. endef
  420. define Plugin/stroke/install
  421. $(INSTALL_DIR) $(1)/etc/ipsec.d/aacerts
  422. $(INSTALL_DIR) $(1)/etc/ipsec.d/acerts
  423. $(INSTALL_DIR) $(1)/etc/ipsec.d/cacerts
  424. $(INSTALL_DIR) $(1)/etc/ipsec.d/certs
  425. $(INSTALL_DIR) $(1)/etc/ipsec.d/crls
  426. $(INSTALL_DIR) $(1)/etc/ipsec.d/ocspcerts
  427. $(INSTALL_DIR) $(1)/etc/ipsec.d/private
  428. $(INSTALL_DIR) $(1)/etc/ipsec.d/reqs
  429. $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
  430. $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/lib/ipsec/{starter,stroke} $(1)/usr/lib/ipsec/
  431. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-stroke.so $(1)/usr/lib/ipsec/plugins/
  432. endef
  433. define Plugin/updown/install
  434. $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
  435. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/_updown $(1)/usr/lib/ipsec/
  436. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-updown.so $(1)/usr/lib/ipsec/plugins/
  437. $(INSTALL_DIR) $(1)/etc
  438. endef
  439. define Plugin/whitelist/install
  440. $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
  441. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/whitelist $(1)/usr/lib/ipsec/
  442. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-whitelist.so $(1)/usr/lib/ipsec/plugins/
  443. endef
  444. define Plugin/kernel-libipsec/install
  445. $(INSTALL_DIR) $(1)/usr/lib/ipsec
  446. $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libipsec.so.* $(1)/usr/lib/ipsec/
  447. endef
  448. $(eval $(call BuildPackage,strongswan))
  449. $(eval $(call BuildPackage,strongswan-default))
  450. $(eval $(call BuildPackage,strongswan-full))
  451. $(eval $(call BuildPackage,strongswan-minimal))
  452. $(eval $(call BuildPackage,strongswan-isakmp))
  453. $(eval $(call BuildPackage,strongswan-charon))
  454. $(eval $(call BuildPackage,strongswan-utils))
  455. $(eval $(call BuildPackage,strongswan-libtls))
  456. $(eval $(call BuildPlugin,addrblock,RFC 3779 address block constraint support,))
  457. $(eval $(call BuildPlugin,aes,AES crypto,))
  458. $(eval $(call BuildPlugin,af-alg,AF_ALG crypto interface to Linux Crypto API,+kmod-crypto-user))
  459. $(eval $(call BuildPlugin,agent,SSH agent signing,))
  460. $(eval $(call BuildPlugin,attr,file based config,))
  461. $(eval $(call BuildPlugin,attr-sql,SQL based config,+strongswan-charon))
  462. $(eval $(call BuildPlugin,blowfish,Blowfish crypto,))
  463. $(eval $(call BuildPlugin,ccm,CCM AEAD wrapper crypto,))
  464. $(eval $(call BuildPlugin,cmac,CMAC crypto,))
  465. $(eval $(call BuildPlugin,connmark,netfilter connection marking,))
  466. $(eval $(call BuildPlugin,constraints,advanced X509 constraint checking,))
  467. $(eval $(call BuildPlugin,coupling,IKEv2 plugin to couple peer certificates permanently to authentication,))
  468. $(eval $(call BuildPlugin,ctr,Counter Mode wrapper crypto,))
  469. $(eval $(call BuildPlugin,curl,cURL fetcher plugin,+PACKAGE_strongswan-mod-curl:libcurl))
  470. $(eval $(call BuildPlugin,curve25519,Curve25519 Diffie-Hellman,))
  471. $(eval $(call BuildPlugin,des,DES crypto,))
  472. $(eval $(call BuildPlugin,dhcp,DHCP based attribute provider,))
  473. $(eval $(call BuildPlugin,dnskey,DNS RR key decoding,))
  474. $(eval $(call BuildPlugin,duplicheck,advanced duplicate checking,))
  475. $(eval $(call BuildPlugin,eap-identity,EAP identity helper,))
  476. $(eval $(call BuildPlugin,eap-md5,EAP MD5 (CHAP) EAP auth,))
  477. $(eval $(call BuildPlugin,eap-mschapv2,EAP MS-CHAPv2 EAP auth,+strongswan-mod-md4 +strongswan-mod-des))
  478. $(eval $(call BuildPlugin,eap-radius,EAP RADIUS auth,))
  479. $(eval $(call BuildPlugin,eap-tls,EAP TLS auth,+strongswan-libtls))
  480. $(eval $(call BuildPlugin,farp,fake arp respsonses,))
  481. $(eval $(call BuildPlugin,fips-prf,FIPS PRF crypto,+strongswan-mod-sha1))
  482. $(eval $(call BuildPlugin,forecast,forward multi/broadcast traffic,+kmod-ipt-conntrack-extra))
  483. $(eval $(call BuildPlugin,gcm,GCM AEAD wrapper crypto,))
  484. $(eval $(call BuildPlugin,gcrypt,libgcrypt,+PACKAGE_strongswan-mod-gcrypt:libgcrypt))
  485. $(eval $(call BuildPlugin,gmp,libgmp,+PACKAGE_strongswan-mod-gmp:libgmp))
  486. $(eval $(call BuildPlugin,gmpdh,DH-Groups; no libgmp dep,))
  487. $(eval $(call BuildPlugin,ha,high availability cluster,))
  488. $(eval $(call BuildPlugin,hmac,HMAC crypto,))
  489. $(eval $(call BuildPlugin,kernel-libipsec,libipsec kernel interface,))
  490. $(eval $(call BuildPlugin,kernel-netlink,netlink kernel interface,))
  491. $(eval $(call BuildPlugin,ldap,LDAP,+PACKAGE_strongswan-mod-ldap:libopenldap))
  492. $(eval $(call BuildPlugin,led,LED blink on IKE activity,))
  493. $(eval $(call BuildPlugin,load-tester,load testing,))
  494. $(eval $(call BuildPlugin,nonce,nonce genereation,))
  495. $(eval $(call BuildPlugin,md4,MD4 crypto,))
  496. $(eval $(call BuildPlugin,md5,MD5 crypto,))
  497. $(eval $(call BuildPlugin,mysql,MySQL database interface,+strongswan-mod-sql +PACKAGE_strongswan-mod-mysql:libmysqlclient-r))
  498. $(eval $(call BuildPlugin,openssl,OpenSSL crypto,+PACKAGE_strongswan-mod-openssl:libopenssl))
  499. $(eval $(call BuildPlugin,pem,PEM decoding,))
  500. $(eval $(call BuildPlugin,pgp,PGP key decoding,))
  501. $(eval $(call BuildPlugin,pkcs1,PKCS1 key decoding,))
  502. $(eval $(call BuildPlugin,pkcs7,PKCS7 key decoding,))
  503. $(eval $(call BuildPlugin,pkcs8,PKCS8 key decoding,))
  504. $(eval $(call BuildPlugin,pkcs11,PKCS11 key decoding,))
  505. $(eval $(call BuildPlugin,pkcs12,PKCS12 key decoding,))
  506. $(eval $(call BuildPlugin,pubkey,raw public key,))
  507. $(eval $(call BuildPlugin,random,RNG,))
  508. $(eval $(call BuildPlugin,rc2,RC2 crypto,))
  509. $(eval $(call BuildPlugin,resolve,DNS resolver,))
  510. $(eval $(call BuildPlugin,revocation,X509 CRL/OCSP revocation,))
  511. $(eval $(call BuildPlugin,sha1,SHA1 crypto,))
  512. $(eval $(call BuildPlugin,sha2,SHA2 crypto,))
  513. $(eval $(call BuildPlugin,smp,SMP configuration and control interface,+PACKAGE_strongswan-mod-smp:libxml2))
  514. $(eval $(call BuildPlugin,socket-default,default socket implementation for charon,))
  515. $(eval $(call BuildPlugin,socket-dynamic,dynamic socket implementation for charon,))
  516. $(eval $(call BuildPlugin,sql,SQL database interface,))
  517. $(eval $(call BuildPlugin,sqlite,SQLite database interface,+strongswan-mod-sql +PACKAGE_strongswan-mod-sqlite:libsqlite3))
  518. $(eval $(call BuildPlugin,sshkey,SSH key decoding,))
  519. $(eval $(call BuildPlugin,stroke,Stroke,+strongswan-charon +strongswan-utils))
  520. $(eval $(call BuildPlugin,test-vectors,crypto test vectors,))
  521. $(eval $(call BuildPlugin,uci,UCI config interface,+PACKAGE_strongswan-mod-uci:libuci))
  522. $(eval $(call BuildPlugin,unity,Cisco Unity extension,))
  523. $(eval $(call BuildPlugin,updown,updown firewall,))
  524. $(eval $(call BuildPlugin,whitelist,peer identity whitelisting,))
  525. $(eval $(call BuildPlugin,x509,x509 certificate,))
  526. $(eval $(call BuildPlugin,xauth-eap,EAP XAuth backend,))
  527. $(eval $(call BuildPlugin,xauth-generic,generic XAuth backend,))
  528. $(eval $(call BuildPlugin,xcbc,xcbc crypto,))