Closes #3905.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

Patch 101-musl-fixes defines __kernel_nlink_t as void; but using
a pre-3.6.11 kernel on an arm cortex defines __kernel_nlink_t as
unsigned short using uclibc
Fix the compile issue by not redefining __kernel_nlink_t

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>

musl.h was included before _GNU_SOURCE in 101-musl-fixes patch
leading to compilation issue on gcc (RTLD_DEFAULT not being
defined in dlfcn.h due to __USE_GNU not being set).
As described in the feature test macro man page feature macro
can be defined in the source code but need to be defined before
including any headers.

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

Closes #1868.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

The default busybox config used by OpenWrt does not enable floating
point number support for the sleep applet. This can cause an error when
stopping or restarting strongswan:

sleep: invalid number '0.1'

Replace the float with an integer to fix this.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

Signed-off-by: Stefan Weil <sw@weilnetz.de>

Signed-off-by: Steven Barth <steven@midlink.org>

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

See https://wiki.strongswan.org/issues/1213

Removed the changes to charon-xpc.c because they didn't apply and are
only used on OS X anyway.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

Fixes CVE-2015-8023

Signed-off-by: Steven Barth <steven@midlink.org>

gmpdh plugin implements DH Groups (same as normal GMP plugin), but links to GMP statically and is stripped of all RSA based stuff. Binary size for plugin is ~20kbytes with no dependency on libgmp (200+ kbytes after squash), easilly fitting into flash space restricted devices.

strongswan-isakmp metapackage defines a minimal set of strongswan plugins (including gmpdh) for ISAKMP / IKEv1 PSK tunnels. Will fit even 4mb routers (like tplink wr841n) with disabled IPv6 support and packages (so its a trade - IPv6 or ipsec tunnels).

Signed-of-by: Mikalai Miadzvedz <brainsucker.na@gmail.com>

Signed-off-by: Steven Barth <steven@midlink.org>

Makes kmod-ipsec6 requirement dependent on IPv6 support for packages.
This allows to disable unnecessary IPv6 kernel modules, saving
considerable amount of space.

Signed-off-by: Marcin Jurkowski <marcin1j@gmail.com>

Signed-off-by: Dirk Feytons <dirk.feytons@gmail.com>

Signed-off-by: Ulrich Weber <uw@ocedo.com>

When only strongswan-minimal is selected, libtls.so will not be built
yet package strongswan will still try to copy the file causing build
failure.

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

Signed-off-by: Adam Lebsack <alebsack@gmail.com>

Signed-off-by: Steven Barth <steven@midlink.org>

Signed-off-by: Steven Barth <steven@midlink.org>

Signed-off-by: Steven Barth <steven@midlink.org>

Signed-off-by: Steven Barth <steven@midlink.org>

Signed-off-by: Steven Barth <steven@midlink.org>

Signed-off-by: Steven Barth <steven@midlink.org>

Signed-off-by: Steven Barth <steven@midlink.org>

Signed-off-by: Steven Barth <steven@midlink.org>

Signed-off-by: Steven Barth <steven@midlink.org>

Signed-off-by: Steven Barth <steven@midlink.org>

Signed-off-by: Steven Barth <steven@midlink.org>

Signed-off-by: Steven Barth <steven@midlink.org>