[Pkg-swan-devel] Bug#739641: Bug#739641: Include build option --enable-kernel-libipsec for userland IPSec

[C.J. Adams-Collier KF7BMP]

I've confirmed that the package builds with these two changes:

cjac at foxtrot:/usr/src/deb$ diff -u strongswan-5.1.1/debian/libstrongswan.install strongswan-5.1.1-cjac/debian/libstrongswan.install 
--- strongswan-5.1.1/debian/libstrongswan.install	2014-02-04 05:04:50.000000000 -0800
+++ strongswan-5.1.1-cjac/debian/libstrongswan.install	2014-02-21 10:56:41.680283978 -0800
@@ -6,6 +6,7 @@
 usr/lib/ipsec/libradius.so*
 usr/lib/ipsec/libtls.so*
 usr/lib/ipsec/libpttls.so*
+usr/lib/ipsec/libipsec.so*
 usr/lib/ipsec/plugins/libstrongswan-gmp.so
 usr/lib/ipsec/plugins/libstrongswan-openssl.so
 usr/lib/ipsec/plugins/libstrongswan-x509.so
cjac at foxtrot:/usr/src/deb$ diff -u strongswan-5.1.1/debian/rules strongswan-5.1.1-cjac/debian/rules 
--- strongswan-5.1.1/debian/rules	2014-02-04 05:04:50.000000000 -0800
+++ strongswan-5.1.1-cjac/debian/rules	2014-02-21 10:46:11.152366245 -0800
@@ -21,6 +21,7 @@
 		--enable-lookip \
 		--enable-error-notify \
 		--enable-unity \
+    --enable-kernel-libipsec \
 		--disable-blowfish --disable-des # BSD-Young license
 	#--with-user=strongswan --with-group=nogroup
 	#	--enable-kernel-pfkey --enable-kernel-klips \


On Thu, 2014-02-20 at 15:41 -0500, Tony Zhou wrote:
> Package: strongswan
> Version: 5.1.1-1~bpo70+1
> Severity: wishlist
> 
> Dear Maintainer,
> 
> Would you kindly please include the build option 
> '--enable-kernel-libipsec' for future strongswan packages? The 
> description to this
> parameter could be found here on Strongswan wiki: 
> http://wiki.strongswan.org/projects/strongswan/wiki/Kernel-libipsec, 
> which says
> this plugin provides a userland IPSec implementation using TUN devices. 
> It is particularly useful for virtualized servers like OpenVZ
> which does not have kernel modules loaded for IPSec.
> 
> Thanks,
> TZ
> 
> -- System Information:
> Debian Release: 7.4
>    APT prefers stable-updates
>    APT policy: (500, 'stable-updates'), (500, 'stable')
> Architecture: i386 (i686)
> 
> Kernel: Linux 3.2.0-042stab084.3 (SMP w/2 CPU cores)
> Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: 
> LC_ALL set to en_US.UTF-8)
> Shell: /bin/sh linked to /bin/dash
> 
> _______________________________________________
> Pkg-swan-devel mailing list
> Pkg-swan-devel at lists.alioth.debian.org
> http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-swan-devel

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 490 bytes
Desc: This is a digitally signed message part
URL: <http://lists.alioth.debian.org/pipermail/pkg-swan-devel/attachments/20140221/72211c0e/attachment.sig>