[Pkg-swan-devel] [strongswan] 01/02: Merge tag 'v5.1.3-2' into strongswan-wheezy-backports

Romain Francoise rfrancoise at moszumanska.debian.org
Mon May 12 18:01:33 UTC 2014


This is an automated email from the git hooks/post-receive script.

rfrancoise pushed a commit to branch strongswan-wheezy-backports
in repository strongswan.

commit 377c99d2e2c909a15bcedf013952d6f2f1bcc040
Merge: 5352692 380d66f
Author: Romain Francoise <rfrancoise at debian.org>
Date:   Mon May 12 19:41:55 2014 +0200

    Merge tag 'v5.1.3-2' into strongswan-wheezy-backports
    
    Debian release 5.1.3-2
    
    * tag 'v5.1.3-2':
      Update debian/changelog
      Disable the new libtls test suite
      Install new pki --acert man page
      Deal with openac deletion
      debian/patches/01_fix-manpages.patch: refresh against upstream
      Drop patches previously from upstream
      Update debian/changelog
      debian/control: depend on iproute2 | iproute (#744832)
      Import upstream version 5.1.3

 Android.common.mk                                  |    2 +-
 Makefile.in                                        |    1 -
 NEWS                                               |   22 +
 conf/Makefile.in                                   |    1 -
 conf/format-options.py                             |    9 +-
 conf/options/tools.conf                            |    7 -
 conf/options/tools.opt                             |    3 -
 conf/plugins/eap-radius.conf                       |    4 +
 conf/plugins/eap-radius.opt                        |    4 +
 conf/plugins/imc-attestation.conf                  |    3 +
 conf/plugins/imc-attestation.opt                   |    5 +-
 conf/plugins/imv-attestation.conf                  |    3 +
 conf/plugins/imv-attestation.opt                   |    3 +
 conf/strongswan.conf.5.main                        |  608 ++---
 configure                                          | 2600 +++++++++++---------
 configure.ac                                       |  319 +--
 debian/changelog                                   |   15 +
 debian/control                                     |    3 +-
 debian/copyright                                   |    5 -
 debian/patches/01_fix-manpages.patch               |   10 -
 debian/patches/02_disable-libtls-tests.patch       |    8 +
 ...Fix-filtered-enumerator-tests-on-64-bit-b.patch |   77 -
 .../03_unit-tests-Fix-chunk-clear-armel.patch      |   19 -
 debian/patches/04_cve-2014-2338.patch              |   36 -
 debian/patches/series                              |    4 +-
 debian/strongswan-starter.install                  |    3 +-
 init/Makefile.in                                   |    1 -
 init/systemd/Makefile.in                           |    1 -
 m4/macros/enable-disable.m4                        |    4 +-
 man/Makefile.in                                    |    1 -
 scripts/Makefile.in                                |    1 -
 scripts/aes-test.c                                 |    2 +-
 scripts/crypt_burn.c                               |    2 +-
 scripts/tls_test.c                                 |    4 +-
 src/Makefile.am                                    |    2 +-
 src/Makefile.in                                    |    9 +-
 src/_copyright/Makefile.in                         |    1 -
 src/_updown/Makefile.in                            |    1 -
 src/_updown_espmark/Makefile.in                    |    1 -
 src/charon-cmd/Makefile.in                         |    1 -
 src/charon-nm/Makefile.in                          |    1 -
 src/charon-nm/nm/nm_service.c                      |    5 +-
 src/charon-tkm/Makefile.in                         |    1 -
 src/charon/Makefile.in                             |    1 -
 src/checksum/Makefile.am                           |    1 -
 src/checksum/Makefile.in                           |    4 +-
 src/conftest/Makefile.in                           |    1 -
 src/dumm/Makefile.in                               |    1 -
 src/include/Makefile.in                            |    1 -
 src/ipsec/Makefile.in                              |    1 -
 src/ipsec/_ipsec.8                                 |    2 +-
 src/ipsec/_ipsec.in                                |    1 -
 src/libcharon/Makefile.in                          |    1 -
 src/libcharon/config/ike_cfg.c                     |    2 +-
 src/libcharon/config/proposal.c                    |   23 +-
 src/libcharon/encoding/payloads/cert_payload.c     |    7 +-
 .../encoding/payloads/proposal_substructure.c      |   16 +-
 src/libcharon/plugins/addrblock/Makefile.in        |    1 -
 src/libcharon/plugins/android_dns/Makefile.in      |    1 -
 src/libcharon/plugins/android_log/Makefile.in      |    1 -
 src/libcharon/plugins/certexpire/Makefile.in       |    1 -
 src/libcharon/plugins/coupling/Makefile.in         |    1 -
 src/libcharon/plugins/dhcp/Makefile.in             |    1 -
 src/libcharon/plugins/dhcp/dhcp_provider.c         |   19 +-
 src/libcharon/plugins/dnscert/Makefile.in          |    1 -
 src/libcharon/plugins/duplicheck/Makefile.in       |    1 -
 src/libcharon/plugins/eap_aka/Makefile.in          |    1 -
 src/libcharon/plugins/eap_aka_3gpp2/Makefile.in    |    1 -
 src/libcharon/plugins/eap_dynamic/Makefile.in      |    1 -
 src/libcharon/plugins/eap_gtc/Makefile.in          |    1 -
 src/libcharon/plugins/eap_identity/Makefile.in     |    1 -
 src/libcharon/plugins/eap_md5/Makefile.in          |    1 -
 src/libcharon/plugins/eap_mschapv2/Makefile.in     |    1 -
 src/libcharon/plugins/eap_mschapv2/eap_mschapv2.c  |    4 +
 src/libcharon/plugins/eap_peap/Makefile.in         |    1 -
 src/libcharon/plugins/eap_radius/Makefile.in       |    1 -
 .../plugins/eap_radius/eap_radius_accounting.c     |    7 +-
 .../plugins/eap_radius/eap_radius_forward.c        |   22 +-
 src/libcharon/plugins/eap_sim/Makefile.in          |    1 -
 src/libcharon/plugins/eap_sim_file/Makefile.in     |    1 -
 src/libcharon/plugins/eap_sim_pcsc/Makefile.in     |    1 -
 .../plugins/eap_simaka_pseudonym/Makefile.in       |    1 -
 .../plugins/eap_simaka_reauth/Makefile.in          |    1 -
 src/libcharon/plugins/eap_simaka_sql/Makefile.in   |    1 -
 src/libcharon/plugins/eap_tls/Makefile.in          |    1 -
 src/libcharon/plugins/eap_tnc/Makefile.in          |    1 -
 src/libcharon/plugins/eap_ttls/Makefile.in         |    1 -
 src/libcharon/plugins/error_notify/Makefile.in     |    1 -
 src/libcharon/plugins/farp/Makefile.in             |    1 -
 src/libcharon/plugins/ha/Makefile.in               |    1 -
 src/libcharon/plugins/ha/ha_cache.c                |   18 +-
 src/libcharon/plugins/ipseckey/Makefile.in         |    1 -
 src/libcharon/plugins/kernel_libipsec/Makefile.in  |    1 -
 src/libcharon/plugins/led/Makefile.in              |    1 -
 src/libcharon/plugins/load_tester/Makefile.in      |    1 -
 src/libcharon/plugins/lookip/Makefile.in           |    1 -
 src/libcharon/plugins/maemo/Makefile.in            |    1 -
 src/libcharon/plugins/medcli/Makefile.in           |    1 -
 src/libcharon/plugins/medsrv/Makefile.in           |    1 -
 src/libcharon/plugins/osx_attr/Makefile.in         |    1 -
 src/libcharon/plugins/radattr/Makefile.in          |    1 -
 src/libcharon/plugins/smp/Makefile.in              |    1 -
 src/libcharon/plugins/socket_default/Makefile.in   |    1 -
 src/libcharon/plugins/socket_dynamic/Makefile.in   |    1 -
 src/libcharon/plugins/sql/Makefile.in              |    1 -
 src/libcharon/plugins/stroke/Makefile.in           |    1 -
 src/libcharon/plugins/stroke/stroke_list.c         |   85 +-
 src/libcharon/plugins/systime_fix/Makefile.in      |    1 -
 src/libcharon/plugins/tnc_ifmap/Makefile.in        |    1 -
 src/libcharon/plugins/tnc_ifmap/tnc_ifmap_soap.c   |    6 +-
 src/libcharon/plugins/tnc_pdp/Makefile.am          |    3 +-
 src/libcharon/plugins/tnc_pdp/Makefile.in          |   21 +-
 src/libcharon/plugins/uci/Makefile.in              |    1 -
 src/libcharon/plugins/unit_tester/Makefile.in      |    1 -
 src/libcharon/plugins/unity/Makefile.in            |    1 -
 src/libcharon/plugins/updown/Makefile.in           |    1 -
 src/libcharon/plugins/whitelist/Makefile.in        |    1 -
 src/libcharon/plugins/xauth_eap/Makefile.in        |    1 -
 src/libcharon/plugins/xauth_generic/Makefile.in    |    1 -
 src/libcharon/plugins/xauth_noauth/Makefile.in     |    1 -
 src/libcharon/plugins/xauth_pam/Makefile.in        |    1 -
 src/libcharon/sa/ikev2/keymat_v2.c                 |   29 +-
 src/libcharon/sa/ikev2/task_manager_v2.c           |    9 +
 src/libcharon/sa/ikev2/tasks/child_delete.c        |   12 +
 src/libcharon/sa/ikev2/tasks/ike_cert_post.c       |  139 +-
 src/libcharon/sa/ikev2/tasks/ike_cert_pre.c        |   28 +-
 src/libfast/Makefile.in                            |    1 -
 src/libhydra/Makefile.in                           |    1 -
 src/libhydra/plugins/attr/Makefile.in              |    1 -
 src/libhydra/plugins/attr/attr_provider.c          |    9 +-
 src/libhydra/plugins/attr_sql/Makefile.in          |    1 -
 src/libhydra/plugins/kernel_klips/Makefile.in      |    1 -
 src/libhydra/plugins/kernel_netlink/Makefile.in    |    1 -
 src/libhydra/plugins/kernel_pfkey/Makefile.in      |    1 -
 src/libhydra/plugins/kernel_pfroute/Makefile.in    |    1 -
 .../plugins/kernel_pfroute/kernel_pfroute_net.c    |   10 +-
 src/libhydra/plugins/resolve/Makefile.in           |    1 -
 src/libimcv/Makefile.in                            |    1 -
 src/libimcv/imv/data.sql                           |   24 +
 src/libimcv/plugins/imc_os/Makefile.in             |    1 -
 src/libimcv/plugins/imc_scanner/Makefile.in        |    1 -
 src/libimcv/plugins/imc_test/Makefile.in           |    1 -
 src/libimcv/plugins/imv_os/Makefile.in             |    1 -
 src/libimcv/plugins/imv_scanner/Makefile.in        |    1 -
 src/libimcv/plugins/imv_test/Makefile.in           |    1 -
 src/libipsec/Makefile.in                           |    1 -
 src/libipsec/esp_context.c                         |    3 +-
 src/libpts/Makefile.in                             |    1 -
 src/libpts/plugins/imc_attestation/Makefile.in     |    1 -
 .../plugins/imc_attestation/imc_attestation.c      |    7 +-
 src/libpts/plugins/imc_swid/Makefile.in            |    1 -
 src/libpts/plugins/imv_attestation/Makefile.in     |    1 -
 src/libpts/plugins/imv_attestation/attest.c        |    4 +-
 .../imv_attestation/imv_attestation_agent.c        |   21 +-
 src/libpts/plugins/imv_swid/Makefile.in            |    1 -
 src/libpts/pts/pts.c                               |    3 +-
 src/libpts/pts/pts_database.c                      |   21 +-
 src/libpts/pts/pts_dh_group.c                      |   15 +-
 src/libpts/pts/pts_dh_group.h                      |    9 +-
 src/libpttls/Makefile.in                           |    1 -
 src/libpttls/pt_tls_client.c                       |    3 +-
 src/libpttls/pt_tls_server.c                       |    2 +-
 src/libradius/Makefile.in                          |    1 -
 src/libsimaka/Makefile.in                          |    1 -
 src/libstrongswan/Android.mk                       |    2 +-
 src/libstrongswan/Makefile.am                      |   10 +-
 src/libstrongswan/Makefile.in                      |  156 +-
 src/libstrongswan/asn1/oid.c                       |  485 ++--
 src/libstrongswan/asn1/oid.h                       |  189 +-
 src/libstrongswan/asn1/oid.txt                     |   41 +-
 src/libstrongswan/collections/array.c              |    2 +-
 src/libstrongswan/collections/hashtable.c          |   24 +-
 src/libstrongswan/collections/hashtable.h          |   21 +-
 src/libstrongswan/credentials/auth_cfg.c           |   12 +-
 src/libstrongswan/credentials/auth_cfg.h           |    2 +
 src/libstrongswan/credentials/builder.c            |    3 +-
 src/libstrongswan/credentials/builder.h            |    4 +-
 src/libstrongswan/credentials/certificates/ac.h    |   25 +-
 src/libstrongswan/credentials/certificates/x509.h  |   22 +-
 src/libstrongswan/credentials/cred_encoding.c      |   19 +-
 .../credentials/ietf_attributes/ietf_attributes.c  |  534 ----
 .../credentials/ietf_attributes/ietf_attributes.h  |   92 -
 .../credentials/sets/auth_cfg_wrapper.c            |    3 +-
 src/libstrongswan/crypto/aead.h                    |    9 +
 src/libstrongswan/crypto/crypto_factory.c          |   47 +-
 src/libstrongswan/crypto/crypto_factory.h          |    6 +-
 src/libstrongswan/crypto/crypto_tester.c           |   21 +-
 src/libstrongswan/crypto/crypto_tester.h           |    8 +-
 src/libstrongswan/library.c                        |    7 +-
 src/libstrongswan/plugins/acert/Makefile.am        |   17 +
 .../plugins/{nonce => acert}/Makefile.in           |   45 +-
 src/libstrongswan/plugins/acert/acert_plugin.c     |   99 +
 .../plugins/acert/acert_plugin.h}                  |   32 +-
 src/libstrongswan/plugins/acert/acert_validator.c  |  149 ++
 src/libstrongswan/plugins/acert/acert_validator.h  |   49 +
 src/libstrongswan/plugins/aes/Makefile.in          |    1 -
 src/libstrongswan/plugins/af_alg/Makefile.in       |    1 -
 src/libstrongswan/plugins/agent/Makefile.in        |    1 -
 src/libstrongswan/plugins/blowfish/Makefile.in     |    1 -
 src/libstrongswan/plugins/ccm/Makefile.in          |    1 -
 src/libstrongswan/plugins/ccm/ccm_aead.c           |    8 +-
 src/libstrongswan/plugins/ccm/ccm_aead.h           |    4 +-
 src/libstrongswan/plugins/cmac/Makefile.in         |    1 -
 src/libstrongswan/plugins/constraints/Makefile.in  |    1 -
 src/libstrongswan/plugins/ctr/Makefile.in          |    1 -
 src/libstrongswan/plugins/curl/Makefile.in         |    1 -
 src/libstrongswan/plugins/des/Makefile.in          |    1 -
 src/libstrongswan/plugins/dnskey/Makefile.in       |    1 -
 src/libstrongswan/plugins/fips_prf/Makefile.in     |    1 -
 src/libstrongswan/plugins/gcm/Makefile.in          |    1 -
 src/libstrongswan/plugins/gcm/gcm_aead.c           |    8 +-
 src/libstrongswan/plugins/gcm/gcm_aead.h           |    4 +-
 src/libstrongswan/plugins/gcrypt/Makefile.in       |    1 -
 src/libstrongswan/plugins/gmp/Makefile.in          |    1 -
 src/libstrongswan/plugins/hmac/Makefile.in         |    1 -
 src/libstrongswan/plugins/keychain/Makefile.in     |    1 -
 src/libstrongswan/plugins/ldap/Makefile.in         |    1 -
 src/libstrongswan/plugins/md4/Makefile.in          |    1 -
 src/libstrongswan/plugins/md5/Makefile.in          |    1 -
 src/libstrongswan/plugins/mysql/Makefile.in        |    1 -
 src/libstrongswan/plugins/nonce/Makefile.in        |    1 -
 src/libstrongswan/plugins/ntru/Makefile.am         |   16 +-
 src/libstrongswan/plugins/ntru/Makefile.in         |   65 +-
 src/libstrongswan/plugins/ntru/ntru_convert.c      |  452 ++++
 src/libstrongswan/plugins/ntru/ntru_convert.h      |  147 ++
 .../plugins/ntru/ntru_crypto/ntru_crypto.h         |  235 --
 .../ntru/ntru_crypto/ntru_crypto_ntru_convert.c    |  581 -----
 .../ntru/ntru_crypto/ntru_crypto_ntru_convert.h    |  183 --
 .../ntru/ntru_crypto/ntru_crypto_ntru_encrypt.c    | 1034 --------
 .../ntru_crypto/ntru_crypto_ntru_encrypt_key.c     |  360 ---
 .../ntru_crypto/ntru_crypto_ntru_encrypt_key.h     |  167 --
 .../ntru_crypto_ntru_encrypt_param_sets.h          |  101 -
 .../ntru/ntru_crypto/ntru_crypto_ntru_poly.c       |  242 --
 .../ntru/ntru_crypto/ntru_crypto_ntru_poly.h       |   96 -
 src/libstrongswan/plugins/ntru/ntru_drbg.c         |   24 +-
 src/libstrongswan/plugins/ntru/ntru_drbg.h         |    7 +
 src/libstrongswan/plugins/ntru/ntru_ke.c           |  155 +-
 ..._ntru_encrypt_param_sets.c => ntru_param_set.c} |  151 +-
 src/libstrongswan/plugins/ntru/ntru_param_set.h    |  118 +
 src/libstrongswan/plugins/ntru/ntru_poly.c         |   50 +-
 src/libstrongswan/plugins/ntru/ntru_private_key.c  |  892 +++++++
 src/libstrongswan/plugins/ntru/ntru_private_key.h  |   92 +
 src/libstrongswan/plugins/ntru/ntru_public_key.c   |  408 +++
 src/libstrongswan/plugins/ntru/ntru_public_key.h   |   88 +
 src/libstrongswan/plugins/ntru/ntru_trits.c        |    3 +-
 src/libstrongswan/plugins/openssl/Makefile.in      |    1 -
 src/libstrongswan/plugins/openssl/openssl_gcm.c    |   10 +-
 src/libstrongswan/plugins/openssl/openssl_gcm.h    |    4 +-
 .../plugins/openssl/openssl_rsa_public_key.c       |   16 +-
 src/libstrongswan/plugins/padlock/Makefile.in      |    1 -
 src/libstrongswan/plugins/pem/Makefile.in          |    1 -
 src/libstrongswan/plugins/pem/pem_encoder.c        |    7 +-
 src/libstrongswan/plugins/pgp/Makefile.in          |    1 -
 src/libstrongswan/plugins/pkcs1/Makefile.in        |    1 -
 src/libstrongswan/plugins/pkcs1/pkcs1_plugin.c     |    3 +
 src/libstrongswan/plugins/pkcs11/Makefile.in       |    1 -
 src/libstrongswan/plugins/pkcs12/Makefile.in       |    1 -
 src/libstrongswan/plugins/pkcs7/Makefile.in        |    1 -
 src/libstrongswan/plugins/pkcs8/Makefile.in        |    1 -
 src/libstrongswan/plugins/plugin_feature.c         |   32 +-
 src/libstrongswan/plugins/plugin_loader.c          |    1 +
 src/libstrongswan/plugins/pubkey/Makefile.in       |    1 -
 src/libstrongswan/plugins/random/Makefile.in       |    1 -
 src/libstrongswan/plugins/rc2/Makefile.in          |    1 -
 src/libstrongswan/plugins/rdrand/Makefile.in       |    1 -
 src/libstrongswan/plugins/revocation/Makefile.in   |    1 -
 .../plugins/revocation/revocation_validator.c      |  127 +-
 src/libstrongswan/plugins/sha1/Makefile.in         |    1 -
 src/libstrongswan/plugins/sha2/Makefile.in         |    1 -
 src/libstrongswan/plugins/soup/Makefile.in         |    1 -
 src/libstrongswan/plugins/sqlite/Makefile.in       |    1 -
 src/libstrongswan/plugins/sshkey/Makefile.in       |    1 -
 src/libstrongswan/plugins/test_vectors/Makefile.in |    1 -
 .../plugins/test_vectors/test_vectors.h            |   13 +-
 .../plugins/test_vectors/test_vectors/aes_ccm.c    |   33 +-
 .../plugins/test_vectors/test_vectors/aes_gcm.c    |  125 +-
 src/libstrongswan/plugins/unbound/Makefile.in      |    1 -
 src/libstrongswan/plugins/x509/Makefile.in         |    1 -
 src/libstrongswan/plugins/x509/x509_ac.c           |  383 ++-
 src/libstrongswan/plugins/x509/x509_cert.c         |   15 +-
 src/libstrongswan/plugins/x509/x509_ocsp_request.c |    2 +-
 src/libstrongswan/plugins/x509/x509_plugin.c       |    4 +-
 src/libstrongswan/plugins/xcbc/Makefile.in         |    1 -
 src/libstrongswan/tests/Makefile.in                |    1 -
 src/libstrongswan/tests/suites/test_chunk.c        |    9 +-
 src/libstrongswan/tests/suites/test_enumerator.c   |   24 +-
 src/libstrongswan/tests/suites/test_ntru.c         |  524 +++-
 src/libstrongswan/tests/suites/test_vectors.c      |   13 +-
 src/libstrongswan/tests/test_runner.c              |  121 +-
 src/libstrongswan/tests/test_suite.c               |    3 +-
 src/libstrongswan/threading/thread.c               |    2 +
 src/libstrongswan/utils/leak_detective.c           |   15 +-
 src/libstrongswan/utils/leak_detective.h           |   18 +-
 src/libstrongswan/utils/settings.c                 |   20 +-
 src/libstrongswan/utils/test.c                     |   53 +-
 src/libstrongswan/utils/test.h                     |   34 +-
 src/libtls/Makefile.am                             |    5 +-
 src/libtls/Makefile.in                             |  201 +-
 src/libtls/tests/Makefile.am                       |   22 +
 {scripts => src/libtls/tests}/Makefile.in          |  448 ++--
 src/libtls/tests/suites/test_socket.c              |  524 ++++
 src/libtls/tests/suites/test_suites.c              |  247 ++
 src/libtls/tests/tls_tests.c                       |   57 +
 src/{pki/pki.h => libtls/tests/tls_tests.h}        |   27 +-
 src/libtls/tls.c                                   |   17 +-
 src/libtls/tls.h                                   |    2 +
 src/libtls/tls_aead.c                              |  217 ++
 src/libtls/tls_aead.h                              |  156 ++
 src/libtls/tls_aead_expl.c                         |  222 ++
 src/libtls/tls_aead_impl.c                         |  214 ++
 src/libtls/tls_aead_null.c                         |  159 ++
 src/libtls/tls_crypto.c                            |  588 +++--
 src/libtls/tls_crypto.h                            |    9 +
 src/libtls/tls_peer.c                              |    8 +-
 src/libtls/tls_protection.c                        |  214 +-
 src/libtls/tls_protection.h                        |   10 +-
 src/libtls/tls_socket.c                            |   16 +-
 src/libtls/tls_socket.h                            |    5 +-
 src/libtnccs/Makefile.in                           |    1 -
 src/libtnccs/plugins/tnc_imc/Makefile.in           |    1 -
 src/libtnccs/plugins/tnc_imv/Makefile.in           |    1 -
 src/libtnccs/plugins/tnc_tnccs/Makefile.in         |    1 -
 src/libtnccs/plugins/tnccs_11/Makefile.in          |    1 -
 src/libtnccs/plugins/tnccs_20/Makefile.in          |    1 -
 src/libtnccs/plugins/tnccs_dynamic/Makefile.in     |    1 -
 src/libtncif/Makefile.in                           |    1 -
 src/manager/Makefile.in                            |    1 -
 src/medsrv/Makefile.in                             |    1 -
 src/openac/Makefile.am                             |   11 -
 src/openac/Makefile.in                             |  802 ------
 src/openac/openac.8                                |  165 --
 src/openac/openac.c                                |  551 -----
 src/pki/Makefile.am                                |    1 +
 src/pki/Makefile.in                                |    8 +-
 src/pki/command.c                                  |    4 +-
 src/pki/command.h                                  |    4 +-
 src/pki/commands/acert.c                           |  292 +++
 src/pki/commands/issue.c                           |   34 +-
 src/pki/commands/print.c                           |   95 +-
 src/pki/commands/self.c                            |   33 +-
 src/pki/commands/signcrl.c                         |   28 +-
 src/pki/man/Makefile.am                            |    1 +
 src/pki/man/Makefile.in                            |    8 +-
 src/pki/man/pki---acert.1.in                       |  130 +
 src/pki/man/pki---issue.1.in                       |   27 +-
 src/pki/man/pki---print.1.in                       |    5 +-
 src/pki/man/pki---self.1.in                        |   27 +-
 src/pki/man/pki---signcrl.1.in                     |   27 +-
 src/pki/man/pki.1.in                               |    4 +
 src/pki/pki.c                                      |   53 +-
 src/pki/pki.h                                      |   17 +
 src/pool/Makefile.in                               |    1 -
 src/pt-tls-client/Makefile.in                      |    1 -
 src/scepclient/Makefile.in                         |    1 -
 src/starter/Makefile.in                            |    1 -
 src/stroke/Makefile.in                             |    1 -
 testing/Makefile.in                                |    1 -
 testing/do-tests                                   |    9 +
 testing/hosts/winnetou/etc/openssl/index.txt       |    1 +
 testing/hosts/winnetou/etc/openssl/index.txt.old   |    2 +
 .../winnetou/etc/openssl/newcerts/28.pem}          |   18 +-
 .../hosts/winnetou/etc/openssl/ocspCert-self.pem   |   28 +-
 testing/hosts/winnetou/etc/openssl/openssl.cnf     |    4 +-
 .../hosts/winnetou/etc/openssl/research/index.txt  |    6 +-
 .../winnetou/etc/openssl/research/index.txt.old    |    6 +-
 .../winnetou/etc/openssl/research/newcerts/08.pem  |   26 +
 .../winnetou/etc/openssl/research/newcerts/09.pem  |   24 +
 .../winnetou/etc/openssl/research/ocspCert.pem     |   36 +-
 .../winnetou/etc/openssl/research/ocspKey.pem      |   50 +-
 testing/hosts/winnetou/etc/openssl/research/serial |    2 +-
 .../hosts/winnetou/etc/openssl/research/serial.old |    2 +-
 testing/hosts/winnetou/etc/openssl/sales/index.txt |    6 +-
 .../hosts/winnetou/etc/openssl/sales/index.txt.old |    8 +-
 .../winnetou/etc/openssl/sales/newcerts/07.pem     |   26 +
 .../winnetou/etc/openssl/sales/newcerts/08.pem     |   25 +
 .../hosts/winnetou/etc/openssl/sales/ocspCert.pem  |   34 +-
 .../hosts/winnetou/etc/openssl/sales/ocspKey.pem   |   50 +-
 .../hosts/winnetou/etc/openssl/sales/openssl.cnf   |    1 +
 testing/hosts/winnetou/etc/openssl/sales/serial    |    2 +-
 .../hosts/winnetou/etc/openssl/sales/serial.old    |    2 +-
 testing/hosts/winnetou/etc/openssl/serial          |    2 +-
 testing/hosts/winnetou/etc/openssl/serial.old      |    2 +-
 testing/scripts/recipes/013_strongswan.mk          |    1 +
 .../af-alg/rw-cert/hosts/carol/etc/strongswan.conf |    2 -
 .../af-alg/rw-cert/hosts/dave/etc/strongswan.conf  |    2 -
 .../af-alg/rw-cert/hosts/moon/etc/strongswan.conf  |    2 -
 .../alg-serpent/hosts/carol/etc/strongswan.conf    |    2 -
 .../alg-serpent/hosts/moon/etc/strongswan.conf     |    2 -
 .../alg-twofish/hosts/carol/etc/strongswan.conf    |    2 -
 .../alg-twofish/hosts/moon/etc/strongswan.conf     |    2 -
 .../rw-cert/hosts/carol/etc/strongswan.conf        |    2 -
 .../rw-cert/hosts/dave/etc/strongswan.conf         |    2 -
 .../rw-cert/hosts/moon/etc/strongswan.conf         |    2 -
 testing/tests/ha/both-active/posttest.dat          |    2 -
 testing/tests/ikev1/double-nat-net/posttest.dat    |    2 -
 testing/tests/ikev1/double-nat/posttest.dat        |    2 -
 .../hosts/carol/etc/strongswan.conf                |    2 -
 .../hosts/dave/etc/strongswan.conf                 |    2 -
 .../hosts/moon/etc/strongswan.conf                 |    2 -
 .../hosts/carol/etc/strongswan.conf                |    2 -
 .../hosts/dave/etc/strongswan.conf                 |    2 -
 .../hosts/moon/etc/strongswan.conf                 |    2 -
 .../hosts/carol/etc/strongswan.conf                |    2 -
 .../hosts/dave/etc/strongswan.conf                 |    2 -
 .../hosts/moon/etc/strongswan.conf                 |    2 -
 testing/tests/ikev1/nat-rw/posttest.dat            |    1 -
 testing/tests/ikev1/nat-virtual-ip/posttest.dat    |    1 -
 testing/tests/ikev1/nat-virtual-ip/pretest.dat     |    3 +-
 .../net2net-cert/hosts/moon/etc/strongswan.conf    |    2 -
 .../net2net-cert/hosts/sun/etc/strongswan.conf     |    2 -
 .../hosts/moon/etc/strongswan.conf                 |    3 -
 .../hosts/sun/etc/strongswan.conf                  |    3 -
 .../hosts/moon/etc/strongswan.conf                 |    3 +-
 .../net2net-psk/hosts/moon/etc/strongswan.conf     |    2 -
 .../net2net-psk/hosts/sun/etc/strongswan.conf      |    2 -
 .../hosts/carol/etc/strongswan.conf                |    2 -
 .../hosts/dave/etc/strongswan.conf                 |    2 -
 .../hosts/moon/etc/strongswan.conf                 |    2 -
 .../rw-cert-unity/hosts/carol/etc/strongswan.conf  |    4 +-
 .../rw-cert-unity/hosts/moon/etc/strongswan.conf   |    7 +-
 .../ikev1/rw-cert/hosts/carol/etc/strongswan.conf  |    3 +-
 .../ikev1/rw-cert/hosts/dave/etc/strongswan.conf   |    3 +-
 .../ikev1/rw-cert/hosts/moon/etc/strongswan.conf   |    3 +-
 .../hosts/carol/etc/strongswan.conf                |    2 -
 .../hosts/dave/etc/strongswan.conf                 |    4 +-
 .../hosts/moon/etc/strongswan.conf                 |    4 +-
 .../hosts/carol/etc/strongswan.conf                |    2 -
 .../hosts/dave/etc/strongswan.conf                 |    2 -
 .../hosts/moon/etc/strongswan.conf                 |    2 -
 .../hosts/carol/etc/strongswan.conf                |    2 -
 .../hosts/dave/etc/strongswan.conf                 |    2 -
 .../hosts/moon/etc/strongswan.conf                 |    2 -
 .../hosts/carol/etc/strongswan.conf                |    2 -
 .../hosts/dave/etc/strongswan.conf                 |    2 -
 .../hosts/moon/etc/strongswan.conf                 |    2 -
 .../xauth-psk/hosts/carol/etc/strongswan.conf      |    2 -
 .../ikev1/xauth-psk/hosts/dave/etc/strongswan.conf |    2 -
 .../ikev1/xauth-psk/hosts/moon/etc/strongswan.conf |    2 -
 .../hosts/alice/etc/strongswan.conf                |    1 +
 .../hosts/carol/etc/strongswan.conf                |    2 -
 .../hosts/moon/etc/strongswan.conf                 |    3 +
 .../hosts/alice/etc/strongswan.conf                |    1 +
 .../hosts/carol/etc/strongswan.conf                |    2 -
 .../hosts/moon/etc/strongswan.conf                 |    3 +
 .../xauth-rsa/hosts/carol/etc/strongswan.conf      |    2 -
 .../ikev1/xauth-rsa/hosts/dave/etc/strongswan.conf |    2 -
 .../ikev1/xauth-rsa/hosts/moon/etc/strongswan.conf |    2 -
 testing/tests/ikev2/acert-cached/description.txt   |   11 +
 testing/tests/ikev2/acert-cached/evaltest.dat      |   12 +
 .../hosts/carol/etc/ipsec.conf                     |    8 +-
 .../hosts/carol}/etc/strongswan.conf               |    1 -
 .../hosts/dave}/etc/ipsec.conf                     |   12 +-
 .../hosts/dave}/etc/strongswan.conf                |    1 -
 .../hosts/moon/etc/ipsec.conf                      |   11 +-
 .../hosts/moon}/etc/strongswan.conf                |    3 +-
 testing/tests/ikev2/acert-cached/posttest.dat      |   11 +
 testing/tests/ikev2/acert-cached/pretest.dat       |    9 +
 testing/tests/ikev2/acert-cached/test.conf         |   21 +
 testing/tests/ikev2/acert-fallback/description.txt |   12 +
 testing/tests/ikev2/acert-fallback/evaltest.dat    |    8 +
 .../hosts/carol/etc/ipsec.conf                     |    8 +-
 .../hosts/carol}/etc/strongswan.conf               |    1 -
 .../ikev2/acert-fallback/hosts/moon/etc/ipsec.conf |   32 +
 .../hosts/moon}/etc/strongswan.conf                |    3 +-
 testing/tests/ikev2/acert-fallback/posttest.dat    |    8 +
 testing/tests/ikev2/acert-fallback/pretest.dat     |    6 +
 testing/tests/ikev2/acert-fallback/test.conf       |   21 +
 testing/tests/ikev2/acert-inline/description.txt   |   12 +
 testing/tests/ikev2/acert-inline/evaltest.dat      |   15 +
 .../hosts/carol/etc/ipsec.conf                     |    8 +-
 .../hosts/carol}/etc/strongswan.conf               |    1 -
 .../hosts/dave}/etc/ipsec.conf                     |   12 +-
 .../hosts/dave}/etc/strongswan.conf                |    1 -
 .../hosts/moon/etc/ipsec.conf                      |   11 +-
 .../hosts/moon}/etc/strongswan.conf                |    3 +-
 testing/tests/ikev2/acert-inline/posttest.dat      |   13 +
 testing/tests/ikev2/acert-inline/pretest.dat       |    9 +
 testing/tests/ikev2/acert-inline/test.conf         |   21 +
 testing/tests/ikev2/compress-nat/posttest.dat      |    4 +-
 .../hosts/moon/etc/strongswan.conf                 |    5 +-
 .../hosts/sun/etc/strongswan.conf                  |    1 +
 testing/tests/ikev2/double-nat-net/posttest.dat    |    2 -
 testing/tests/ikev2/double-nat/posttest.dat        |    2 -
 .../hosts/carol/etc/strongswan.conf                |    2 -
 .../hosts/dave/etc/strongswan.conf                 |    2 -
 .../hosts/moon/etc/strongswan.conf                 |    2 -
 .../hosts/carol/etc/strongswan.conf                |    2 -
 .../hosts/dave/etc/strongswan.conf                 |    2 -
 .../hosts/moon/etc/strongswan.conf                 |    2 -
 testing/tests/ikev2/ip-two-pools-db/posttest.dat   |    1 -
 .../tests/ikev2/ip-two-pools-mixed/posttest.dat    |    1 -
 .../tests/ikev2/ip-two-pools-v4v6-db/posttest.dat  |    1 -
 testing/tests/ikev2/ip-two-pools-v4v6/posttest.dat |    1 -
 testing/tests/ikev2/ip-two-pools/posttest.dat      |    1 -
 testing/tests/ikev2/mobike-nat/posttest.dat        |    1 -
 testing/tests/ikev2/mobike-nat/pretest.dat         |    1 -
 .../moon/etc/ipsec.d/cacerts/researchCert.pem      |   18 +-
 testing/tests/ikev2/nat-rw-mark/posttest.dat       |    2 -
 testing/tests/ikev2/nat-rw-psk/posttest.dat        |    1 -
 testing/tests/ikev2/nat-rw/posttest.dat            |    1 -
 testing/tests/ikev2/nat-rw/pretest.dat             |    5 +-
 testing/tests/ikev2/nat-virtual-ip/posttest.dat    |    1 -
 testing/tests/ikev2/nat-virtual-ip/pretest.dat     |    3 +-
 .../net2net-dnscert/hosts/moon/etc/strongswan.conf |    5 -
 .../net2net-dnscert/hosts/sun/etc/strongswan.conf  |    5 -
 .../net2net-dnssec/hosts/moon/etc/strongswan.conf  |    5 -
 .../net2net-dnssec/hosts/sun/etc/strongswan.conf   |    5 -
 .../ikev2/net2net-ntru-bandwidth/description.txt   |    9 +
 .../ikev2/net2net-ntru-bandwidth/evaltest.dat      |    9 +
 .../hosts/moon/etc/ipsec.conf                      |   16 +-
 .../hosts/moon/etc/strongswan.conf                 |    5 +-
 .../hosts/sun/etc/ipsec.conf                       |   25 +
 .../hosts/sun}/etc/strongswan.conf                 |    5 +-
 .../net2net-ntru-bandwidth}/posttest.dat           |    3 +-
 .../net2net-ntru-bandwidth}/pretest.dat            |    2 -
 .../tests/ikev2/net2net-ntru-bandwidth/test.conf   |   21 +
 .../hosts/moon/etc/strongswan.conf                 |    3 +-
 testing/tests/ikev2/net2net-same-nets/posttest.dat |    1 -
 .../carol/etc/ipsec.d/ocspcerts/ocspCert-self.pem  |   28 +-
 .../moon/etc/ipsec.d/ocspcerts/ocspCert-self.pem   |   28 +-
 testing/tests/ikev2/ocsp-multi-level/evaltest.dat  |    4 +
 .../tests/ikev2/ocsp-no-signer-cert/evaltest.dat   |    2 +-
 .../carol/etc/ipsec.d/certs/carolCert-ifuri.pem    |   38 +-
 .../hosts/carol/etc/ipsec.d/private/carolKey.pem   |   50 +-
 .../dave/etc/ipsec.d/certs/daveCert-ifuri.pem      |   36 +-
 .../hosts/dave/etc/ipsec.d/private/daveKey.pem     |   50 +-
 .../tests/ikev2/ocsp-untrusted-cert/evaltest.dat   |    3 +-
 .../ikev2/rw-cert/hosts/carol/etc/strongswan.conf  |    2 -
 .../ikev2/rw-cert/hosts/dave/etc/strongswan.conf   |    2 -
 .../ikev2/rw-cert/hosts/moon/etc/strongswan.conf   |    2 -
 .../rw-eap-aka-rsa/hosts/carol/etc/strongswan.conf |    2 -
 .../rw-eap-aka-rsa/hosts/moon/etc/strongswan.conf  |    2 -
 .../rw-eap-sim-rsa/hosts/carol/etc/strongswan.conf |    2 -
 .../rw-eap-sim-rsa/hosts/moon/etc/strongswan.conf  |    2 -
 .../hosts/carol/etc/strongswan.conf                |    2 +-
 .../hosts/moon/etc/strongswan.conf                 |    2 +-
 testing/tests/ikev2/rw-eap-tls-only/evaltest.dat   |    1 +
 .../rw-eap-tls-only/hosts/carol/etc/ipsec.conf     |    1 +
 .../hosts/carol/etc/strongswan.conf                |    3 +-
 .../rw-eap-tls-only/hosts/moon/etc/ipsec.conf      |    1 +
 .../rw-eap-tls-only/hosts/moon/etc/strongswan.conf |    7 +-
 testing/tests/ikev2/rw-mark-in-out/posttest.dat    |    2 -
 .../tests/libipsec/net2net-3des/description.txt    |    9 +
 testing/tests/libipsec/net2net-3des/evaltest.dat   |   11 +
 .../net2net-3des}/hosts/moon/etc/ipsec.conf        |   17 +-
 .../net2net-3des/hosts/moon}/etc/strongswan.conf   |    2 +-
 .../libipsec/net2net-3des/hosts/moon/etc/updown    |  705 ++++++
 .../libipsec/net2net-3des/hosts/sun/etc/ipsec.conf |   24 +
 .../net2net-3des}/hosts/sun/etc/strongswan.conf    |    2 +-
 .../libipsec/net2net-3des/hosts/sun/etc/updown     |  705 ++++++
 .../net2net-3des}/posttest.dat                     |    2 -
 .../net2net-3des}/pretest.dat                      |    2 -
 testing/tests/libipsec/net2net-3des/test.conf      |   21 +
 .../rw-suite-b/hosts/carol/etc/strongswan.conf     |    2 -
 .../rw-suite-b/hosts/dave/etc/strongswan.conf      |    2 -
 .../rw-suite-b/hosts/moon/etc/strongswan.conf      |    2 -
 .../hosts/moon/etc/strongswan.conf                 |    2 -
 .../openssl-ikev2/net2net-pgp-v3/description.txt   |    6 +
 .../openssl-ikev2/net2net-pgp-v3/evaltest.dat      |    7 +
 .../net2net-pgp-v3}/hosts/moon/etc/ipsec.conf      |   14 +-
 .../net2net-pgp-v3/hosts/moon/etc/ipsec.secrets    |    3 +
 .../net2net-pgp-v3/hosts/moon/etc/strongswan.conf  |    6 +
 .../net2net-pgp-v3/hosts/sun}/etc/ipsec.conf       |   15 +-
 .../net2net-pgp-v3/hosts/sun/etc/ipsec.secrets     |    3 +
 .../net2net-pgp-v3/hosts/sun/etc/strongswan.conf   |    6 +
 .../net2net-pgp-v3}/posttest.dat                   |    6 +-
 .../net2net-pgp-v3}/pretest.dat                    |    6 +-
 .../tests/openssl-ikev2/net2net-pgp-v3/test.conf   |   21 +
 .../rw-cert/hosts/carol/etc/strongswan.conf        |    2 -
 .../rw-cert/hosts/dave/etc/strongswan.conf         |    2 -
 .../rw-cert/hosts/moon/etc/strongswan.conf         |    2 -
 .../openssl-ikev2/rw-eap-tls-only/evaltest.dat     |    2 +-
 .../hosts/carol/etc/strongswan.conf                |    2 +-
 .../rw-eap-tls-only/hosts/moon/etc/strongswan.conf |    6 +-
 .../rw-suite-b-128/hosts/carol/etc/strongswan.conf |    5 +-
 .../rw-suite-b-128/hosts/dave/etc/strongswan.conf  |    5 +-
 .../rw-suite-b-128/hosts/moon/etc/strongswan.conf  |    4 +-
 .../rw-suite-b-192/hosts/carol/etc/strongswan.conf |    5 +-
 .../rw-suite-b-192/hosts/dave/etc/strongswan.conf  |    5 +-
 .../rw-suite-b-192/hosts/moon/etc/strongswan.conf  |    4 +-
 testing/tests/p2pnat/behind-same-nat/posttest.dat  |    1 -
 testing/tests/p2pnat/medsrv-psk/posttest.dat       |    2 -
 testing/tests/pfkey/nat-rw/posttest.dat            |    1 -
 .../pfkey/rw-cert/hosts/carol/etc/strongswan.conf  |    2 -
 .../pfkey/rw-cert/hosts/dave/etc/strongswan.conf   |    2 -
 .../pfkey/rw-cert/hosts/moon/etc/strongswan.conf   |    2 -
 .../sql/rw-cert/hosts/carol/etc/strongswan.conf    |    2 -
 .../sql/rw-cert/hosts/dave/etc/strongswan.conf     |    2 -
 .../sql/rw-cert/hosts/moon/etc/strongswan.conf     |    2 -
 testing/tests/tnc/tnccs-20-pt-tls/pretest.dat      |    2 +-
 .../tests/tnc/tnccs-20-pts-no-ecc/description.txt  |   26 +
 testing/tests/tnc/tnccs-20-pts-no-ecc/evaltest.dat |   20 +
 .../hosts/carol/etc/ipsec.conf                     |    7 +-
 .../hosts/carol/etc/ipsec.secrets                  |    3 +
 .../hosts/carol/etc/strongswan.conf                |   22 +
 .../tnccs-20-pts-no-ecc/hosts/carol/etc/tnc_config |    4 +
 .../tnccs-20-pts-no-ecc/hosts/dave}/etc/ipsec.conf |    9 +-
 .../hosts/dave/etc/ipsec.secrets                   |    3 +
 .../hosts/dave/etc/strongswan.conf                 |   25 +
 .../tnccs-20-pts-no-ecc/hosts/dave/etc/tnc_config  |    4 +
 .../tnccs-20-pts-no-ecc/hosts/moon/etc/ipsec.conf  |   34 +
 .../hosts/moon/etc/ipsec.secrets                   |    6 +
 .../hosts/moon/etc/pts/data1.sql                   |   29 +
 .../hosts/moon/etc/strongswan.conf                 |   34 +
 .../tnccs-20-pts-no-ecc/hosts/moon/etc/tnc_config  |    4 +
 testing/tests/tnc/tnccs-20-pts-no-ecc/posttest.dat |    8 +
 testing/tests/tnc/tnccs-20-pts-no-ecc/pretest.dat  |   18 +
 testing/tests/tnc/tnccs-20-pts-no-ecc/test.conf    |   26 +
 .../tnccs-dynamic/hosts/carol/etc/strongswan.conf  |   12 +-
 .../tnccs-dynamic/hosts/dave/etc/strongswan.conf   |   12 +-
 .../tnccs-dynamic/hosts/moon/etc/strongswan.conf   |   17 +-
 611 files changed, 13011 insertions(+), 9933 deletions(-)

diff --cc debian/changelog
index 420adcf,239827a..6197fc6
--- a/debian/changelog
+++ b/debian/changelog
@@@ -1,9 -1,18 +1,24 @@@
+ strongswan (5.1.3-2) unstable; urgency=low
+ 
+   * Disable the new libtls test suite for now--it appears to be a
+     little too intensive for slower archs.
+ 
+  -- Romain Francoise <rfrancoise at debian.org>  Sat, 19 Apr 2014 17:45:51 +0200
+ 
+ strongswan (5.1.3-1) unstable; urgency=low
+ 
+   * New upstream release.
+   * debian/control: make strongswan-charon depend on iproute2 | iproute,
+     thanks to Ryo IGARASHI <rigarash at gmail.com> (closes: #744832).
+ 
+  -- Romain Francoise <rfrancoise at debian.org>  Tue, 15 Apr 2014 19:42:27 +0200
+ 
 +strongswan (5.1.2-4~bpo70+1) wheezy-backports; urgency=low
 +
 +  * Rebuild for wheezy-backports.
 +
 + -- Romain Francoise <rfrancoise at debian.org>  Tue, 08 Apr 2014 20:29:43 +0200
 +
  strongswan (5.1.2-4) unstable; urgency=high
  
    * debian/patches/04_cve-2014-2338.patch: added to fix CVE-2014-2338

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-swan/strongswan.git



More information about the Pkg-swan-devel mailing list