[Pkg-swan-devel] [Git][debian/strongswan][debian/master] 5 commits: also disable padlock plugin (fix FTBFS on i386)

Tue Sep 8 07:06:33 BST 2026


Yves-Alexis Perez pushed to branch debian/master at Debian / strongswan


Commits:
0331f1e1 by Yves-Alexis Perez at 2026-09-08T07:46:05+02:00
also disable padlock plugin (fix FTBFS on i386)

- - - - -
29f5bacb by Yves-Alexis Perez at 2026-09-08T07:49:03+02:00
d/NEWS: mentions disabled plugins

- - - - -
1f49376a by Yves-Alexis Perez at 2026-09-08T07:50:33+02:00
d/rules: cleanup a little for removed plugins

- - - - -
ef6d1512 by Yves-Alexis Perez at 2026-09-08T07:51:13+02:00
finalize changelog

- - - - -
1dd7e0f9 by Yves-Alexis Perez at 2026-09-08T07:51:22+02:00
upload strongSwan 6.1.0-2 to unstable

- - - - -


5 changed files:

- debian/NEWS
- debian/changelog
- debian/control
- debian/libstrongswan-extra-plugins.conffiles
- debian/rules


Changes:

=====================================
debian/NEWS
=====================================
@@ -3,6 +3,16 @@ strongswan (6.1.0-1) unstable; urgency=medium
   With strongSwan 6.1.0-1 the IKEv1 protocol has been disabled, both upstream
   and in the Debian packages. Users should migrate to the IKEv2 protocol.
   .
+  This release also removes and disables various plugins (obsoleted or
+  unmaintainable):
+  - af-alg
+  - blowfish
+  - gcrypt
+  - led
+  - medsrv/mdcli
+  - padlock
+  - soup
+  .
   More info can be found on upstream blog entry at
   https://strongswan.org/blog/2026/09/07/strongswan-6.1.0-released.html
 


=====================================
debian/changelog
=====================================
@@ -1,3 +1,11 @@
+strongswan (6.1.0-2) unstable; urgency=medium
+
+  * also disable padlock plugin (fix FTBFS on i386)
+  * d/NEWS: mentions disabled plugins
+  * d/rules: cleanup a little for removed plugins
+
+ -- Yves-Alexis Perez <corsac at debian.org>  Tue, 08 Sep 2026 07:51:17 +0200
+
 strongswan (6.1.0-1) unstable; urgency=medium
 
   * New upstream version 6.1.0


=====================================
debian/control
=====================================
@@ -129,7 +129,6 @@ Description: strongSwan utility and crypto library (extra plugins)
   - ldap (LDAP fetching plugin based on libldap)
   - md5 (MD5 hasher software implementation)
   - mgf1 (Mask Generation Functions based on the SHA-1, SHA-256 and SHA-512)
-  - padlock (VIA padlock crypto backend, provides AES128/SHA1)
   - pgp (PGP encoding/decoding routines)
   - pkcs11 (PKCS#11 smartcard backend)
   - pkcs12 (PKCS#12 decoding routines)


=====================================
debian/libstrongswan-extra-plugins.conffiles
=====================================
@@ -4,3 +4,4 @@ remove-on-upgrade /etc/strongswan.d/charon-nm/gcrypt.conf
 remove-on-upgrade /etc/strongswan.d/charon/af-alg.conf
 remove-on-upgrade /etc/strongswan.d/charon-cmd/af-alg.conf
 remove-on-upgrade /etc/strongswan.d/charon-nm/af-alg.conf
+remove-on-upgrade /etc/strongswan.d/charon/padlock.conf


=====================================
debian/rules
=====================================
@@ -50,7 +50,6 @@ CONFIGUREARGS := --libdir=/usr/lib --libexecdir=/usr/lib \
 		--enable-unity \
 		--enable-xauth-eap \
 		--enable-xauth-pam \
-		--disable-blowfish \
 		--disable-fast \
 		--disable-des # BSD-Young license
 		--plugins-packaged-seperately=yes
@@ -58,19 +57,13 @@ CONFIGUREARGS := --libdir=/usr/lib --libexecdir=/usr/lib \
 	#	--enable-kernel-pfkey --enable-kernel-klips \
 	# And for --enable-eap-sim we would need the library, which we don't
 	# have right now.
-	# Don't --enable-cisco-quirks, because some other IPsec implementations
-	# (most notably the Phion one) have problems connecting when pluto
-	# sends these Cisco options.
-	# don't enable medsrv/medcli right now (20160523) since clearsilver FTBFS
-	#--enable-medsrv --enable-medcli \
 
 # get the various DEB_BUILD/DEB_HOST variables
 include /usr/share/dpkg/architecture.mk
 
-# the padlock plugin only makes sense on i386
-# AESNI and RdRand only make sense on i386 and amd64
+# AESNI and RdRand are only usable on i386 and amd64
 ifeq ($(DEB_HOST_ARCH_CPU),i386)
-  CONFIGUREARGS += --enable-padlock --enable-rdrand --enable-aesni
+  CONFIGUREARGS += --enable-rdrand --enable-aesni
 endif
 
 ifeq ($(DEB_HOST_ARCH_CPU),amd64)
@@ -163,11 +156,6 @@ ifeq ($(DEB_HOST_ARCH_OS),kfreebsd)
 endif
 
 ifeq ($(DEB_HOST_ARCH_CPU),i386)
-	# special handling for padlock, as it is only built on i386
-	dh_install -p libstrongswan-extra-plugins usr/lib/ipsec/plugins/libstrongswan-padlock.so
-	dh_install -p libstrongswan-extra-plugins usr/share/strongswan/templates/config/plugins/padlock.conf
-	dh_install -p libstrongswan-extra-plugins etc/strongswan.d/charon/padlock.conf
-
 	dh_install -p libstrongswan-extra-plugins usr/lib/ipsec/plugins/libstrongswan-rdrand.so
 	dh_install -p libstrongswan-extra-plugins usr/share/strongswan/templates/config/plugins/rdrand.conf
 	dh_install -p libstrongswan-extra-plugins etc/strongswan.d/charon/rdrand.conf
@@ -203,7 +191,6 @@ endif
 		-Xlibstrongswan-kernel- -X kernel- \
 		-Xlibstrongswan-dhcp.so -X dhcp.conf \
 		-Xlibstrongswan-farp.so -X farp.conf \
-		-Xlibstrongswan-padlock.so -X padlock.conf \
 		-Xlibstrongswan-rdrand.so -X rdrand.conf \
 		-Xlibstrongswan-aesni.so -X aesni.conf \
 		-Xstrongswan-starter.service



View it on GitLab: https://salsa.debian.org/debian/strongswan/-/compare/849ad654c8ee575feddd33dccec09b7bcfff67a8...1dd7e0f9c3e2e2ba224c7707242fb876d41c2455

-- 
View it on GitLab: https://salsa.debian.org/debian/strongswan/-/compare/849ad654c8ee575feddd33dccec09b7bcfff67a8...1dd7e0f9c3e2e2ba224c7707242fb876d41c2455
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-swan-devel/attachments/20260908/f7466062/attachment-0001.htm>
