From 0d7aa35ef3c9b9c84b2d1f44096a18f1f13826f4 Mon Sep 17 00:00:00 2001 From: Daiki Ueno Date: Fri, 11 Jul 2025 16:42:20 +0900 Subject: [PATCH] Update to libreswan-5.3 Maintenance and bugfix release. - Only use NSS's certificateUsageIPsec, not certificateUsageSSL - fix CISCO's split support (requires cisco-split=yes) - share-lease=yes|no (default yes) to share XAUTH/ModeCfg lease IP on multiple connections - CRL code maintenance - Remove unused _stackmanager - Merge addconn and whack parsers Originally written by Paul Wouters in: https://src.fedoraproject.org/rpms/libreswan/c/df55b7d4ee438dfc2b4e25a5003d6fbdd442d254?branch=rawhide Resolves: RHEL-102733 Signed-off-by: Daiki Ueno --- .gitignore | 2 ++ libreswan.spec | 3 +-- sources | 4 ++-- 3 files changed, 5 insertions(+), 4 deletions(-) diff --git a/.gitignore b/.gitignore index 86797d5..1160f38 100644 --- a/.gitignore +++ b/.gitignore @@ -66,3 +66,5 @@ /libreswan-5.1.tar.gz.asc /libreswan-5.2.tar.gz /libreswan-5.2.tar.gz.asc +/libreswan-5.3.tar.gz +/libreswan-5.3.tar.gz.asc diff --git a/libreswan.spec b/libreswan.spec index e1dc33d..c2444ca 100644 --- a/libreswan.spec +++ b/libreswan.spec @@ -29,7 +29,7 @@ Name: libreswan Summary: Internet Key Exchange (IKEv1 and IKEv2) implementation for IPsec # version is generated in the release script -Version: 5.2 +Version: 5.3 Release: %autorelease # The code in lib/libswan/nss_copies.c is under MPL-2.0, while the # rest is under GPL-2.0-or-later @@ -45,7 +45,6 @@ Source5: https://download.libreswan.org/cavs/ikev2.fax.bz2 %endif Patch1: libreswan-4.15-ipsec_import.patch -Patch2: libreswan-5.2-pexpect-no-ike-sa-for-orphan-child.patch BuildRequires: audit-libs-devel BuildRequires: bison diff --git a/sources b/sources index 4fe77e5..391ee1b 100644 --- a/sources +++ b/sources @@ -1,5 +1,5 @@ SHA512 (ikev1_dsa.fax.bz2) = 627cbac14248bd68e8d22fbca247668a7749ef0c2e41df8d776d62df9a21403d3a246c0bd82c3faedce62de90b9f91a87f753e17b056319000bba7d2038461ac SHA512 (ikev1_psk.fax.bz2) = 1b2daec32edc56b410c036db2688c92548a9bd9914994bc7e555b301dd6db4497a6b3e89dc12ddf36826ae90b40fcde501a5a45c0d59098e07839073d219d467 SHA512 (ikev2.fax.bz2) = 0d3748d1bd574f6f1f3e4db847eca126ce649566ea710ef227426f433122752b80d1d6b8acf9d0df07b5597c1e45447e3a2fcb3391756e834e8e75f99df8e51e -SHA512 (libreswan-5.2.tar.gz) = 5c87edc879914158ba9c4c2a0edcd6fac0787b16d3c6a50c268cbd675c51cdec94e509031bc226680c0d40bd3375d73007cae5ee0588c136292e3f34cb759694 -SHA512 (libreswan-5.2.tar.gz.asc) = ce5e053f8cbe8b2981100e3948975930c160db9292734983159cfc93cc336e39e867a3ef56c4bd03f0bdc005af61165ebc42c1e2b86dc97e22ae2f0be84d4136 +SHA512 (libreswan-5.3.tar.gz) = 338fb82a9969da8fa78f64ec9eda0e3dcd216d6b8333a6f966ba839e31d3eb5fdd94613f0fff934be16ff8d84f6f4265c8b35f37c642569e042f65a58038ba0d +SHA512 (libreswan-5.3.tar.gz.asc) = b55d47abe69222f2b91b1fd48f5a6910a5469a4bea21fb7f3231ac036af378f94495405efdacb67eddf1fffa018f76db9c1944336bdedfb59f96a369e2362684