rpms/libreswan
6
0
Fork 0
Code Issues Pull Requests Releases Activity

Update to libreswan 5.1

Browse Source 
Major fix release. IKEv1 disabled by default via ikev1-policy=drop
Updated default crypto algorithms. multi traffic selector, including
support for v4+v6 addresspools for roadwarriors. Hardware packet
offload support. Improved ipsec devices, some FIPS fixes, linux > 6.9
fixes.

Resolves: RHEL-60559
This commit is contained in:
Paul Wouters 2024-10-08 14:30:00 -04:00 committed by Daiki Ueno
parent 17cceff00a
commit 8f985a40f0
3 changed files with 7 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
.gitignore vendored
View File

@ -62,3 +62,5 @@
/libreswan-4.14.tar.gz.asc /libreswan-4.14.tar.gz.asc
/libreswan-4.15.tar.gz /libreswan-4.15.tar.gz
/libreswan-4.15.tar.gz.asc /libreswan-4.15.tar.gz.asc
/libreswan-5.1.tar.gz
/libreswan-5.1.tar.gz.asc

9
libreswan.spec
View File

@ -7,8 +7,8 @@
%global unbound_version 1.6.6 %global unbound_version 1.6.6
# Libreswan config options # Libreswan config options
%global libreswan_config \\\ %global libreswan_config \\\
FINALLIBEXECDIR=%{_libexecdir}/ipsec \\\ LIBEXECDIR=%{_libexecdir}/ipsec \\\
FINALMANDIR=%{_mandir} \\\ MANDIR=%{_mandir} \\\
PREFIX=%{_prefix} \\\ PREFIX=%{_prefix} \\\
INITSYSTEM=systemd \\\ INITSYSTEM=systemd \\\
SHELL_BINARY=%{_bindir}/sh \\\ SHELL_BINARY=%{_bindir}/sh \\\
@ -29,7 +29,7 @@
Name: libreswan Name: libreswan
Summary: Internet Key Exchange (IKEv1 and IKEv2) implementation for IPsec Summary: Internet Key Exchange (IKEv1 and IKEv2) implementation for IPsec
# version is generated in the release script # version is generated in the release script
Version: 4.15 Version: 5.1
Release: %autorelease Release: %autorelease
# The code in lib/libswan/nss_copies.c is under MPL-2.0, while the # The code in lib/libswan/nss_copies.c is under MPL-2.0, while the
# rest is under GPL-2.0-or-later # rest is under GPL-2.0-or-later
@ -45,9 +45,6 @@ Source5: https://download.libreswan.org/cavs/ikev2.fax.bz2
%endif %endif
Patch1: libreswan-4.15-ipsec_import.patch Patch1: libreswan-4.15-ipsec_import.patch
Patch2: libreswan-4.6-ikev1-policy-defaults-to-drop.patch
Patch3: libreswan-4.15-ondemand-tcp.patch
Patch4: libreswan-4.15-netlink-extack.patch
BuildRequires: audit-libs-devel BuildRequires: audit-libs-devel
BuildRequires: bison BuildRequires: bison

4
sources
View File

@ -1,5 +1,5 @@
SHA512 (ikev1_dsa.fax.bz2) = 627cbac14248bd68e8d22fbca247668a7749ef0c2e41df8d776d62df9a21403d3a246c0bd82c3faedce62de90b9f91a87f753e17b056319000bba7d2038461ac SHA512 (ikev1_dsa.fax.bz2) = 627cbac14248bd68e8d22fbca247668a7749ef0c2e41df8d776d62df9a21403d3a246c0bd82c3faedce62de90b9f91a87f753e17b056319000bba7d2038461ac
SHA512 (ikev1_psk.fax.bz2) = 1b2daec32edc56b410c036db2688c92548a9bd9914994bc7e555b301dd6db4497a6b3e89dc12ddf36826ae90b40fcde501a5a45c0d59098e07839073d219d467 SHA512 (ikev1_psk.fax.bz2) = 1b2daec32edc56b410c036db2688c92548a9bd9914994bc7e555b301dd6db4497a6b3e89dc12ddf36826ae90b40fcde501a5a45c0d59098e07839073d219d467
SHA512 (ikev2.fax.bz2) = 0d3748d1bd574f6f1f3e4db847eca126ce649566ea710ef227426f433122752b80d1d6b8acf9d0df07b5597c1e45447e3a2fcb3391756e834e8e75f99df8e51e SHA512 (ikev2.fax.bz2) = 0d3748d1bd574f6f1f3e4db847eca126ce649566ea710ef227426f433122752b80d1d6b8acf9d0df07b5597c1e45447e3a2fcb3391756e834e8e75f99df8e51e
SHA512 (libreswan-4.15.tar.gz) = 49a60688bb4a5241dbd791bdde0c71ae80cfb7383bb841ea0788a9d0237569d7ad79e59985c700526e3807817ddae77ebd57521897526fbb8fb93ffbea631efe SHA512 (libreswan-5.1.tar.gz) = 9ee8b071be414737c61529420af22b789d8968e99e376250afe42e1a5890d864dc2697ecfeb33a6c50de38a361bddf125852a8eb86318e544fc2f162f8ff6522
SHA512 (libreswan-4.15.tar.gz.asc) = 3db63ff7e6082dd710325e92b97dd4639299acb0958e256d876f636d69d77d1e2de517ddb356a72dff8d03dfe540d3398554acf4b6e8d05f2358efabc441f520 SHA512 (libreswan-5.1.tar.gz.asc) = 18cb6853c2b6c7c413291b861efc91d266fba2ac14c207e879b261ac2d67b6544a9dcaedabfd99156a652ef2cd6855f5b6e74dcf5bbd1ae7b347acdb32842f7d