Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
openSUSE
strongswan.12155
strongswan.spec
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File strongswan.spec of Package strongswan.12155
# # spec file for package strongswan # # Copyright (c) 2020 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed # upon. The license for this file, and modifications and additions to the # file, is the same license as for the pristine package itself (unless the # license for the pristine package is not an Open Source License, in which # case the license is the MIT License). An "Open Source License" is a # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. # Please submit bugfixes or comments via http://bugs.opensuse.org/ # Name: strongswan Version: 5.8.2 Release: 0 %define upstream_version %{version} %define strongswan_docdir %{_docdir}/%{name} %define strongswan_libdir %{_libdir}/ipsec %define strongswan_configs %{_sysconfdir}/strongswan.d %define strongswan_datadir %{_datadir}/strongswan %define strongswan_plugins %{strongswan_libdir}/plugins %define strongswan_templates %{strongswan_datadir}/templates %if 0 %bcond_without tests %else %bcond_with tests %endif %if 0%{suse_version} > 1310 %bcond_without fipscheck %else %bcond_with fipscheck %endif %ifarch %{ix86} ppc64le %bcond_without integrity %else %bcond_with integrity %endif %if 0%{suse_version} > 1110 %bcond_without farp %bcond_without afalg %bcond_without mysql %bcond_without sqlite %bcond_without gcrypt %bcond_without nm %else %bcond_with farp %bcond_with afalg %bcond_with mysql %bcond_with sqlite %bcond_with gcrypt %bcond_with nm %endif %if 0%{suse_version} > 1220 %bcond_without systemd %else %bcond_with systemd %endif Summary: OpenSource IPsec-based VPN Solution License: GPL-2.0+ Group: Productivity/Networking/Security URL: https://www.strongswan.org/ Source0: http://download.strongswan.org/strongswan-%{upstream_version}.tar.bz2 Source1: http://download.strongswan.org/strongswan-%{upstream_version}.tar.bz2.sig Source2: %{name}.init.in Source3: %{name}-rpmlintrc Source4: README.SUSE Source5: %{name}.keyring %if %{with fipscheck} Source6: fipscheck.sh.in Source7: fips-enforce.conf %endif Patch2: %{name}_ipsec_service.patch %if %{with fipscheck} Patch3: %{name}_fipscheck.patch %endif Patch5: 0005-ikev1-Don-t-retransmit-Aggressive-Mode-response.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildRequires: bison BuildRequires: curl-devel BuildRequires: flex BuildRequires: gmp-devel BuildRequires: gperf BuildRequires: libcap-devel BuildRequires: libopenssl-devel BuildRequires: libsoup-devel BuildRequires: openldap2-devel BuildRequires: pam-devel BuildRequires: pcsc-lite-devel BuildRequires: pkg-config %if %{with mysql} BuildRequires: libmysqlclient-devel %endif %if %{with sqlite} BuildRequires: sqlite3-devel %endif %if %{with gcrypt} BuildRequires: libgcrypt-devel %endif %if %{with nm} BuildRequires: pkgconfig(libnm) %endif %if %{with systemd} %{?systemd_requires} BuildRequires: pkgconfig(libsystemd) %endif BuildRequires: iptables %if %{with systemd} %{!?_rundir: %global _rundir /run} %{!?_tmpfilesdir: %global _tmpfilesdir /usr/lib/tmpfiles.d} %else %{!?_rundir: %global _rundir /var/run} %endif BuildRequires: autoconf BuildRequires: automake %if %{with fipscheck} BuildRequires: fipscheck %endif BuildRequires: libtool Requires: strongswan-ipsec = %{version} %description StrongSwan is an OpenSource IPsec-based VPN Solution for Linux * runs both on Linux 2.4 (KLIPS IPsec) and Linux 2.6 (NETKEY IPsec) kernels * implements both the IKEv1 and IKEv2 (RFC 4306) key exchange protocols * Fully tested support of IPv6 IPsec tunnel and transport connections * Dynamical IP address and interface update with IKEv2 MOBIKE (RFC 4555) * Automatic insertion and deletion of IPsec-policy-based firewall rules * Strong 128/192/256 bit AES or Camellia encryption, 3DES support * NAT-Traversal via UDP encapsulation and port floating (RFC 3947) * Dead Peer Detection (DPD, RFC 3706) takes care of dangling tunnels * Static virtual IPs and IKEv1 ModeConfig pull and push modes * XAUTH server and client functionality on top of IKEv1 Main Mode authentication * Virtual IP address pool managed by IKE daemon or SQL database * Secure IKEv2 EAP user authentication (EAP-SIM, EAP-AKA, EAP-MSCHAPv2, etc.) * Optional relaying of EAP messages to AAA server via EAP-RADIUS plugin * Support of IKEv2 Multiple Authentication Exchanges (RFC 4739) * Authentication based on X.509 certificates or preshared keys * Generation of a default self-signed certificate during first strongSwan startup * Retrieval and local caching of Certificate Revocation Lists via HTTP or LDAP * Full support of the Online Certificate Status Protocol (OCSP, RCF 2560). * CA management (OCSP and CRL URIs, default LDAP server) * Powerful IPsec policies based on wildcards or intermediate CAs * Group policies based on X.509 attribute certificates (RFC 3281) * Storage of RSA private keys and certificates on a smartcard (PKCS #11 interface) * Modular plugins for crypto algorithms and relational database interfaces * Support of elliptic curve DH groups and ECDSA certificates (Suite B, RFC 4869) * Optional built-in integrity and crypto tests for plugins and libraries * Smooth Linux desktop integration via the strongSwan NetworkManager applet This package triggers the installation of both, IKEv1 and IKEv2 daemons. Authors: -------- Andreas Steffen and others %package doc BuildArch: noarch Summary: OpenSource IPsec-based VPN Solution Group: Productivity/Networking/Security %description doc StrongSwan is an OpenSource IPsec-based VPN Solution for Linux This package provides the StrongSwan documentation. Authors: -------- Andreas Steffen and others %package libs0 Summary: OpenSource IPsec-based VPN Solution Group: Productivity/Networking/Security Conflicts: strongswan < %{version} %description libs0 StrongSwan is an OpenSource IPsec-based VPN Solution for Linux This package provides the strongswan library and plugins. %if %{with fipscheck} %package hmac Summary: HMAC files for FIPS-140-2 integrity Group: Productivity/Networking/Security Requires: fipscheck Requires: strongswan-ipsec = %{version} Requires: strongswan-libs0 = %{version} %description hmac The package provides HMAC hash files for FIPS-140-2 integrity checks, a config file disabling alternative algorithm implementations and a _fipscheck helper script preforming the integrity checks before e.g. "ipsec start" action is executed, when FIPS-140-2 compliant operation mode is enabled. %endif %package ipsec Summary: OpenSource IPsec-based VPN Solution Group: Productivity/Networking/Security Requires: strongswan-libs0 = %{version} Provides: VPN Provides: ipsec Provides: strongswan = %{version} Obsoletes: strongswan < %{version} Conflicts: freeswan openswan %description ipsec StrongSwan is an OpenSource IPsec-based VPN Solution for Linux This package provides the /etc/init.d/ipsec service script and allows to maintain both, IKEv1 and IKEv2, using the /etc/ipsec.conf and the /etc/ipsec.sectes files. %if %{with mysql} %package mysql Summary: OpenSource IPsec-based VPN Solution Group: Productivity/Networking/Security Requires: strongswan-libs0 = %{version} %description mysql StrongSwan is an OpenSource IPsec-based VPN Solution for Linux This package provides the strongswan mysql plugin. %endif %if %{with sqlite} %package sqlite Summary: OpenSource IPsec-based VPN Solution Group: Productivity/Networking/Security Requires: strongswan-libs0 = %{version} %description sqlite StrongSwan is an OpenSource IPsec-based VPN Solution for Linux This package provides the strongswan sqlite plugin. %endif %if %{with nm} %package nm Summary: OpenSource IPsec-based VPN Solution Group: Productivity/Networking/Security Requires: strongswan-libs0 = %{version} %description nm StrongSwan is an OpenSource IPsec-based VPN Solution for Linux This package provides the NetworkManager plugin to control the charon IKEv2 daemon through D-Bus, designed to work using the NetworkManager-strongswan graphical user interface. %endif %if %{with tests} %package tests Summary: OpenSource IPsec-based VPN Solution Group: Productivity/Networking/Security Requires: strongswan-libs0 = %{version} %description tests StrongSwan is an OpenSource IPsec-based VPN Solution for Linux This package provides the strongswan crypto test-vectors plugin and the load testing plugin for IKEv2 daemon. %endif %prep %setup -q -n %{name}-%{upstream_version} %patch2 -p0 %if %{with fipscheck} %patch3 -p1 %endif %patch5 -p1 sed -e 's|@libexecdir@|%_libexecdir|g' \ < %{_sourcedir}/strongswan.init.in \ > strongswan.init %if %{with fipscheck} sed -e 's|@IPSEC_DIR@|%{_libexecdir}/ipsec|g' \ -e 's|@IPSEC_LIBDIR@|%{_libdir}/ipsec|g' \ -e 's|@IPSEC_SBINDIR@|%{_sbindir}|g' \ -e 's|@IPSEC_BINDIR@|%{_bindir}|g' \ < %{_sourcedir}/fipscheck.sh.in \ > _fipscheck %endif %build CFLAGS="%{optflags} -W -Wall -Wno-pointer-sign -Wno-strict-aliasing -Wno-unused-parameter" export CFLAGS autoreconf --force --install %configure \ %if %{with integrity} --enable-integrity-test \ %endif --with-capabilities=libcap \ --with-plugindir=%{strongswan_plugins} \ --with-resolv-conf=%{_rundir}/%{name}/resolv.conf \ --with-piddir=%{_rundir}/%{name} \ %if %{with systemd} --enable-systemd \ --with-systemdsystemunitdir=%{_unitdir} \ %endif --enable-pkcs11 \ --enable-openssl \ --enable-agent \ %if %{with gcrypt} --enable-gcrypt \ %else --disable-gcrypt \ %endif --enable-blowfish \ --enable-ctr \ --enable-ccm \ --enable-gcm \ --enable-unity \ --enable-md4 \ %if %{with afalg} --enable-af-alg \ %endif --enable-eap-sim \ --enable-eap-sim-file \ --enable-eap-sim-pcsc \ --enable-eap-aka \ --enable-eap-aka-3gpp2 \ --enable-eap-simaka-sql \ --enable-eap-simaka-pseudonym \ --enable-eap-simaka-reauth \ --enable-eap-identity \ --enable-eap-md5 \ --enable-eap-gtc \ --enable-eap-mschapv2 \ --enable-eap-tls \ --enable-eap-ttls \ --enable-eap-peap \ --enable-eap-tnc \ --enable-eap-dynamic \ --enable-eap-radius \ --enable-xauth-eap \ --enable-xauth-pam \ --enable-tnc-pdp \ --enable-tnc-imc \ --enable-tnc-imv \ --enable-tnccs-11 \ --enable-tnccs-20 \ --enable-tnccs-dynamic \ --enable-imc-test \ --enable-imv-test \ --enable-imc-scanner \ --enable-imv-scanner \ --enable-ha \ --enable-dhcp \ %if %{with farp} --enable-farp \ %endif --enable-smp \ --enable-sql \ --enable-attr-sql \ --enable-addrblock \ --enable-radattr \ --enable-mediation \ --enable-led \ --enable-certexpire \ --enable-duplicheck \ --enable-coupling \ %if %{with mysql} --enable-mysql \ %endif %if %{with sqlite} --enable-sqlite \ %endif %if %{with nm} --enable-nm \ %else --disable-nm \ %endif %if %{with tests} --enable-conftest \ --enable-load-tester \ --enable-test-vectors \ %endif --enable-ldap \ --enable-soup \ --enable-curl \ --disable-static make %{?_smp_mflags} %install install -d -m755 %{buildroot}/%{_sbindir}/ install -d -m755 %{buildroot}/%{_sysconfdir}/ipsec.d/ %if %{with systemd} ln -sf %{_sbindir}/service %{buildroot}/%{_sbindir}/rcstrongswan %else install -d -m755 %{buildroot}/%{_sysconfdir}/init.d/ install -m755 strongswan.init %{buildroot}/%{_sysconfdir}/init.d/ipsec ln -s %{_sysconfdir}/init.d/ipsec %{buildroot}/%{_sbindir}/rcipsec %endif # # Ensure, plugin -> library dependencies can be resolved # (e.g. libtls) to avoid plugin segment checksum errors. # LD_LIBRARY_PATH="%{buildroot}-$$/%{strongswan_libdir}" \ %make_install # # checksums are calculated during make install using the # installed binaries/libraries... but find-debuginfo.sh # extracts debuginfo/debugsource breaking file checksums. # let find-debuginfo.sh run on a build root copy and then # calculate the checksums. # %if %{with integrity} %{?__debug_package: if test -x %{_rpmconfigdir}/find-debuginfo.sh ; then cp -a "%{buildroot}" "%{buildroot}-$$" RPM_BUILD_ROOT="%{buildroot}-$$" \ %{_rpmconfigdir}/find-debuginfo.sh \ %{?_find_debuginfo_opts} "%{buildroot}-$$" make -C src/checksum clean rm -f src/checksum/checksum_builder LD_LIBRARY_PATH="%{buildroot}-$$/%{strongswan_libdir}" \ make -C src/checksum install DESTDIR="%{buildroot}-$$" mv "%{buildroot}-$$/%{strongswan_libdir}/libchecksum.so" \ "%{buildroot}/%{strongswan_libdir}/libchecksum.so" rm -rf "%{buildroot}-$$" fi } %endif # rm -f %{buildroot}/%{_sysconfdir}/ipsec.secrets cat << EOT > %{buildroot}/%{_sysconfdir}/ipsec.secrets # # ipsec.secrets # # This file holds the RSA private keys or the PSK preshared secrets for # the IKE/IPsec authentication. See the ipsec.secrets(5) manual page. # EOT # %if ! %{with mysql} rm -f %{buildroot}/%{strongswan_templates}/database/sql/mysql.sql %endif %if ! %{with sqlite} rm -f %{buildroot}/%{strongswan_templates}/database/sql/sqlite.sql %endif rm -f %{buildroot}/%{strongswan_libdir}/lib{charon,hydra,strongswan,pttls}.so rm -f %{buildroot}/%{strongswan_libdir}/lib{radius,simaka,tls,tnccs,imcv}.so find %{buildroot}/%{strongswan_libdir} -type f -name "*.la" -delete # install -d -m755 %{buildroot}/%{strongswan_docdir}/ install -c -m644 TODO NEWS README COPYING LICENSE \ AUTHORS ChangeLog \ %{buildroot}/%{strongswan_docdir}/ install -c -m644 %{_sourcedir}/README.SUSE \ %{buildroot}/%{strongswan_docdir}/ %if %{with systemd} install -d -m 0755 %{buildroot}%{_tmpfilesdir} echo 'd %{_rundir}/%{name} 0770 root root' > %{buildroot}%{_tmpfilesdir}/%{name}.conf %endif %if %{with fipscheck} # # note: keep the following, _fipscheck's and file lists in sync # install -c -m750 _fipscheck %{buildroot}/%{_libexecdir}/ipsec/ install -c -m644 %{_sourcedir}/fips-enforce.conf \ %{buildroot}/%{strongswan_configs}/charon/zzz_fips-enforce.conf # create fips hmac hashes _after_ install post run %{expand:%%global __os_install_post {%__os_install_post for f in %{buildroot}/%{strongswan_libdir}/lib*.so.*.*.* \ %{buildroot}/%{strongswan_libdir}/imcvs/*.so \ %{buildroot}/%{strongswan_plugins}/*.so \ %{buildroot}/%{_libexecdir}/ipsec/charon \ %{buildroot}/%{_libexecdir}/ipsec/charon-nm \ %{buildroot}/%{_libexecdir}/ipsec/stroke \ %{buildroot}/%{_libexecdir}/ipsec/starter \ %{buildroot}/%{_libexecdir}/ipsec/pool \ %{buildroot}/%{_libexecdir}/ipsec/scepclient \ %{buildroot}/%{_libexecdir}/ipsec/imv_policy_manager \ %{buildroot}/%{_libexecdir}/ipsec/_fipscheck \ %{buildroot}/%{_bindir}/pt-tls-client \ %{buildroot}/%{_sbindir}/ipsec \ ; do /usr/bin/fipshmac "$f" done }} %endif %post libs0 /sbin/ldconfig %{?tmpfiles_create:%tmpfiles_create %{_tmpfilesdir}/%{name}.conf} %{!?tmpfiles_create:test -d %{_rundir}/%{name} || mkdir -p %{_rundir}/%{name}} %postun libs0 -p /sbin/ldconfig %pre ipsec %if %{with systemd} %service_add_pre %{name}.service %endif %post ipsec %if %{with systemd} %service_add_post %{name}.service %endif %preun ipsec %if %{with systemd} %service_del_preun %{name}.service %else %{stop_on_removal ipsec} %endif if test -s %{_sysconfdir}/ipsec.secrets.rpmsave ; then cp -p --backup=numbered %{_sysconfdir}/ipsec.secrets.rpmsave \ %{_sysconfdir}/ipsec.secrets.rpmsave.old fi if test -s %{_sysconfdir}/ipsec.conf.rpmsave ; then cp -p --backup=numbered %{_sysconfdir}/ipsec.conf.rpmsave \ %{_sysconfdir}/ipsec.conf.rpmsave.old fi %postun ipsec %if %{with systemd} %service_del_postun %{name}.service %endif %files %defattr(-,root,root) %dir %{strongswan_docdir} %{strongswan_docdir}/README.SUSE %if %{with fipscheck} %files hmac %defattr(-,root,root) %dir %{strongswan_configs} %dir %{strongswan_configs}/charon %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/zzz_fips-enforce.conf %dir %{strongswan_libdir} %{strongswan_libdir}/.*.hmac %{strongswan_libdir}/imcvs/.*.hmac %dir %{strongswan_plugins} %{strongswan_plugins}/.*.hmac %dir %{_libexecdir}/ipsec %{_libexecdir}/ipsec/_fipscheck %{_libexecdir}/ipsec/.*.hmac %{_sbindir}/.ipsec.hmac %{_bindir}/.pt-tls-client.hmac %endif %files ipsec %defattr(-,root,root) %config(noreplace) %attr(600,root,root) %{_sysconfdir}/ipsec.conf %config(noreplace) %attr(600,root,root) %{_sysconfdir}/ipsec.secrets %config(noreplace) %attr(600,root,root) %{_sysconfdir}/swanctl/swanctl.conf %dir %{_sysconfdir}/swanctl %dir %{_sysconfdir}/ipsec.d %dir %{_sysconfdir}/ipsec.d/crls %dir %{_sysconfdir}/ipsec.d/reqs %dir %{_sysconfdir}/ipsec.d/certs %dir %{_sysconfdir}/ipsec.d/acerts %dir %{_sysconfdir}/ipsec.d/aacerts %dir %{_sysconfdir}/ipsec.d/cacerts %dir %{_sysconfdir}/ipsec.d/ocspcerts %dir %attr(700,root,root) %{_sysconfdir}/ipsec.d/private %if %{with systemd} %{_unitdir}/strongswan-starter.service %{_unitdir}/strongswan.service %{_datadir}/dbus-1/system.d/nm-strongswan-service.conf %{_sbindir}/rcstrongswan %{_sbindir}/charon-systemd %else %config %{_sysconfdir}/init.d/ipsec %{_sbindir}/rcipsec %endif %{_bindir}/pki %{_bindir}/pt-tls-client %{_sbindir}/ipsec %{_sbindir}/swanctl %{_mandir}/man1/pki*.1* %{_mandir}/man1/pt-tls-client.1* %{_mandir}/man8/ipsec.8* %{_mandir}/man5/ipsec.conf.5* %{_mandir}/man5/ipsec.secrets.5* %{_mandir}/man5/strongswan.conf.5* %dir %{_libexecdir}/ipsec %{_libexecdir}/ipsec/_copyright %{_libexecdir}/ipsec/_updown %if %{with test} %{_libexecdir}/ipsec/conftest %endif %{_libexecdir}/ipsec/xfrmi %{_libexecdir}/ipsec/duplicheck %{_libexecdir}/ipsec/pool %{_libexecdir}/ipsec/scepclient %{_libexecdir}/ipsec/starter %{_libexecdir}/ipsec/stroke %{_libexecdir}/ipsec/charon %{_libexecdir}/ipsec/_imv_policy %{_libexecdir}/ipsec/imv_policy_manager %dir %{strongswan_plugins} %{strongswan_plugins}/libstrongswan-drbg.so %{strongswan_plugins}/libstrongswan-stroke.so %{strongswan_plugins}/libstrongswan-updown.so %files doc %defattr(-,root,root) %dir %{strongswan_docdir} %{strongswan_docdir}/TODO %{strongswan_docdir}/NEWS %{strongswan_docdir}/README %{strongswan_docdir}/COPYING %{strongswan_docdir}/LICENSE %{strongswan_docdir}/AUTHORS %{strongswan_docdir}/ChangeLog %{_mandir}/man8/scepclient.8* %{_mandir}/man5/swanctl.conf.5.* %{_mandir}/man8/swanctl.8.* %files libs0 %defattr(-,root,root) %if %{with systemd} %{_tmpfilesdir}/%{name}.conf %endif %config(noreplace) %attr(600,root,root) %{_sysconfdir}/strongswan.conf %dir %{strongswan_configs} %dir %{strongswan_configs}/charon %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon.conf %if %{with systemd} %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon-systemd.conf %endif %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon-logging.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/imcv.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/pki.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/pool.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/scepclient.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/starter.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/tnc.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/swanctl.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/addrblock.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/aes.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/counters.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/curve25519.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/drbg.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/vici.conf %if %{with afalg} %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/af-alg.conf %endif %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/agent.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/attr.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/attr-sql.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/blowfish.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/ccm.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/certexpire.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/cmac.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/constraints.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/coupling.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/ctr.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/curl.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/des.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/dhcp.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/dnskey.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/duplicheck.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-aka-3gpp2.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-aka.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-dynamic.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-gtc.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-identity.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-md5.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-mschapv2.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-peap.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-radius.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-simaka-pseudonym.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-simaka-reauth.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-simaka-sql.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-sim.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-sim-file.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-sim-pcsc.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-tls.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-tnc.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-ttls.conf %if %{with farp} %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/farp.conf %endif %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/fips-prf.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/gcm.conf %if %{with gcrypt} %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/gcrypt.conf %endif %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/gmp.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/ha.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/hmac.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/kernel-netlink.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/ldap.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/led.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/md4.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/md5.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/mgf1.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/nonce.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/openssl.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/pem.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/pgp.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/pkcs11.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/pkcs12.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/pkcs1.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/pkcs7.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/pkcs8.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/pubkey.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/radattr.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/random.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/rc2.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/resolve.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/revocation.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/sha1.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/sha2.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/smp.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/socket-default.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/soup.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/sql.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/sshkey.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/stroke.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/tnccs-11.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/tnccs-20.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/tnccs-dynamic.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/tnc-imc.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/tnc-imv.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/tnc-pdp.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/tnc-tnccs.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/unity.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/updown.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/x509.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/xauth-eap.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/xauth-generic.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/xauth-pam.conf %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/xcbc.conf %dir %{strongswan_libdir} %if %{with integrity} %{strongswan_libdir}/libchecksum.so %endif %{strongswan_libdir}/libcharon.so.* %{strongswan_libdir}/libtpmtss.so.* %{strongswan_libdir}/libtpmtss.so %{strongswan_libdir}/libvici.so %{strongswan_libdir}/libvici.so.* %{strongswan_libdir}/libpttls.so.* %{strongswan_libdir}/libradius.so.* %{strongswan_libdir}/libsimaka.so.* %{strongswan_libdir}/libstrongswan.so.* %{strongswan_libdir}/libtls.so.* %{strongswan_libdir}/libtnccs.so.* %{strongswan_libdir}/libimcv.so.* %dir %{strongswan_libdir}/imcvs %{strongswan_libdir}/imcvs/imc-scanner.so %{strongswan_libdir}/imcvs/imc-test.so %{strongswan_libdir}/imcvs/imv-scanner.so %{strongswan_libdir}/imcvs/imv-test.so %dir %{strongswan_plugins} %{strongswan_plugins}/libstrongswan-addrblock.so %{strongswan_plugins}/libstrongswan-aes.so %if %{with afalg} %{strongswan_plugins}/libstrongswan-af-alg.so %endif %{strongswan_plugins}/libstrongswan-agent.so %{strongswan_plugins}/libstrongswan-attr.so %{strongswan_plugins}/libstrongswan-attr-sql.so %{strongswan_plugins}/libstrongswan-blowfish.so %{strongswan_plugins}/libstrongswan-ccm.so %{strongswan_plugins}/libstrongswan-certexpire.so %{strongswan_plugins}/libstrongswan-cmac.so %{strongswan_plugins}/libstrongswan-counters.so %{strongswan_plugins}/libstrongswan-constraints.so %{strongswan_plugins}/libstrongswan-coupling.so %{strongswan_plugins}/libstrongswan-ctr.so %{strongswan_plugins}/libstrongswan-curl.so %{strongswan_plugins}/libstrongswan-des.so %{strongswan_plugins}/libstrongswan-dhcp.so %{strongswan_plugins}/libstrongswan-dnskey.so %{strongswan_plugins}/libstrongswan-duplicheck.so %{strongswan_plugins}/libstrongswan-eap-aka-3gpp2.so %{strongswan_plugins}/libstrongswan-eap-aka.so %{strongswan_plugins}/libstrongswan-eap-dynamic.so %{strongswan_plugins}/libstrongswan-eap-gtc.so %{strongswan_plugins}/libstrongswan-eap-identity.so %{strongswan_plugins}/libstrongswan-eap-md5.so %{strongswan_plugins}/libstrongswan-eap-mschapv2.so %{strongswan_plugins}/libstrongswan-eap-peap.so %{strongswan_plugins}/libstrongswan-eap-radius.so %{strongswan_plugins}/libstrongswan-eap-sim-file.so %{strongswan_plugins}/libstrongswan-eap-sim-pcsc.so %{strongswan_plugins}/libstrongswan-eap-sim.so %{strongswan_plugins}/libstrongswan-eap-simaka-pseudonym.so %{strongswan_plugins}/libstrongswan-eap-simaka-reauth.so %{strongswan_plugins}/libstrongswan-eap-simaka-sql.so %{strongswan_plugins}/libstrongswan-eap-tls.so %{strongswan_plugins}/libstrongswan-eap-tnc.so %{strongswan_plugins}/libstrongswan-eap-ttls.so %if %{with farp} %{strongswan_plugins}/libstrongswan-farp.so %endif %{strongswan_plugins}/libstrongswan-fips-prf.so %{strongswan_plugins}/libstrongswan-gcm.so %if %{with gcrypt} %{strongswan_plugins}/libstrongswan-gcrypt.so %endif %{strongswan_plugins}/libstrongswan-gmp.so %{strongswan_plugins}/libstrongswan-ha.so %{strongswan_plugins}/libstrongswan-hmac.so %{strongswan_plugins}/libstrongswan-kernel-netlink.so %{strongswan_plugins}/libstrongswan-ldap.so %{strongswan_plugins}/libstrongswan-led.so %{strongswan_plugins}/libstrongswan-md4.so %{strongswan_plugins}/libstrongswan-md5.so %{strongswan_plugins}/libstrongswan-mgf1.so %{strongswan_plugins}/libstrongswan-nonce.so %{strongswan_plugins}/libstrongswan-openssl.so %{strongswan_plugins}/libstrongswan-pem.so %{strongswan_plugins}/libstrongswan-pgp.so %{strongswan_plugins}/libstrongswan-pkcs1.so %{strongswan_plugins}/libstrongswan-pkcs11.so %{strongswan_plugins}/libstrongswan-pkcs12.so %{strongswan_plugins}/libstrongswan-pkcs7.so %{strongswan_plugins}/libstrongswan-pkcs8.so %{strongswan_plugins}/libstrongswan-pubkey.so %{strongswan_plugins}/libstrongswan-radattr.so %{strongswan_plugins}/libstrongswan-random.so %{strongswan_plugins}/libstrongswan-rc2.so %{strongswan_plugins}/libstrongswan-resolve.so %{strongswan_plugins}/libstrongswan-revocation.so %{strongswan_plugins}/libstrongswan-sha1.so %{strongswan_plugins}/libstrongswan-sha2.so %{strongswan_plugins}/libstrongswan-smp.so %{strongswan_plugins}/libstrongswan-socket-default.so %{strongswan_plugins}/libstrongswan-soup.so %{strongswan_plugins}/libstrongswan-sql.so %{strongswan_plugins}/libstrongswan-sshkey.so %{strongswan_plugins}/libstrongswan-tnc-imc.so %{strongswan_plugins}/libstrongswan-tnc-imv.so %{strongswan_plugins}/libstrongswan-tnc-pdp.so %{strongswan_plugins}/libstrongswan-tnc-tnccs.so %{strongswan_plugins}/libstrongswan-tnccs-11.so %{strongswan_plugins}/libstrongswan-tnccs-20.so %{strongswan_plugins}/libstrongswan-tnccs-dynamic.so %{strongswan_plugins}/libstrongswan-unity.so %{strongswan_plugins}/libstrongswan-x509.so %{strongswan_plugins}/libstrongswan-xauth-eap.so %{strongswan_plugins}/libstrongswan-xauth-generic.so %{strongswan_plugins}/libstrongswan-xauth-pam.so %{strongswan_plugins}/libstrongswan-xcbc.so %{strongswan_plugins}/libstrongswan-curve25519.so %{strongswan_plugins}/libstrongswan-vici.so %dir %{strongswan_datadir} %dir %{strongswan_templates} %dir %{strongswan_templates}/config %dir %{strongswan_templates}/config/plugins %dir %{strongswan_templates}/config/strongswan.d %dir %{strongswan_templates}/database %dir %{strongswan_templates}/database/imv %dir %{strongswan_templates}/database/sql %{strongswan_templates}/config/strongswan.conf %{strongswan_templates}/config/plugins/addrblock.conf %{strongswan_templates}/config/plugins/aes.conf %if %{with afalg} %{strongswan_templates}/config/plugins/af-alg.conf %endif %{strongswan_templates}/config/plugins/agent.conf %{strongswan_templates}/config/plugins/attr-sql.conf %{strongswan_templates}/config/plugins/attr.conf %{strongswan_templates}/config/plugins/blowfish.conf %{strongswan_templates}/config/plugins/ccm.conf %{strongswan_templates}/config/plugins/certexpire.conf %{strongswan_templates}/config/plugins/cmac.conf %{strongswan_templates}/config/plugins/counters.conf %{strongswan_templates}/config/plugins/constraints.conf %{strongswan_templates}/config/plugins/coupling.conf %{strongswan_templates}/config/plugins/ctr.conf %{strongswan_templates}/config/plugins/curl.conf %{strongswan_templates}/config/plugins/des.conf %{strongswan_templates}/config/plugins/dhcp.conf %{strongswan_templates}/config/plugins/dnskey.conf %{strongswan_templates}/config/plugins/drbg.conf %{strongswan_templates}/config/plugins/duplicheck.conf %{strongswan_templates}/config/plugins/eap-aka-3gpp2.conf %{strongswan_templates}/config/plugins/eap-aka.conf %{strongswan_templates}/config/plugins/eap-dynamic.conf %{strongswan_templates}/config/plugins/eap-gtc.conf %{strongswan_templates}/config/plugins/eap-identity.conf %{strongswan_templates}/config/plugins/eap-md5.conf %{strongswan_templates}/config/plugins/eap-mschapv2.conf %{strongswan_templates}/config/plugins/eap-peap.conf %{strongswan_templates}/config/plugins/eap-radius.conf %{strongswan_templates}/config/plugins/eap-sim-file.conf %{strongswan_templates}/config/plugins/eap-sim-pcsc.conf %{strongswan_templates}/config/plugins/eap-sim.conf %{strongswan_templates}/config/plugins/eap-simaka-pseudonym.conf %{strongswan_templates}/config/plugins/eap-simaka-reauth.conf %{strongswan_templates}/config/plugins/eap-simaka-sql.conf %{strongswan_templates}/config/plugins/eap-tls.conf %{strongswan_templates}/config/plugins/eap-tnc.conf %{strongswan_templates}/config/plugins/eap-ttls.conf %if %{with farp} %{strongswan_templates}/config/plugins/farp.conf %endif %{strongswan_templates}/config/plugins/fips-prf.conf %{strongswan_templates}/config/plugins/gcm.conf %if %{with gcrypt} %{strongswan_templates}/config/plugins/gcrypt.conf %endif %{strongswan_templates}/config/plugins/gmp.conf %{strongswan_templates}/config/plugins/ha.conf %{strongswan_templates}/config/plugins/hmac.conf %{strongswan_templates}/config/plugins/kernel-netlink.conf %{strongswan_templates}/config/plugins/ldap.conf %{strongswan_templates}/config/plugins/led.conf %{strongswan_templates}/config/plugins/md4.conf %{strongswan_templates}/config/plugins/md5.conf %{strongswan_templates}/config/plugins/mgf1.conf %{strongswan_templates}/config/plugins/nonce.conf %{strongswan_templates}/config/plugins/openssl.conf %{strongswan_templates}/config/plugins/pem.conf %{strongswan_templates}/config/plugins/pgp.conf %{strongswan_templates}/config/plugins/pkcs1.conf %{strongswan_templates}/config/plugins/pkcs11.conf %{strongswan_templates}/config/plugins/pkcs12.conf %{strongswan_templates}/config/plugins/pkcs7.conf %{strongswan_templates}/config/plugins/pkcs8.conf %{strongswan_templates}/config/plugins/pubkey.conf %{strongswan_templates}/config/plugins/radattr.conf %{strongswan_templates}/config/plugins/random.conf %{strongswan_templates}/config/plugins/rc2.conf %{strongswan_templates}/config/plugins/resolve.conf %{strongswan_templates}/config/plugins/revocation.conf %{strongswan_templates}/config/plugins/sha1.conf %{strongswan_templates}/config/plugins/sha2.conf %{strongswan_templates}/config/plugins/smp.conf %{strongswan_templates}/config/plugins/socket-default.conf %{strongswan_templates}/config/plugins/soup.conf %{strongswan_templates}/config/plugins/sql.conf %{strongswan_templates}/config/plugins/sshkey.conf %{strongswan_templates}/config/plugins/stroke.conf %{strongswan_templates}/config/plugins/tnc-imc.conf %{strongswan_templates}/config/plugins/tnc-imv.conf %{strongswan_templates}/config/plugins/tnc-pdp.conf %{strongswan_templates}/config/plugins/tnc-tnccs.conf %{strongswan_templates}/config/plugins/tnccs-11.conf %{strongswan_templates}/config/plugins/tnccs-20.conf %{strongswan_templates}/config/plugins/tnccs-dynamic.conf %{strongswan_templates}/config/plugins/unity.conf %{strongswan_templates}/config/plugins/updown.conf %{strongswan_templates}/config/plugins/x509.conf %{strongswan_templates}/config/plugins/xauth-eap.conf %{strongswan_templates}/config/plugins/xauth-generic.conf %{strongswan_templates}/config/plugins/xauth-pam.conf %{strongswan_templates}/config/plugins/xcbc.conf %{strongswan_templates}/config/plugins/curve25519.conf %{strongswan_templates}/config/plugins/vici.conf %if %{with systemd} %{strongswan_templates}/config/strongswan.d/charon-systemd.conf %endif %{strongswan_templates}/config/strongswan.d/charon-logging.conf %{strongswan_templates}/config/strongswan.d/charon.conf %{strongswan_templates}/config/strongswan.d/imcv.conf %{strongswan_templates}/config/strongswan.d/pki.conf %{strongswan_templates}/config/strongswan.d/pool.conf %{strongswan_templates}/config/strongswan.d/scepclient.conf %{strongswan_templates}/config/strongswan.d/starter.conf %{strongswan_templates}/config/strongswan.d/tnc.conf %{strongswan_templates}/config/strongswan.d/swanctl.conf %{strongswan_templates}/database/imv/data.sql %{strongswan_templates}/database/imv/tables.sql %if %{with nm} %files nm %defattr(-,root,root) %dir %{_libexecdir}/ipsec %dir %{strongswan_plugins} %{_libexecdir}/ipsec/charon-nm %endif %if %{with mysql} %files mysql %defattr(-,root,root) %dir %{strongswan_libdir} %dir %{strongswan_plugins} %{strongswan_plugins}/libstrongswan-mysql.so %dir %{strongswan_configs} %dir %{strongswan_configs}/charon %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/mysql.conf %dir %{strongswan_datadir} %dir %{strongswan_templates} %dir %{strongswan_templates}/config %dir %{strongswan_templates}/config/plugins %dir %{strongswan_templates}/database %dir %{strongswan_templates}/database/sql %{strongswan_templates}/config/plugins/mysql.conf %{strongswan_templates}/database/imv/tables-mysql.sql %{strongswan_templates}/database/sql/mysql.sql %endif %if %{with sqlite} %files sqlite %defattr(-,root,root) %dir %{strongswan_libdir} %dir %{strongswan_plugins} %{strongswan_plugins}/libstrongswan-sqlite.so %dir %{strongswan_configs} %dir %{strongswan_configs}/charon %config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/sqlite.conf %dir %{strongswan_datadir} %dir %{strongswan_templates} %dir %{strongswan_templates}/config %dir %{strongswan_templates}/config/plugins %dir %{strongswan_templates}/database %dir %{strongswan_templates}/database/sql %{strongswan_templates}/config/plugins/sqlite.conf %{strongswan_templates}/database/sql/sqlite.sql %endif %if %{with tests} %files tests %defattr(-,root,root) %dir %{strongswan_configs} %dir %{strongswan_configs}/charon %{strongswan_configs}/charon/load-tester.conf %{strongswan_configs}/charon/test-vectors.conf %dir %{strongswan_templates} %dir %{strongswan_templates}/config %dir %{strongswan_templates}/config/plugins %{strongswan_templates}/config/plugins/load-tester.conf %{strongswan_templates}/config/plugins/test-vectors.conf %dir %{_libexecdir}/ipsec %{_libexecdir}/ipsec/conftest %{_libexecdir}/ipsec/load-tester %dir %{strongswan_libdir} %dir %{strongswan_plugins} %{strongswan_plugins}/libstrongswan-load-tester.so %{strongswan_plugins}/libstrongswan-test-vectors.so %endif %changelog
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor