net/strongswan/Makefile

   1 #
   2 # Copyright (C) 2012-2018 OpenWrt.org
   3 #
   4 # This is free software, licensed under the GNU General Public License v2.
   5 # See /LICENSE for more information.
   6 #
   7
   8 include $(TOPDIR)/rules.mk
   9
  10 PKG_NAME:=strongswan
  11 PKG_VERSION:=5.7.2
  12 PKG_RELEASE:=1
  13
  14 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2
  15 PKG_SOURCE_URL:=http://download.strongswan.org/ http://download2.strongswan.org/
  16 PKG_HASH:=308e3ba76e2ce2da070e48fcebbe1fa923a27cc71e43bf63917e6f2a889ecc70
  17 PKG_LICENSE:=GPL-2.0+
  18 PKG_MAINTAINER:=Stijn Tintel <stijn@linux-ipv6.be>
  19
  20 PKG_MOD_AVAILABLE:= \
  21         addrblock \
  22         aes \
  23         af-alg \
  24         agent \
  25         attr \
  26         attr-sql \
  27         blowfish \
  28         ccm \
  29         cmac \
  30         constraints \
  31         connmark \
  32         coupling \
  33         ctr \
  34         curl \
  35         curve25519 \
  36         des \
  37         dhcp \
  38         dnskey \
  39         duplicheck \
  40         eap-identity \
  41         eap-md5 \
  42         eap-mschapv2 \
  43         eap-radius \
  44         eap-tls \
  45         farp \
  46         fips-prf \
  47         forecast \
  48         gcm \
  49         gcrypt \
  50         gmp \
  51         gmpdh \
  52         ha \
  53         hmac \
  54         kernel-libipsec \
  55         kernel-netlink \
  56         ldap \
  57         led \
  58         load-tester \
  59         nonce \
  60         md4 \
  61         md5 \
  62         mysql \
  63         openssl \
  64         pem \
  65         pgp \
  66         pkcs1 \
  67         pkcs7 \
  68         pkcs8 \
  69         pkcs11 \
  70         pkcs12 \
  71         pubkey \
  72         random \
  73         rc2 \
  74         resolve \
  75         revocation \
  76         sha1 \
  77         sha2 \
  78         smp \
  79         socket-default \
  80         socket-dynamic \
  81         sql \
  82         sqlite \
  83         sshkey \
  84         stroke \
  85         test-vectors \
  86         unity \
  87         uci \
  88         updown \
  89         vici \
  90         whitelist \
  91         x509 \
  92         xauth-eap \
  93         xauth-generic \
  94         xcbc
  95
  96 PKG_CONFIG_DEPENDS:= \
  97         CONFIG_STRONGSWAN_ROUTING_TABLE \
  98         CONFIG_STRONGSWAN_ROUTING_TABLE_PRIO \
  99         $(patsubst %,CONFIG_PACKAGE_strongswan-mod-%,$(PKG_MOD_AVAILABLE)) \
 100
 101 PKG_FIXUP:=autoreconf
 102 PKG_INSTALL:=1
 103 PKG_BUILD_PARALLEL:=1
 104
 105 include $(INCLUDE_DIR)/package.mk
 106 # strongswan-mod-mysql needs iconv
 107 include $(INCLUDE_DIR)/nls.mk
 108
 109 define Package/strongswan/Default
 110   SUBMENU:=VPN
 111   SECTION:=net
 112   CATEGORY:=Network
 113   TITLE:=StrongSwan
 114   URL:=http://www.strongswan.org/
 115 endef
 116
 117 define Package/strongswan/description/Default
 118  StrongSwan is an OpenSource IPsec implementation for the Linux operating system.
 119 endef
 120
 121 define Package/strongswan
 122 $(call Package/strongswan/Default)
 123   DEPENDS:= +libpthread +ip \
 124         +kmod-crypto-authenc \
 125         +kmod-ipsec +kmod-ipsec4 +IPV6:kmod-ipsec6 \
 126         +kmod-ipt-ipsec +iptables-mod-ipsec
 127 endef
 128
 129 define Package/strongswan/config
 130   source "$(SOURCE)/Config.in"
 131 endef
 132
 133 define Package/strongswan/description
 134 $(call Package/strongswan/description/Default)
 135  This package contains shared libraries and scripts.
 136 endef
 137
 138 define Package/strongswan-full
 139 $(call Package/strongswan/Default)
 140   TITLE+= (full)
 141   DEPENDS:= +strongswan \
 142         +strongswan-charon \
 143         +strongswan-charon-cmd \
 144         +strongswan-ipsec \
 145         +strongswan-mod-addrblock \
 146         +strongswan-mod-aes \
 147         +strongswan-mod-af-alg \
 148         +strongswan-mod-agent \
 149         +strongswan-mod-attr \
 150         +strongswan-mod-attr-sql \
 151         +strongswan-mod-blowfish \
 152         +strongswan-mod-ccm \
 153         +strongswan-mod-cmac \
 154         +strongswan-mod-constraints \
 155         +strongswan-mod-connmark \
 156         +strongswan-mod-coupling \
 157         +strongswan-mod-ctr \
 158         +strongswan-mod-curl \
 159         +strongswan-mod-curve25519 \
 160         +strongswan-mod-des \
 161         +strongswan-mod-dhcp \
 162         +strongswan-mod-dnskey \
 163         +strongswan-mod-duplicheck \
 164         +strongswan-mod-eap-identity \
 165         +strongswan-mod-eap-md5 \
 166         +strongswan-mod-eap-mschapv2 \
 167         +strongswan-mod-eap-radius \
 168         +strongswan-mod-eap-tls \
 169         +strongswan-mod-farp \
 170         +strongswan-mod-fips-prf \
 171         +strongswan-mod-forecast \
 172         +strongswan-mod-gcm \
 173         +strongswan-mod-gcrypt \
 174         +strongswan-mod-gmp \
 175         +strongswan-mod-ha \
 176         +strongswan-mod-hmac \
 177         +strongswan-mod-kernel-netlink \
 178         +strongswan-mod-ldap \
 179         +strongswan-mod-led \
 180         +strongswan-mod-load-tester \
 181         +strongswan-mod-nonce \
 182         +strongswan-mod-md4 \
 183         +strongswan-mod-md5 \
 184         +strongswan-mod-mysql \
 185         +strongswan-mod-openssl \
 186         +strongswan-mod-pem \
 187         +strongswan-mod-pgp \
 188         +strongswan-mod-pkcs1 \
 189         +strongswan-mod-pkcs7 \
 190         +strongswan-mod-pkcs8 \
 191         +strongswan-mod-pkcs11 \
 192         +strongswan-mod-pkcs12 \
 193         +strongswan-mod-pubkey \
 194         +strongswan-mod-random \
 195         +strongswan-mod-rc2 \
 196         +strongswan-mod-resolve \
 197         +strongswan-mod-revocation \
 198         +strongswan-mod-sha1 \
 199         +strongswan-mod-sha2 \
 200         +strongswan-mod-smp \
 201         +strongswan-mod-socket-default \
 202         +strongswan-mod-sql \
 203         +strongswan-mod-sqlite \
 204         +strongswan-mod-sshkey \
 205         +strongswan-mod-stroke \
 206         +strongswan-mod-test-vectors \
 207         +strongswan-mod-uci \
 208         +strongswan-mod-unity \
 209         +strongswan-mod-updown \
 210         +strongswan-mod-vici \
 211         +strongswan-mod-whitelist \
 212         +strongswan-mod-x509 \
 213         +strongswan-mod-xauth-eap \
 214         +strongswan-mod-xauth-generic \
 215         +strongswan-mod-xcbc \
 216         +strongswan-pki \
 217         +strongswan-scepclient \
 218         +strongswan-swanctl \
 219         @DEVEL
 220 endef
 221
 222 define Package/strongswan-full/description
 223 $(call Package/strongswan/description/Default)
 224  This meta-package contains dependencies for all of the strongswan plugins
 225  except kernel-libipsec,
 226  socket-dynamic and which are omitted in favor of the kernel-netlink and
 227  socket-default plugins.
 228 endef
 229
 230
 231 define Package/strongswan-default
 232 $(call Package/strongswan/Default)
 233   TITLE+= (default)
 234   DEPENDS:= +strongswan \
 235         +strongswan-charon \
 236         +strongswan-ipsec \
 237         +strongswan-mod-aes \
 238         +strongswan-mod-attr \
 239         +strongswan-mod-connmark \
 240         +strongswan-mod-constraints \
 241         +strongswan-mod-des \
 242         +strongswan-mod-dnskey \
 243         +strongswan-mod-fips-prf \
 244         +strongswan-mod-gmp \
 245         +strongswan-mod-hmac \
 246         +strongswan-mod-kernel-netlink \
 247         +strongswan-mod-md5 \
 248         +strongswan-mod-nonce \
 249         +strongswan-mod-pem \
 250         +strongswan-mod-pgp \
 251         +strongswan-mod-pkcs1 \
 252         +strongswan-mod-pubkey \
 253         +strongswan-mod-random \
 254         +strongswan-mod-rc2 \
 255         +strongswan-mod-resolve \
 256         +strongswan-mod-revocation \
 257         +strongswan-mod-sha1 \
 258         +strongswan-mod-sha2 \
 259         +strongswan-mod-socket-default \
 260         +strongswan-mod-sshkey \
 261         +strongswan-mod-stroke \
 262         +strongswan-mod-updown \
 263         +strongswan-mod-x509 \
 264         +strongswan-mod-xauth-generic \
 265         +strongswan-mod-xcbc
 266 endef
 267
 268 define Package/strongswan-default/description
 269 $(call Package/strongswan/description/Default)
 270  This meta-package contains only dependencies to match upstream defaults.
 271 endef
 272
 273
 274 define Package/strongswan-isakmp
 275 $(call Package/strongswan/Default)
 276   TITLE+= (isakmp)
 277   DEPENDS:= +strongswan \
 278         +strongswan-charon \
 279         +strongswan-ipsec \
 280         +strongswan-mod-aes \
 281         +strongswan-mod-des \
 282         +strongswan-mod-gmpdh \
 283         +strongswan-mod-hmac \
 284         +strongswan-mod-kernel-netlink \
 285         +strongswan-mod-md5 \
 286         +strongswan-mod-nonce \
 287         +strongswan-mod-pubkey \
 288         +strongswan-mod-random \
 289         +strongswan-mod-sha1 \
 290         +strongswan-mod-socket-default \
 291         +strongswan-mod-stroke \
 292         +strongswan-mod-uci \
 293         +strongswan-mod-updown
 294 endef
 295
 296 define Package/strongswan-isakmp/description
 297 $(call Package/strongswan/description/Default)
 298  This meta-package contains only dependencies to establish  ISAKMP /
 299  IKE PSK connections, dropping other capabilities in favor of small size
 300  Can fit most routers even with 4Mb flash (after removing IPv6 support).
 301 endef
 302
 303
 304 define Package/strongswan-minimal
 305 $(call Package/strongswan/Default)
 306   TITLE+= (minimal)
 307   DEPENDS:= +strongswan \
 308         +strongswan-charon \
 309         +strongswan-mod-aes \
 310         +strongswan-mod-gmp \
 311         +strongswan-mod-hmac \
 312         +strongswan-mod-kernel-netlink \
 313         +strongswan-mod-nonce \
 314         +strongswan-mod-pubkey \
 315         +strongswan-mod-random \
 316         +strongswan-mod-sha1 \
 317         +strongswan-mod-socket-default \
 318         +strongswan-mod-stroke \
 319         +strongswan-mod-updown \
 320         +strongswan-mod-x509 \
 321         +strongswan-mod-xcbc
 322 endef
 323
 324 define Package/strongswan-minimal/description
 325 $(call Package/strongswan/description/Default)
 326  This meta-package contains only dependencies for a minimal IKEv2 setup.
 327 endef
 328
 329 define Package/strongswan-charon
 330 $(call Package/strongswan/Default)
 331   TITLE+= IKEv1/IKEv2 keying daemon
 332   DEPENDS:= +strongswan
 333 endef
 334
 335 define Package/strongswan-charon/description
 336 $(call Package/strongswan/description/Default)
 337  This package contains charon, an IKEv2 keying daemon.
 338 endef
 339
 340 define Package/strongswan-charon-cmd
 341 $(call Package/strongswan/Default)
 342   TITLE+= charon-cmd utility
 343   DEPENDS:= +strongswan +strongswan-charon
 344 endef
 345
 346 define Package/strongswan-charon-cmd/description
 347 $(call Package/strongswan/description/Default)
 348  This package contains the charon-cmd utility.
 349 endef
 350
 351 define Package/strongswan-ipsec
 352 $(call Package/strongswan/Default)
 353   TITLE+= utilities
 354   DEPENDS:= +strongswan
 355 endef
 356
 357 define Package/strongswan-ipsec/description
 358 $(call Package/strongswan/description/Default)
 359  This package contains the ipsec utility.
 360 endef
 361
 362 define Package/strongswan-pki
 363 $(call Package/strongswan/Default)
 364   TITLE+= PKI tool
 365   DEPENDS:= +strongswan
 366 endef
 367
 368 define Package/strongswan-pki/description
 369 $(call Package/strongswan/description/Default)
 370  This package contains the pki tool.
 371 endef
 372
 373 define Package/strongswan-scepclient
 374 $(call Package/strongswan/Default)
 375   TITLE+= SCEP client
 376   DEPENDS:= +strongswan
 377 endef
 378
 379 define Package/strongswan-scepclient/description
 380 $(call Package/strongswan/description/Default)
 381  This package contains the SCEP client.
 382 endef
 383
 384 define Package/strongswan-swanctl
 385 $(call Package/strongswan/Default)
 386   TITLE+= swanctl utility
 387   DEPENDS:= +strongswan +strongswan-mod-vici
 388 endef
 389
 390 define Package/strongswan-swanctl/description
 391 $(call Package/strongswan/description/Default)
 392  This package contains the swanctl utility.
 393 endef
 394
 395 define Package/strongswan-libtls
 396 $(call Package/strongswan/Default)
 397   TITLE+= libtls
 398   DEPENDS:= +strongswan
 399 endef
 400
 401 define Package/strongswan-libtls/description
 402 $(call Package/strongswan/description/Default)
 403  This package contains libtls for strongSwan plugins eap-tls, eap-ttls,
 404  eap-peap, tnc-tnccs
 405 endef
 406
 407 define BuildPlugin
 408   define Package/strongswan-mod-$(1)
 409     $$(call Package/strongswan/Default)
 410     TITLE:= StrongSwan $(2) plugin
 411     DEPENDS:= +strongswan $(3)
 412   endef
 413
 414   define Package/strongswan-mod-$(1)/install
 415         $(INSTALL_DIR) $$(1)/etc/strongswan.d/charon
 416         if [ -f $(PKG_INSTALL_DIR)/etc/strongswan.d/charon/$(1).conf ]; then \
 417                 $(INSTALL_DATA) $(PKG_INSTALL_DIR)/etc/strongswan.d/charon/$(1).conf $$(1)/etc/strongswan.d/charon/; fi
 418         $(INSTALL_DIR) $$(1)/usr/lib/ipsec/plugins
 419         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-$(1).so \
 420                 $$(1)/usr/lib/ipsec/plugins/
 421         $(call Plugin/$(1)/install,$$(1))
 422   endef
 423
 424   $$(eval $$(call BuildPackage,strongswan-mod-$(1)))
 425 endef
 426
 427 CONFIGURE_ARGS+= \
 428         --disable-scripts \
 429         --disable-static \
 430         --disable-fast \
 431         --enable-mediation \
 432         --with-systemdsystemunitdir=no \
 433         $(if $(CONFIG_PACKAGE_strongswan-charon-cmd),--enable-cmd,--disable-cmd) \
 434         $(if $(CONFIG_PACKAGE_strongswan-pki),--enable-pki,--disable-pki) \
 435         $(if $(CONFIG_PACKAGE_strongswan-scepclient),--enable-scepclient,--disable-scepclient) \
 436         --with-random-device=/dev/random \
 437         --with-urandom-device=/dev/urandom \
 438         --with-routing-table="$(call qstrip,$(CONFIG_STRONGSWAN_ROUTING_TABLE))" \
 439         --with-routing-table-prio="$(call qstrip,$(CONFIG_STRONGSWAN_ROUTING_TABLE_PRIO))" \
 440         $(foreach m,$(PKG_MOD_AVAILABLE), \
 441           $(if $(CONFIG_PACKAGE_strongswan-mod-$(m)),--enable-$(m),--disable-$(m)) \
 442         ) \
 443         ac_cv_search___atomic_load=no
 444
 445 EXTRA_LDFLAGS+= -Wl,-rpath-link,$(STAGING_DIR)/usr/lib
 446
 447 define Package/strongswan/conffiles
 448 /etc/ipsec.d/
 449 /etc/ipsec.conf
 450 /etc/ipsec.secrets
 451 /etc/ipsec.user
 452 /etc/strongswan.conf
 453 /etc/strongswan.d/
 454 endef
 455
 456 define Package/strongswan/install
 457         $(INSTALL_DIR) $(1)/etc
 458         $(INSTALL_CONF) $(PKG_INSTALL_DIR)/etc/ipsec.conf $(1)/etc/
 459         $(INSTALL_CONF) $(PKG_INSTALL_DIR)/etc/strongswan.conf $(1)/etc/
 460         $(INSTALL_DIR) $(1)/usr/lib/ipsec
 461         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libstrongswan.so.* $(1)/usr/lib/ipsec/
 462         $(INSTALL_CONF) ./files/ipsec.secrets $(1)/etc/
 463         $(INSTALL_CONF) ./files/ipsec.user $(1)/etc/
 464         $(INSTALL_DIR) $(1)/etc/init.d
 465         $(INSTALL_BIN) ./files/ipsec.init $(1)/etc/init.d/ipsec
 466 endef
 467
 468 define Package/strongswan-default/install
 469         true
 470 endef
 471
 472 define Package/strongswan-full/install
 473         true
 474 endef
 475
 476 define Package/strongswan-isakmp/install
 477         true
 478 endef
 479
 480 define Package/strongswan-minimal/install
 481         true
 482 endef
 483
 484 define Package/strongswan-charon/install
 485         $(INSTALL_DIR) $(1)/etc/strongswan.d
 486         $(CP) $(PKG_INSTALL_DIR)/etc/strongswan.d/charon.conf $(1)/etc/strongswan.d
 487         $(CP) $(PKG_INSTALL_DIR)/etc/strongswan.d/charon-logging.conf $(1)/etc/strongswan.d
 488         $(INSTALL_DIR) $(1)/usr/lib/ipsec
 489         $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/lib/ipsec/charon $(1)/usr/lib/ipsec/
 490         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libcharon.so.* $(1)/usr/lib/ipsec/
 491 endef
 492
 493 define Package/strongswan-charon-cmd/install
 494         $(INSTALL_DIR) $(1)/usr/sbin
 495         $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/sbin/charon-cmd $(1)/usr/sbin/
 496 endef
 497
 498 define Package/strongswan-ipsec/install
 499         $(INSTALL_DIR) $(1)/usr/sbin
 500         $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/sbin/ipsec $(1)/usr/sbin/
 501 endef
 502
 503 define Package/strongswan-pki/install
 504         $(INSTALL_DIR) $(1)/etc/strongswan.d
 505         $(CP) $(PKG_INSTALL_DIR)/etc/strongswan.d/pki.conf $(1)/etc/strongswan.d/
 506         $(INSTALL_DIR) $(1)/usr/bin
 507         $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/pki $(1)/usr/bin/
 508 endef
 509
 510 define Package/strongswan-scepclient/install
 511         $(INSTALL_DIR) $(1)/etc/strongswan.d
 512         $(CP) $(PKG_INSTALL_DIR)/etc/strongswan.d/scepclient.conf $(1)/etc/strongswan.d/
 513         $(INSTALL_DIR) $(1)/usr/lib/ipsec
 514         $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/lib/ipsec/scepclient $(1)/usr/lib/ipsec/
 515 endef
 516
 517 define Package/strongswan-swanctl/install
 518         $(INSTALL_DIR) $(1)/etc/swanctl/{bliss,ecdsa,pkcs{12,8},private,pubkey,rsa}
 519         $(INSTALL_DIR) $(1)/etc/swanctl/x509{,aa,ac,ca,crl,ocsp}
 520         $(CP) $(PKG_INSTALL_DIR)/etc/swanctl/swanctl.conf $(1)/etc/swanctl/
 521         $(INSTALL_DIR) $(1)/usr/sbin
 522         $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/sbin/swanctl $(1)/usr/sbin/
 523 endef
 524
 525 define Package/strongswan-libtls/install
 526         $(INSTALL_DIR) $(1)/usr/lib/ipsec
 527         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libtls.so.* $(1)/usr/lib/ipsec/
 528 endef
 529
 530 define Plugin/duplicheck/install
 531         $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
 532         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/duplicheck $(1)/usr/lib/ipsec/
 533         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-duplicheck.so $(1)/usr/lib/ipsec/plugins/
 534 endef
 535
 536 define Plugin/eap-radius/install
 537         $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
 538         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libradius.so.* $(1)/usr/lib/ipsec/
 539         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-eap-radius.so $(1)/usr/lib/ipsec/plugins/
 540 endef
 541
 542 define Plugin/attr-sql/install
 543         $(INSTALL_DIR) $(1)/usr/lib/ipsec
 544         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/pool $(1)/usr/lib/ipsec/
 545 endef
 546
 547 define Plugin/stroke/install
 548         $(INSTALL_DIR) $(1)/etc/ipsec.d/aacerts
 549         $(INSTALL_DIR) $(1)/etc/ipsec.d/acerts
 550         $(INSTALL_DIR) $(1)/etc/ipsec.d/cacerts
 551         $(INSTALL_DIR) $(1)/etc/ipsec.d/certs
 552         $(INSTALL_DIR) $(1)/etc/ipsec.d/crls
 553         $(INSTALL_DIR) $(1)/etc/ipsec.d/ocspcerts
 554         $(INSTALL_DIR) $(1)/etc/ipsec.d/private
 555         $(INSTALL_DIR) $(1)/etc/ipsec.d/reqs
 556
 557         $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
 558         $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/lib/ipsec/{starter,stroke} $(1)/usr/lib/ipsec/
 559         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-stroke.so $(1)/usr/lib/ipsec/plugins/
 560 endef
 561
 562 define Plugin/updown/install
 563         $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
 564         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/_updown $(1)/usr/lib/ipsec/
 565         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-updown.so $(1)/usr/lib/ipsec/plugins/
 566         $(INSTALL_DIR) $(1)/etc/hotplug.d/ipsec
 567         $(CP) ./files/etc/hotplug.d/ipsec/01-user \
 568                 $(1)/etc/hotplug.d/ipsec/01-user
 569 endef
 570
 571 define Plugin/vici/install
 572         $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
 573         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libvici.so.* $(1)/usr/lib/ipsec/
 574         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-vici.so $(1)/usr/lib/ipsec/plugins/
 575 endef
 576
 577 define Plugin/whitelist/install
 578         $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
 579         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/whitelist $(1)/usr/lib/ipsec/
 580         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-whitelist.so $(1)/usr/lib/ipsec/plugins/
 581 endef
 582
 583 define Plugin/kernel-libipsec/install
 584         $(INSTALL_DIR) $(1)/usr/lib/ipsec
 585         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libipsec.so.* $(1)/usr/lib/ipsec/
 586 endef
 587
 588 $(eval $(call BuildPackage,strongswan))
 589 $(eval $(call BuildPackage,strongswan-default))
 590 $(eval $(call BuildPackage,strongswan-full))
 591 $(eval $(call BuildPackage,strongswan-minimal))
 592 $(eval $(call BuildPackage,strongswan-isakmp))
 593 $(eval $(call BuildPackage,strongswan-charon))
 594 $(eval $(call BuildPackage,strongswan-charon-cmd))
 595 $(eval $(call BuildPackage,strongswan-ipsec))
 596 $(eval $(call BuildPackage,strongswan-pki))
 597 $(eval $(call BuildPackage,strongswan-scepclient))
 598 $(eval $(call BuildPackage,strongswan-swanctl))
 599 $(eval $(call BuildPackage,strongswan-libtls))
 600 $(eval $(call BuildPlugin,addrblock,RFC 3779 address block constraint support,))
 601 $(eval $(call BuildPlugin,aes,AES crypto,))
 602 $(eval $(call BuildPlugin,af-alg,AF_ALG crypto interface to Linux Crypto API,+kmod-crypto-user))
 603 $(eval $(call BuildPlugin,agent,SSH agent signing,))
 604 $(eval $(call BuildPlugin,attr,file based config,))
 605 $(eval $(call BuildPlugin,attr-sql,SQL based config,+strongswan-charon))
 606 $(eval $(call BuildPlugin,blowfish,Blowfish crypto,))
 607 $(eval $(call BuildPlugin,ccm,CCM AEAD wrapper crypto,))
 608 $(eval $(call BuildPlugin,cmac,CMAC crypto,))
 609 $(eval $(call BuildPlugin,connmark,netfilter connection marking,))
 610 $(eval $(call BuildPlugin,constraints,advanced X509 constraint checking,))
 611 $(eval $(call BuildPlugin,coupling,IKEv2 plugin to couple peer certificates permanently to authentication,))
 612 $(eval $(call BuildPlugin,ctr,Counter Mode wrapper crypto,))
 613 $(eval $(call BuildPlugin,curl,cURL fetcher plugin,+PACKAGE_strongswan-mod-curl:libcurl))
 614 $(eval $(call BuildPlugin,curve25519,Curve25519 Diffie-Hellman,))
 615 $(eval $(call BuildPlugin,des,DES crypto,))
 616 $(eval $(call BuildPlugin,dhcp,DHCP based attribute provider,))
 617 $(eval $(call BuildPlugin,dnskey,DNS RR key decoding,))
 618 $(eval $(call BuildPlugin,duplicheck,advanced duplicate checking,))
 619 $(eval $(call BuildPlugin,eap-identity,EAP identity helper,))
 620 $(eval $(call BuildPlugin,eap-md5,EAP MD5 (CHAP) EAP auth,))
 621 $(eval $(call BuildPlugin,eap-mschapv2,EAP MS-CHAPv2 EAP auth,+strongswan-mod-md4 +strongswan-mod-des))
 622 $(eval $(call BuildPlugin,eap-radius,EAP RADIUS auth,))
 623 $(eval $(call BuildPlugin,eap-tls,EAP TLS auth,+strongswan-libtls))
 624 $(eval $(call BuildPlugin,farp,fake arp respsonses,))
 625 $(eval $(call BuildPlugin,fips-prf,FIPS PRF crypto,+strongswan-mod-sha1))
 626 $(eval $(call BuildPlugin,forecast,forward multi/broadcast traffic,+kmod-ipt-conntrack-extra))
 627 $(eval $(call BuildPlugin,gcm,GCM AEAD wrapper crypto,))
 628 $(eval $(call BuildPlugin,gcrypt,libgcrypt,+PACKAGE_strongswan-mod-gcrypt:libgcrypt))
 629 $(eval $(call BuildPlugin,gmp,libgmp,+PACKAGE_strongswan-mod-gmp:libgmp))
 630 $(eval $(call BuildPlugin,gmpdh,DH-Groups; no libgmp dep,))
 631 $(eval $(call BuildPlugin,ha,high availability cluster,))
 632 $(eval $(call BuildPlugin,hmac,HMAC crypto,))
 633 $(eval $(call BuildPlugin,kernel-libipsec,libipsec kernel interface,))
 634 $(eval $(call BuildPlugin,kernel-netlink,netlink kernel interface,))
 635 $(eval $(call BuildPlugin,ldap,LDAP,+PACKAGE_strongswan-mod-ldap:libopenldap))
 636 $(eval $(call BuildPlugin,led,LED blink on IKE activity,))
 637 $(eval $(call BuildPlugin,load-tester,load testing,))
 638 $(eval $(call BuildPlugin,nonce,nonce genereation,))
 639 $(eval $(call BuildPlugin,md4,MD4 crypto,))
 640 $(eval $(call BuildPlugin,md5,MD5 crypto,))
 641 $(eval $(call BuildPlugin,mysql,MySQL database interface,+strongswan-mod-sql +PACKAGE_strongswan-mod-mysql:libmysqlclient-r))
 642 $(eval $(call BuildPlugin,openssl,OpenSSL crypto,+PACKAGE_strongswan-mod-openssl:libopenssl))
 643 $(eval $(call BuildPlugin,pem,PEM decoding,))
 644 $(eval $(call BuildPlugin,pgp,PGP key decoding,))
 645 $(eval $(call BuildPlugin,pkcs1,PKCS1 key decoding,))
 646 $(eval $(call BuildPlugin,pkcs7,PKCS7 key decoding,))
 647 $(eval $(call BuildPlugin,pkcs8,PKCS8 key decoding,))
 648 $(eval $(call BuildPlugin,pkcs11,PKCS11 key decoding,))
 649 $(eval $(call BuildPlugin,pkcs12,PKCS12 key decoding,))
 650 $(eval $(call BuildPlugin,pubkey,raw public key,))
 651 $(eval $(call BuildPlugin,random,RNG,))
 652 $(eval $(call BuildPlugin,rc2,RC2 crypto,))
 653 $(eval $(call BuildPlugin,resolve,DNS resolver,))
 654 $(eval $(call BuildPlugin,revocation,X509 CRL/OCSP revocation,))
 655 $(eval $(call BuildPlugin,sha1,SHA1 crypto,))
 656 $(eval $(call BuildPlugin,sha2,SHA2 crypto,))
 657 $(eval $(call BuildPlugin,smp,SMP configuration and control interface,+PACKAGE_strongswan-mod-smp:libxml2))
 658 $(eval $(call BuildPlugin,socket-default,default socket implementation for charon,))
 659 $(eval $(call BuildPlugin,socket-dynamic,dynamic socket implementation for charon,))
 660 $(eval $(call BuildPlugin,sql,SQL database interface,))
 661 $(eval $(call BuildPlugin,sqlite,SQLite database interface,+strongswan-mod-sql +PACKAGE_strongswan-mod-sqlite:libsqlite3))
 662 $(eval $(call BuildPlugin,sshkey,SSH key decoding,))
 663 $(eval $(call BuildPlugin,stroke,Stroke,+strongswan-charon +strongswan-ipsec))
 664 $(eval $(call BuildPlugin,test-vectors,crypto test vectors,))
 665 $(eval $(call BuildPlugin,uci,UCI config interface,+PACKAGE_strongswan-mod-uci:libuci))
 666 $(eval $(call BuildPlugin,unity,Cisco Unity extension,))
 667 $(eval $(call BuildPlugin,updown,updown firewall,))
 668 $(eval $(call BuildPlugin,vici,Versatile IKE Configuration Interface,))
 669 $(eval $(call BuildPlugin,whitelist,peer identity whitelisting,))
 670 $(eval $(call BuildPlugin,x509,x509 certificate,))
 671 $(eval $(call BuildPlugin,xauth-eap,EAP XAuth backend,))
 672 $(eval $(call BuildPlugin,xauth-generic,generic XAuth backend,))
 673 $(eval $(call BuildPlugin,xcbc,xcbc crypto,))