net/strongswan/Makefile

   1 #
   2 # Copyright (C) 2012-2015 OpenWrt.org
   3 #
   4 # This is free software, licensed under the GNU General Public License v2.
   5 # See /LICENSE for more information.
   6 #
   7
   8 include $(TOPDIR)/rules.mk
   9
  10 PKG_NAME:=strongswan
  11 PKG_VERSION:=5.3.5
  12 PKG_RELEASE:=2
  13
  14 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2
  15 PKG_SOURCE_URL:=http://download.strongswan.org/ http://download2.strongswan.org/
  16 PKG_MD5SUM:=a2f9ea185f27e7f8413d4cd2ee61efe4
  17 PKG_LICENSE:=GPL-2.0+
  18 PKG_MAINTAINER:=Steven Barth <cyrus@openwrt.org>
  19
  20 PKG_MOD_AVAILABLE:= \
  21         addrblock \
  22         aes \
  23         af-alg \
  24         agent \
  25         attr \
  26         attr-sql \
  27         blowfish \
  28         ccm \
  29         cmac \
  30         constraints \
  31         connmark \
  32         coupling \
  33         ctr \
  34         curl \
  35         des \
  36         dhcp \
  37         dnskey \
  38         duplicheck \
  39         eap-identity \
  40         eap-md5 \
  41         eap-mschapv2 \
  42         eap-radius \
  43         eap-tls \
  44         farp \
  45         fips-prf \
  46         gcm \
  47         gcrypt \
  48         gmp \
  49         gmpdh \
  50         ha \
  51         hmac \
  52         kernel-libipsec \
  53         kernel-netlink \
  54         ldap \
  55         led \
  56         load-tester \
  57         nonce \
  58         md4 \
  59         md5 \
  60         mysql \
  61         openssl \
  62         pem \
  63         pgp \
  64         pkcs1 \
  65         pkcs7 \
  66         pkcs8 \
  67         pkcs11 \
  68         pkcs12 \
  69         pubkey \
  70         random \
  71         rc2 \
  72         resolve \
  73         revocation \
  74         sha1 \
  75         sha2 \
  76         smp \
  77         socket-default \
  78         socket-dynamic \
  79         sql \
  80         sqlite \
  81         sshkey \
  82         stroke \
  83         test-vectors \
  84         unity \
  85         uci \
  86         updown \
  87         whitelist \
  88         x509 \
  89         xauth-eap \
  90         xauth-generic \
  91         xcbc
  92
  93 PKG_CONFIG_DEPENDS:= \
  94         CONFIG_STRONGSWAN_ROUTING_TABLE \
  95         CONFIG_STRONGSWAN_ROUTING_TABLE_PRIO \
  96         $(patsubst %,CONFIG_PACKAGE_strongswan-mod-%,$(PKG_MOD_AVAILABLE)) \
  97
  98 PKG_FIXUP:=autoreconf
  99 PKG_INSTALL:=1
 100 PKG_BUILD_PARALLEL:=1
 101
 102 include $(INCLUDE_DIR)/package.mk
 103
 104 define Package/strongswan/Default
 105   SUBMENU:=VPN
 106   SECTION:=net
 107   CATEGORY:=Network
 108   TITLE:=StrongSwan
 109   URL:=http://www.strongswan.org/
 110 endef
 111
 112 define Package/strongswan/description/Default
 113  StrongSwan is an OpenSource IPsec implementation for the Linux operating system.
 114 endef
 115
 116 define Package/strongswan
 117 $(call Package/strongswan/Default)
 118   DEPENDS:= +libpthread +ip \
 119         +kmod-crypto-authenc \
 120         +kmod-ipsec +kmod-ipsec4 +IPV6:kmod-ipsec6 \
 121         +kmod-ipt-ipsec +iptables-mod-ipsec
 122 endef
 123
 124 define Package/strongswan/config
 125   source "$(SOURCE)/Config.in"
 126 endef
 127
 128 define Package/strongswan/description
 129 $(call Package/strongswan/description/Default)
 130  This package contains shared libraries and scripts.
 131 endef
 132
 133 define Package/strongswan-full
 134 $(call Package/strongswan/Default)
 135   TITLE+= (full)
 136   DEPENDS:= +strongswan \
 137         +strongswan-charon \
 138         +strongswan-mod-addrblock \
 139         +strongswan-mod-aes \
 140         +strongswan-mod-af-alg \
 141         +strongswan-mod-agent \
 142         +strongswan-mod-attr \
 143         +strongswan-mod-attr-sql \
 144         +strongswan-mod-blowfish \
 145         +strongswan-mod-ccm \
 146         +strongswan-mod-cmac \
 147         +strongswan-mod-constraints \
 148         +strongswan-mod-connmark \
 149         +strongswan-mod-coupling \
 150         +strongswan-mod-ctr \
 151         +strongswan-mod-curl \
 152         +strongswan-mod-des \
 153         +strongswan-mod-dhcp \
 154         +strongswan-mod-dnskey \
 155         +strongswan-mod-duplicheck \
 156         +strongswan-mod-eap-identity \
 157         +strongswan-mod-eap-md5 \
 158         +strongswan-mod-eap-mschapv2 \
 159         +strongswan-mod-eap-radius \
 160         +strongswan-mod-eap-tls \
 161         +strongswan-mod-farp \
 162         +strongswan-mod-fips-prf \
 163         +strongswan-mod-gcm \
 164         +strongswan-mod-gcrypt \
 165         +strongswan-mod-gmp \
 166         +strongswan-mod-ha \
 167         +strongswan-mod-hmac \
 168         +strongswan-mod-kernel-netlink \
 169         +strongswan-mod-ldap \
 170         +strongswan-mod-led \
 171         +strongswan-mod-load-tester \
 172         +strongswan-mod-nonce \
 173         +strongswan-mod-md4 \
 174         +strongswan-mod-md5 \
 175         +strongswan-mod-mysql \
 176         +strongswan-mod-openssl \
 177         +strongswan-mod-pem \
 178         +strongswan-mod-pgp \
 179         +strongswan-mod-pkcs1 \
 180         +strongswan-mod-pkcs7 \
 181         +strongswan-mod-pkcs8 \
 182         +strongswan-mod-pkcs11 \
 183         +strongswan-mod-pkcs12 \
 184         +strongswan-mod-pubkey \
 185         +strongswan-mod-random \
 186         +strongswan-mod-rc2 \
 187         +strongswan-mod-resolve \
 188         +strongswan-mod-revocation \
 189         +strongswan-mod-sha1 \
 190         +strongswan-mod-sha2 \
 191         +strongswan-mod-smp \
 192         +strongswan-mod-socket-default \
 193         +strongswan-mod-sql \
 194         +strongswan-mod-sqlite \
 195         +strongswan-mod-sshkey \
 196         +strongswan-mod-stroke \
 197         +strongswan-mod-test-vectors \
 198         +strongswan-mod-uci \
 199         +strongswan-mod-unity \
 200         +strongswan-mod-updown \
 201         +strongswan-mod-whitelist \
 202         +strongswan-mod-x509 \
 203         +strongswan-mod-xauth-eap \
 204         +strongswan-mod-xauth-generic \
 205         +strongswan-mod-xcbc \
 206         +strongswan-utils \
 207         @DEVEL
 208 endef
 209
 210 define Package/strongswan-full/description
 211 $(call Package/strongswan/description/Default)
 212  This meta-package contains dependencies for all of the strongswan plugins
 213  except kernel-libipsec,
 214  socket-dynamic and which are omitted in favor of the kernel-netlink and
 215  socket-default plugins.
 216 endef
 217
 218
 219 define Package/strongswan-default
 220 $(call Package/strongswan/Default)
 221   TITLE+= (default)
 222   DEPENDS:= +strongswan \
 223         +strongswan-charon \
 224         +strongswan-mod-aes \
 225         +strongswan-mod-attr \
 226         +strongswan-mod-connmark \
 227         +strongswan-mod-constraints \
 228         +strongswan-mod-des \
 229         +strongswan-mod-dnskey \
 230         +strongswan-mod-fips-prf \
 231         +strongswan-mod-gmp \
 232         +strongswan-mod-hmac \
 233         +strongswan-mod-kernel-netlink \
 234         +strongswan-mod-md5 \
 235         +strongswan-mod-nonce \
 236         +strongswan-mod-pem \
 237         +strongswan-mod-pgp \
 238         +strongswan-mod-pkcs1 \
 239         +strongswan-mod-pubkey \
 240         +strongswan-mod-random \
 241         +strongswan-mod-rc2 \
 242         +strongswan-mod-resolve \
 243         +strongswan-mod-revocation \
 244         +strongswan-mod-sha1 \
 245         +strongswan-mod-sha2 \
 246         +strongswan-mod-socket-default \
 247         +strongswan-mod-sshkey \
 248         +strongswan-mod-stroke \
 249         +strongswan-mod-updown \
 250         +strongswan-mod-x509 \
 251         +strongswan-mod-xauth-generic \
 252         +strongswan-mod-xcbc \
 253         +strongswan-utils
 254 endef
 255
 256 define Package/strongswan-default/description
 257 $(call Package/strongswan/description/Default)
 258  This meta-package contains only dependencies to match upstream defaults.
 259 endef
 260
 261
 262 define Package/strongswan-isakmp
 263 $(call Package/strongswan/Default)
 264   TITLE+= (isakmp)
 265   DEPENDS:= +strongswan \
 266         +strongswan-charon \
 267         +strongswan-mod-aes \
 268         +strongswan-mod-des \
 269         +strongswan-mod-gmpdh \
 270         +strongswan-mod-hmac \
 271         +strongswan-mod-kernel-netlink \
 272         +strongswan-mod-md5 \
 273         +strongswan-mod-nonce \
 274         +strongswan-mod-pubkey \
 275         +strongswan-mod-random \
 276         +strongswan-mod-sha1 \
 277         +strongswan-mod-socket-default \
 278         +strongswan-mod-stroke \
 279         +strongswan-mod-uci \
 280         +strongswan-mod-updown \
 281         +strongswan-utils
 282 endef
 283
 284 define Package/strongswan-isakmp/description
 285 $(call Package/strongswan/description/Default)
 286  This meta-package contains only dependencies to establish  ISAKMP /
 287  IKE PSK connections, dropping other capabilities in favor of small size
 288  Can fit most routers even with 4Mb flash (after removing IPv6 support).
 289 endef
 290
 291
 292 define Package/strongswan-minimal
 293 $(call Package/strongswan/Default)
 294   TITLE+= (minimal)
 295   DEPENDS:= +strongswan \
 296         +strongswan-charon \
 297         +strongswan-mod-aes \
 298         +strongswan-mod-gmp \
 299         +strongswan-mod-hmac \
 300         +strongswan-mod-kernel-netlink \
 301         +strongswan-mod-nonce \
 302         +strongswan-mod-pubkey \
 303         +strongswan-mod-random \
 304         +strongswan-mod-sha1 \
 305         +strongswan-mod-socket-default \
 306         +strongswan-mod-stroke \
 307         +strongswan-mod-updown \
 308         +strongswan-mod-x509 \
 309         +strongswan-mod-xcbc
 310 endef
 311
 312 define Package/strongswan-minimal/description
 313 $(call Package/strongswan/description/Default)
 314  This meta-package contains only dependencies for a minimal IKEv2 setup.
 315 endef
 316
 317 define Package/strongswan-charon
 318 $(call Package/strongswan/Default)
 319   TITLE+= IKEv1/IKEv2 keying daemon
 320   DEPENDS:= +strongswan
 321 endef
 322
 323 define Package/strongswan-charon/description
 324 $(call Package/strongswan/description/Default)
 325  This package contains charon, an IKEv2 keying daemon.
 326 endef
 327
 328 define Package/strongswan-utils
 329 $(call Package/strongswan/Default)
 330   TITLE+= utilities
 331   DEPENDS:= +strongswan
 332 endef
 333
 334 define Package/strongswan-utils/description
 335 $(call Package/strongswan/description/Default)
 336  This package contains the pki & scepclient utilities.
 337 endef
 338
 339 define Package/strongswan-libtls
 340 $(call Package/strongswan/Default)
 341   TITLE+= libtls
 342   DEPENDS:= +strongswan
 343 endef
 344
 345 define Package/strongswan-libtls/description
 346 $(call Package/strongswan/description/Default)
 347  This package contains libtls for strongSwan plugins eap-tls, eap-ttls,
 348  eap-peap, tnc-tnccs
 349 endef
 350
 351 define BuildPlugin
 352   define Package/strongswan-mod-$(1)
 353     $$(call Package/strongswan/Default)
 354     TITLE:= StrongSwan $(2) plugin
 355     DEPENDS:= +strongswan $(3)
 356   endef
 357
 358   define Package/strongswan-mod-$(1)/install
 359         $(INSTALL_DIR) $$(1)/etc/strongswan.d/charon
 360         if [ -f $(PKG_INSTALL_DIR)/etc/strongswan.d/charon/$(1).conf ]; then \
 361                 $(INSTALL_DATA) $(PKG_INSTALL_DIR)/etc/strongswan.d/charon/$(1).conf $$(1)/etc/strongswan.d/charon/; fi
 362         $(INSTALL_DIR) $$(1)/usr/lib/ipsec/plugins
 363         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-$(1).so \
 364                 $$(1)/usr/lib/ipsec/plugins/
 365         $(call Plugin/$(1)/install,$$(1))
 366   endef
 367
 368   $$(eval $$(call BuildPackage,strongswan-mod-$(1)))
 369 endef
 370
 371 CONFIGURE_ARGS+= \
 372         --disable-scripts \
 373         --disable-static \
 374         --disable-fast \
 375         --with-systemdsystemunitdir=no \
 376         $(if $(CONFIG_PACKAGE_strongswan-utils),--enable-pki --enable-scepclient,--disable-pki --disable-scepclient) \
 377         --with-random-device=/dev/random \
 378         --with-urandom-device=/dev/urandom \
 379         --with-routing-table="$(call qstrip,$(CONFIG_STRONGSWAN_ROUTING_TABLE))" \
 380         --with-routing-table-prio="$(call qstrip,$(CONFIG_STRONGSWAN_ROUTING_TABLE_PRIO))" \
 381         $(foreach m,$(PKG_MOD_AVAILABLE), \
 382           $(if $(CONFIG_PACKAGE_strongswan-mod-$(m)),--enable-$(m),--disable-$(m)) \
 383         )
 384
 385 EXTRA_LDFLAGS+= -Wl,-rpath-link,$(STAGING_DIR)/usr/lib
 386
 387 define Package/strongswan/conffiles
 388 /etc/ipsec.d/
 389 /etc/ipsec.conf
 390 /etc/ipsec.secrets
 391 /etc/ipsec.user
 392 /etc/strongswan.conf
 393 endef
 394
 395 define Package/strongswan/install
 396         $(INSTALL_DIR) $(1)/etc
 397         $(INSTALL_CONF) $(PKG_INSTALL_DIR)/etc/ipsec.conf $(1)/etc/
 398         $(INSTALL_CONF) $(PKG_INSTALL_DIR)/etc/strongswan.conf $(1)/etc/
 399         $(INSTALL_DIR) $(1)/usr/lib/ipsec
 400         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/{libstrongswan.so.*,libhydra.so.*} $(1)/usr/lib/ipsec/
 401         $(INSTALL_CONF) ./files/ipsec.secrets $(1)/etc/
 402         $(INSTALL_CONF) ./files/ipsec.user $(1)/etc/
 403         $(INSTALL_DIR) $(1)/etc/init.d
 404         $(INSTALL_BIN) ./files/ipsec.init $(1)/etc/init.d/ipsec
 405 endef
 406
 407 define Package/strongswan-default/install
 408         true
 409 endef
 410
 411 define Package/strongswan-full/install
 412         true
 413 endef
 414
 415 define Package/strongswan-isakmp/install
 416         true
 417 endef
 418
 419 define Package/strongswan-minimal/install
 420         true
 421 endef
 422
 423 define Package/strongswan-charon/install
 424         $(INSTALL_DIR) $(1)/usr/lib/ipsec
 425         $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/lib/ipsec/charon $(1)/usr/lib/ipsec/
 426         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libcharon.so.* $(1)/usr/lib/ipsec/
 427 endef
 428
 429 define Package/strongswan-utils/install
 430         $(INSTALL_DIR) $(1)/usr/sbin
 431         $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/sbin/ipsec $(1)/usr/sbin/
 432         $(INSTALL_DIR) $(1)/usr/bin
 433         $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/pki $(1)/usr/bin/
 434         $(INSTALL_DIR) $(1)/usr/lib/ipsec
 435         $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/lib/ipsec/scepclient $(1)/usr/lib/ipsec/
 436 endef
 437
 438 define Package/strongswan-libtls/install
 439         $(INSTALL_DIR) $(1)/usr/lib/ipsec
 440         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libtls.so.* $(1)/usr/lib/ipsec/
 441 endef
 442
 443 define Plugin/duplicheck/install
 444         $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
 445         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/duplicheck $(1)/usr/lib/ipsec/
 446         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-duplicheck.so $(1)/usr/lib/ipsec/plugins/
 447 endef
 448
 449 define Plugin/eap-radius/install
 450         $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
 451         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libradius.so.* $(1)/usr/lib/ipsec/
 452         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-eap-radius.so $(1)/usr/lib/ipsec/plugins/
 453 endef
 454
 455 define Plugin/attr-sql/install
 456         $(INSTALL_DIR) $(1)/usr/lib/ipsec
 457         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/pool $(1)/usr/lib/ipsec/
 458 endef
 459
 460 define Plugin/stroke/install
 461         $(INSTALL_DIR) $(1)/etc/ipsec.d/aacerts
 462         $(INSTALL_DIR) $(1)/etc/ipsec.d/acerts
 463         $(INSTALL_DIR) $(1)/etc/ipsec.d/cacerts
 464         $(INSTALL_DIR) $(1)/etc/ipsec.d/certs
 465         $(INSTALL_DIR) $(1)/etc/ipsec.d/crls
 466         $(INSTALL_DIR) $(1)/etc/ipsec.d/ocspcerts
 467         $(INSTALL_DIR) $(1)/etc/ipsec.d/private
 468         $(INSTALL_DIR) $(1)/etc/ipsec.d/reqs
 469
 470         $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
 471         $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/lib/ipsec/{starter,stroke} $(1)/usr/lib/ipsec/
 472         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-stroke.so $(1)/usr/lib/ipsec/plugins/
 473 endef
 474
 475 define Plugin/updown/install
 476         $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
 477         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/_updown $(1)/usr/lib/ipsec/
 478         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-updown.so $(1)/usr/lib/ipsec/plugins/
 479         $(INSTALL_DIR) $(1)/etc
 480 endef
 481
 482 define Plugin/whitelist/install
 483         $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
 484         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/whitelist $(1)/usr/lib/ipsec/
 485         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-whitelist.so $(1)/usr/lib/ipsec/plugins/
 486 endef
 487
 488 define Plugin/kernel-libipsec/install
 489         $(INSTALL_DIR) $(1)/usr/lib/ipsec
 490         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libipsec.so.* $(1)/usr/lib/ipsec/
 491 endef
 492
 493 $(eval $(call BuildPackage,strongswan))
 494 $(eval $(call BuildPackage,strongswan-default))
 495 $(eval $(call BuildPackage,strongswan-full))
 496 $(eval $(call BuildPackage,strongswan-minimal))
 497 $(eval $(call BuildPackage,strongswan-isakmp))
 498 $(eval $(call BuildPackage,strongswan-charon))
 499 $(eval $(call BuildPackage,strongswan-utils))
 500 $(eval $(call BuildPackage,strongswan-libtls))
 501 $(eval $(call BuildPlugin,addrblock,RFC 3779 address block constraint support,))
 502 $(eval $(call BuildPlugin,aes,AES crypto,))
 503 $(eval $(call BuildPlugin,af-alg,AF_ALG crypto interface to Linux Crypto API,+kmod-crypto-user))
 504 $(eval $(call BuildPlugin,agent,SSH agent signing,))
 505 $(eval $(call BuildPlugin,attr,file based config,))
 506 $(eval $(call BuildPlugin,attr-sql,SQL based config,+strongswan-charon))
 507 $(eval $(call BuildPlugin,blowfish,Blowfish crypto,))
 508 $(eval $(call BuildPlugin,ccm,CCM AEAD wrapper crypto,))
 509 $(eval $(call BuildPlugin,cmac,CMAC crypto,))
 510 $(eval $(call BuildPlugin,connmark,netfilter connection marking,))
 511 $(eval $(call BuildPlugin,constraints,advanced X509 constraint checking,))
 512 $(eval $(call BuildPlugin,coupling,IKEv2 plugin to couple peer certificates permanently to authentication,))
 513 $(eval $(call BuildPlugin,ctr,Counter Mode wrapper crypto,))
 514 $(eval $(call BuildPlugin,curl,cURL fetcher plugin,+PACKAGE_strongswan-mod-curl:libcurl))
 515 $(eval $(call BuildPlugin,des,DES crypto,))
 516 $(eval $(call BuildPlugin,dhcp,DHCP based attribute provider,))
 517 $(eval $(call BuildPlugin,dnskey,DNS RR key decoding,))
 518 $(eval $(call BuildPlugin,duplicheck,advanced duplicate checking,))
 519 $(eval $(call BuildPlugin,eap-identity,EAP identity helper,))
 520 $(eval $(call BuildPlugin,eap-md5,EAP MD5 (CHAP) EAP auth,))
 521 $(eval $(call BuildPlugin,eap-mschapv2,EAP MS-CHAPv2 EAP auth,+strongswan-mod-md4 +strongswan-mod-des))
 522 $(eval $(call BuildPlugin,eap-radius,EAP RADIUS auth,))
 523 $(eval $(call BuildPlugin,eap-tls,EAP TLS auth,+strongswan-libtls))
 524 $(eval $(call BuildPlugin,farp,fake arp respsonses,))
 525 $(eval $(call BuildPlugin,fips-prf,FIPS PRF crypto,+strongswan-mod-sha1))
 526 $(eval $(call BuildPlugin,gcm,GCM AEAD wrapper crypto,))
 527 $(eval $(call BuildPlugin,gcrypt,libgcrypt,+PACKAGE_strongswan-mod-gcrypt:libgcrypt))
 528 $(eval $(call BuildPlugin,gmp,libgmp,+PACKAGE_strongswan-mod-gmp:libgmp))
 529 $(eval $(call BuildPlugin,gmpdh,DH-Groups; no libgmp dep,))
 530 $(eval $(call BuildPlugin,ha,high availability cluster,))
 531 $(eval $(call BuildPlugin,hmac,HMAC crypto,))
 532 $(eval $(call BuildPlugin,kernel-libipsec,libipsec kernel interface,))
 533 $(eval $(call BuildPlugin,kernel-netlink,netlink kernel interface,))
 534 $(eval $(call BuildPlugin,ldap,LDAP,+PACKAGE_strongswan-mod-ldap:libopenldap))
 535 $(eval $(call BuildPlugin,led,LED blink on IKE activity,))
 536 $(eval $(call BuildPlugin,load-tester,load testing,))
 537 $(eval $(call BuildPlugin,nonce,nonce genereation,))
 538 $(eval $(call BuildPlugin,md4,MD4 crypto,))
 539 $(eval $(call BuildPlugin,md5,MD5 crypto,))
 540 $(eval $(call BuildPlugin,mysql,MySQL database interface,+strongswan-mod-sql +PACKAGE_strongswan-mod-mysql:libmysqlclient-r))
 541 $(eval $(call BuildPlugin,openssl,OpenSSL crypto,+PACKAGE_strongswan-mod-openssl:libopenssl))
 542 $(eval $(call BuildPlugin,pem,PEM decoding,))
 543 $(eval $(call BuildPlugin,pgp,PGP key decoding,))
 544 $(eval $(call BuildPlugin,pkcs1,PKCS1 key decoding,))
 545 $(eval $(call BuildPlugin,pkcs7,PKCS7 key decoding,))
 546 $(eval $(call BuildPlugin,pkcs8,PKCS8 key decoding,))
 547 $(eval $(call BuildPlugin,pkcs11,PKCS11 key decoding,))
 548 $(eval $(call BuildPlugin,pkcs12,PKCS12 key decoding,))
 549 $(eval $(call BuildPlugin,pubkey,raw public key,))
 550 $(eval $(call BuildPlugin,random,RNG,))
 551 $(eval $(call BuildPlugin,rc2,RC2 crypto,))
 552 $(eval $(call BuildPlugin,resolve,DNS resolver,))
 553 $(eval $(call BuildPlugin,revocation,X509 CRL/OCSP revocation,))
 554 $(eval $(call BuildPlugin,sha1,SHA1 crypto,))
 555 $(eval $(call BuildPlugin,sha2,SHA2 crypto,))
 556 $(eval $(call BuildPlugin,smp,SMP configuration and control interface,+PACKAGE_strongswan-mod-smp:libxml2))
 557 $(eval $(call BuildPlugin,socket-default,default socket implementation for charon,))
 558 $(eval $(call BuildPlugin,socket-dynamic,dynamic socket implementation for charon,))
 559 $(eval $(call BuildPlugin,sql,SQL database interface,))
 560 $(eval $(call BuildPlugin,sqlite,SQLite database interface,+strongswan-mod-sql +PACKAGE_strongswan-mod-sqlite:libsqlite3))
 561 $(eval $(call BuildPlugin,sshkey,SSH key decoding,))
 562 $(eval $(call BuildPlugin,stroke,Stroke,+strongswan-utils))
 563 $(eval $(call BuildPlugin,test-vectors,crypto test vectors,))
 564 $(eval $(call BuildPlugin,uci,UCI config interface,+PACKAGE_strongswan-mod-uci:libuci))
 565 $(eval $(call BuildPlugin,unity,Cisco Unity extension,))
 566 $(eval $(call BuildPlugin,updown,updown firewall,))
 567 $(eval $(call BuildPlugin,whitelist,peer identity whitelisting,))
 568 $(eval $(call BuildPlugin,x509,x509 certificate,))
 569 $(eval $(call BuildPlugin,xauth-eap,EAP XAuth backend,))
 570 $(eval $(call BuildPlugin,xauth-generic,generic XAuth backend,))
 571 $(eval $(call BuildPlugin,xcbc,xcbc crypto,))