net/strongswan/Makefile

   1 #
   2 # Copyright (C) 2012-2015 OpenWrt.org
   3 #
   4 # This is free software, licensed under the GNU General Public License v2.
   5 # See /LICENSE for more information.
   6 #
   7
   8 include $(TOPDIR)/rules.mk
   9
  10 PKG_NAME:=strongswan
  11 PKG_VERSION:=5.5.3
  12 PKG_RELEASE:=1
  13
  14 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2
  15 PKG_HASH:=c5ea54b199174708de11af9b8f4ecf28b5b0743d4bc0e380e741f25b28c0f8d4
  16 PKG_SOURCE_URL:=http://download.strongswan.org/ http://download2.strongswan.org/
  17 PKG_LICENSE:=GPL-2.0+
  18 PKG_MAINTAINER:=Stijn Tintel <stijn@linux-ipv6.be>
  19
  20 PKG_MOD_AVAILABLE:= \
  21         addrblock \
  22         aes \
  23         af-alg \
  24         agent \
  25         attr \
  26         attr-sql \
  27         blowfish \
  28         ccm \
  29         cmac \
  30         constraints \
  31         connmark \
  32         coupling \
  33         ctr \
  34         curl \
  35         curve25519 \
  36         des \
  37         dhcp \
  38         dnskey \
  39         duplicheck \
  40         eap-identity \
  41         eap-md5 \
  42         eap-mschapv2 \
  43         eap-radius \
  44         eap-tls \
  45         farp \
  46         fips-prf \
  47         forecast \
  48         gcm \
  49         gcrypt \
  50         gmp \
  51         gmpdh \
  52         ha \
  53         hmac \
  54         kernel-libipsec \
  55         kernel-netlink \
  56         ldap \
  57         led \
  58         load-tester \
  59         nonce \
  60         md4 \
  61         md5 \
  62         mysql \
  63         openssl \
  64         pem \
  65         pgp \
  66         pkcs1 \
  67         pkcs7 \
  68         pkcs8 \
  69         pkcs11 \
  70         pkcs12 \
  71         pubkey \
  72         random \
  73         rc2 \
  74         resolve \
  75         revocation \
  76         sha1 \
  77         sha2 \
  78         smp \
  79         socket-default \
  80         socket-dynamic \
  81         sql \
  82         sqlite \
  83         sshkey \
  84         stroke \
  85         test-vectors \
  86         unity \
  87         uci \
  88         updown \
  89         vici \
  90         whitelist \
  91         x509 \
  92         xauth-eap \
  93         xauth-generic \
  94         xcbc
  95
  96 PKG_CONFIG_DEPENDS:= \
  97         CONFIG_STRONGSWAN_ROUTING_TABLE \
  98         CONFIG_STRONGSWAN_ROUTING_TABLE_PRIO \
  99         $(patsubst %,CONFIG_PACKAGE_strongswan-mod-%,$(PKG_MOD_AVAILABLE)) \
 100
 101 PKG_FIXUP:=autoreconf
 102 PKG_INSTALL:=1
 103 PKG_BUILD_PARALLEL:=1
 104
 105 include $(INCLUDE_DIR)/package.mk
 106
 107 define Package/strongswan/Default
 108   SUBMENU:=VPN
 109   SECTION:=net
 110   CATEGORY:=Network
 111   TITLE:=StrongSwan
 112   URL:=http://www.strongswan.org/
 113 endef
 114
 115 define Package/strongswan/description/Default
 116  StrongSwan is an OpenSource IPsec implementation for the Linux operating system.
 117 endef
 118
 119 define Package/strongswan
 120 $(call Package/strongswan/Default)
 121   DEPENDS:= +libpthread +ip \
 122         +kmod-crypto-authenc \
 123         +kmod-ipsec +kmod-ipsec4 +IPV6:kmod-ipsec6 \
 124         +kmod-ipt-ipsec +iptables-mod-ipsec
 125 endef
 126
 127 define Package/strongswan/config
 128   source "$(SOURCE)/Config.in"
 129 endef
 130
 131 define Package/strongswan/description
 132 $(call Package/strongswan/description/Default)
 133  This package contains shared libraries and scripts.
 134 endef
 135
 136 define Package/strongswan-full
 137 $(call Package/strongswan/Default)
 138   TITLE+= (full)
 139   DEPENDS:= +strongswan \
 140         +strongswan-charon \
 141         +strongswan-ipsec \
 142         +strongswan-mod-addrblock \
 143         +strongswan-mod-aes \
 144         +strongswan-mod-af-alg \
 145         +strongswan-mod-agent \
 146         +strongswan-mod-attr \
 147         +strongswan-mod-attr-sql \
 148         +strongswan-mod-blowfish \
 149         +strongswan-mod-ccm \
 150         +strongswan-mod-cmac \
 151         +strongswan-mod-constraints \
 152         +strongswan-mod-connmark \
 153         +strongswan-mod-coupling \
 154         +strongswan-mod-ctr \
 155         +strongswan-mod-curl \
 156         +strongswan-mod-curve25519 \
 157         +strongswan-mod-des \
 158         +strongswan-mod-dhcp \
 159         +strongswan-mod-dnskey \
 160         +strongswan-mod-duplicheck \
 161         +strongswan-mod-eap-identity \
 162         +strongswan-mod-eap-md5 \
 163         +strongswan-mod-eap-mschapv2 \
 164         +strongswan-mod-eap-radius \
 165         +strongswan-mod-eap-tls \
 166         +strongswan-mod-farp \
 167         +strongswan-mod-fips-prf \
 168         +strongswan-mod-forecast \
 169         +strongswan-mod-gcm \
 170         +strongswan-mod-gcrypt \
 171         +strongswan-mod-gmp \
 172         +strongswan-mod-ha \
 173         +strongswan-mod-hmac \
 174         +strongswan-mod-kernel-netlink \
 175         +strongswan-mod-ldap \
 176         +strongswan-mod-led \
 177         +strongswan-mod-load-tester \
 178         +strongswan-mod-nonce \
 179         +strongswan-mod-md4 \
 180         +strongswan-mod-md5 \
 181         +strongswan-mod-mysql \
 182         +strongswan-mod-openssl \
 183         +strongswan-mod-pem \
 184         +strongswan-mod-pgp \
 185         +strongswan-mod-pkcs1 \
 186         +strongswan-mod-pkcs7 \
 187         +strongswan-mod-pkcs8 \
 188         +strongswan-mod-pkcs11 \
 189         +strongswan-mod-pkcs12 \
 190         +strongswan-mod-pubkey \
 191         +strongswan-mod-random \
 192         +strongswan-mod-rc2 \
 193         +strongswan-mod-resolve \
 194         +strongswan-mod-revocation \
 195         +strongswan-mod-sha1 \
 196         +strongswan-mod-sha2 \
 197         +strongswan-mod-smp \
 198         +strongswan-mod-socket-default \
 199         +strongswan-mod-sql \
 200         +strongswan-mod-sqlite \
 201         +strongswan-mod-sshkey \
 202         +strongswan-mod-stroke \
 203         +strongswan-mod-test-vectors \
 204         +strongswan-mod-uci \
 205         +strongswan-mod-unity \
 206         +strongswan-mod-updown \
 207         +strongswan-mod-vici \
 208         +strongswan-mod-whitelist \
 209         +strongswan-mod-x509 \
 210         +strongswan-mod-xauth-eap \
 211         +strongswan-mod-xauth-generic \
 212         +strongswan-mod-xcbc \
 213         +strongswan-pki \
 214         +strongswan-scepclient \
 215         +strongswan-swanctl \
 216         @DEVEL
 217 endef
 218
 219 define Package/strongswan-full/description
 220 $(call Package/strongswan/description/Default)
 221  This meta-package contains dependencies for all of the strongswan plugins
 222  except kernel-libipsec,
 223  socket-dynamic and which are omitted in favor of the kernel-netlink and
 224  socket-default plugins.
 225 endef
 226
 227
 228 define Package/strongswan-default
 229 $(call Package/strongswan/Default)
 230   TITLE+= (default)
 231   DEPENDS:= +strongswan \
 232         +strongswan-charon \
 233         +strongswan-ipsec \
 234         +strongswan-mod-aes \
 235         +strongswan-mod-attr \
 236         +strongswan-mod-connmark \
 237         +strongswan-mod-constraints \
 238         +strongswan-mod-des \
 239         +strongswan-mod-dnskey \
 240         +strongswan-mod-fips-prf \
 241         +strongswan-mod-gmp \
 242         +strongswan-mod-hmac \
 243         +strongswan-mod-kernel-netlink \
 244         +strongswan-mod-md5 \
 245         +strongswan-mod-nonce \
 246         +strongswan-mod-pem \
 247         +strongswan-mod-pgp \
 248         +strongswan-mod-pkcs1 \
 249         +strongswan-mod-pubkey \
 250         +strongswan-mod-random \
 251         +strongswan-mod-rc2 \
 252         +strongswan-mod-resolve \
 253         +strongswan-mod-revocation \
 254         +strongswan-mod-sha1 \
 255         +strongswan-mod-sha2 \
 256         +strongswan-mod-socket-default \
 257         +strongswan-mod-sshkey \
 258         +strongswan-mod-stroke \
 259         +strongswan-mod-updown \
 260         +strongswan-mod-x509 \
 261         +strongswan-mod-xauth-generic \
 262         +strongswan-mod-xcbc
 263 endef
 264
 265 define Package/strongswan-default/description
 266 $(call Package/strongswan/description/Default)
 267  This meta-package contains only dependencies to match upstream defaults.
 268 endef
 269
 270
 271 define Package/strongswan-isakmp
 272 $(call Package/strongswan/Default)
 273   TITLE+= (isakmp)
 274   DEPENDS:= +strongswan \
 275         +strongswan-charon \
 276         +strongswan-ipsec \
 277         +strongswan-mod-aes \
 278         +strongswan-mod-des \
 279         +strongswan-mod-gmpdh \
 280         +strongswan-mod-hmac \
 281         +strongswan-mod-kernel-netlink \
 282         +strongswan-mod-md5 \
 283         +strongswan-mod-nonce \
 284         +strongswan-mod-pubkey \
 285         +strongswan-mod-random \
 286         +strongswan-mod-sha1 \
 287         +strongswan-mod-socket-default \
 288         +strongswan-mod-stroke \
 289         +strongswan-mod-uci \
 290         +strongswan-mod-updown
 291 endef
 292
 293 define Package/strongswan-isakmp/description
 294 $(call Package/strongswan/description/Default)
 295  This meta-package contains only dependencies to establish  ISAKMP /
 296  IKE PSK connections, dropping other capabilities in favor of small size
 297  Can fit most routers even with 4Mb flash (after removing IPv6 support).
 298 endef
 299
 300
 301 define Package/strongswan-minimal
 302 $(call Package/strongswan/Default)
 303   TITLE+= (minimal)
 304   DEPENDS:= +strongswan \
 305         +strongswan-charon \
 306         +strongswan-mod-aes \
 307         +strongswan-mod-gmp \
 308         +strongswan-mod-hmac \
 309         +strongswan-mod-kernel-netlink \
 310         +strongswan-mod-nonce \
 311         +strongswan-mod-pubkey \
 312         +strongswan-mod-random \
 313         +strongswan-mod-sha1 \
 314         +strongswan-mod-socket-default \
 315         +strongswan-mod-stroke \
 316         +strongswan-mod-updown \
 317         +strongswan-mod-x509 \
 318         +strongswan-mod-xcbc
 319 endef
 320
 321 define Package/strongswan-minimal/description
 322 $(call Package/strongswan/description/Default)
 323  This meta-package contains only dependencies for a minimal IKEv2 setup.
 324 endef
 325
 326 define Package/strongswan-charon
 327 $(call Package/strongswan/Default)
 328   TITLE+= IKEv1/IKEv2 keying daemon
 329   DEPENDS:= +strongswan
 330 endef
 331
 332 define Package/strongswan-charon/description
 333 $(call Package/strongswan/description/Default)
 334  This package contains charon, an IKEv2 keying daemon.
 335 endef
 336
 337 define Package/strongswan-ipsec
 338 $(call Package/strongswan/Default)
 339   TITLE+= utilities
 340   DEPENDS:= +strongswan
 341 endef
 342
 343 define Package/strongswan-ipsec/description
 344 $(call Package/strongswan/description/Default)
 345  This package contains the ipsec utility.
 346 endef
 347
 348 define Package/strongswan-pki
 349 $(call Package/strongswan/Default)
 350   TITLE+= PKI tool
 351   DEPENDS:= +strongswan
 352 endef
 353
 354 define Package/strongswan-pki/description
 355 $(call Package/strongswan/description/Default)
 356  This package contains the pki tool.
 357 endef
 358
 359 define Package/strongswan-scepclient
 360 $(call Package/strongswan/Default)
 361   TITLE+= SCEP client
 362   DEPENDS:= +strongswan
 363 endef
 364
 365 define Package/strongswan-scepclient/description
 366 $(call Package/strongswan/description/Default)
 367  This package contains the SCEP client.
 368 endef
 369
 370 define Package/strongswan-swanctl
 371 $(call Package/strongswan/Default)
 372   TITLE+= swanctl utility
 373   DEPENDS:= +strongswan +strongswan-mod-vici
 374 endef
 375
 376 define Package/strongswan-swanctl/description
 377 $(call Package/strongswan/description/Default)
 378  This package contains the swanctl utility.
 379 endef
 380
 381 define Package/strongswan-libtls
 382 $(call Package/strongswan/Default)
 383   TITLE+= libtls
 384   DEPENDS:= +strongswan
 385 endef
 386
 387 define Package/strongswan-libtls/description
 388 $(call Package/strongswan/description/Default)
 389  This package contains libtls for strongSwan plugins eap-tls, eap-ttls,
 390  eap-peap, tnc-tnccs
 391 endef
 392
 393 define BuildPlugin
 394   define Package/strongswan-mod-$(1)
 395     $$(call Package/strongswan/Default)
 396     TITLE:= StrongSwan $(2) plugin
 397     DEPENDS:= +strongswan $(3)
 398   endef
 399
 400   define Package/strongswan-mod-$(1)/install
 401         $(INSTALL_DIR) $$(1)/etc/strongswan.d/charon
 402         if [ -f $(PKG_INSTALL_DIR)/etc/strongswan.d/charon/$(1).conf ]; then \
 403                 $(INSTALL_DATA) $(PKG_INSTALL_DIR)/etc/strongswan.d/charon/$(1).conf $$(1)/etc/strongswan.d/charon/; fi
 404         $(INSTALL_DIR) $$(1)/usr/lib/ipsec/plugins
 405         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-$(1).so \
 406                 $$(1)/usr/lib/ipsec/plugins/
 407         $(call Plugin/$(1)/install,$$(1))
 408   endef
 409
 410   $$(eval $$(call BuildPackage,strongswan-mod-$(1)))
 411 endef
 412
 413 CONFIGURE_ARGS+= \
 414         --disable-scripts \
 415         --disable-static \
 416         --disable-fast \
 417         --enable-mediation \
 418         --with-systemdsystemunitdir=no \
 419         $(if $(CONFIG_PACKAGE_strongswan-pki),--enable-pki,--disable-pki) \
 420         $(if $(CONFIG_PACKAGE_strongswan-scepclient),--enable-scepclient,--disable-scepclient) \
 421         --with-random-device=/dev/random \
 422         --with-urandom-device=/dev/urandom \
 423         --with-routing-table="$(call qstrip,$(CONFIG_STRONGSWAN_ROUTING_TABLE))" \
 424         --with-routing-table-prio="$(call qstrip,$(CONFIG_STRONGSWAN_ROUTING_TABLE_PRIO))" \
 425         $(foreach m,$(PKG_MOD_AVAILABLE), \
 426           $(if $(CONFIG_PACKAGE_strongswan-mod-$(m)),--enable-$(m),--disable-$(m)) \
 427         ) \
 428         ac_cv_search___atomic_load=no
 429
 430 EXTRA_LDFLAGS+= -Wl,-rpath-link,$(STAGING_DIR)/usr/lib
 431
 432 define Package/strongswan/conffiles
 433 /etc/ipsec.d/
 434 /etc/ipsec.conf
 435 /etc/ipsec.secrets
 436 /etc/ipsec.user
 437 /etc/strongswan.conf
 438 /etc/strongswan.d/
 439 endef
 440
 441 define Package/strongswan/install
 442         $(INSTALL_DIR) $(1)/etc
 443         $(INSTALL_CONF) $(PKG_INSTALL_DIR)/etc/ipsec.conf $(1)/etc/
 444         $(INSTALL_CONF) $(PKG_INSTALL_DIR)/etc/strongswan.conf $(1)/etc/
 445         $(INSTALL_DIR) $(1)/usr/lib/ipsec
 446         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libstrongswan.so.* $(1)/usr/lib/ipsec/
 447         $(INSTALL_CONF) ./files/ipsec.secrets $(1)/etc/
 448         $(INSTALL_CONF) ./files/ipsec.user $(1)/etc/
 449         $(INSTALL_DIR) $(1)/etc/init.d
 450         $(INSTALL_BIN) ./files/ipsec.init $(1)/etc/init.d/ipsec
 451 endef
 452
 453 define Package/strongswan-default/install
 454         true
 455 endef
 456
 457 define Package/strongswan-full/install
 458         true
 459 endef
 460
 461 define Package/strongswan-isakmp/install
 462         true
 463 endef
 464
 465 define Package/strongswan-minimal/install
 466         true
 467 endef
 468
 469 define Package/strongswan-charon/install
 470         $(INSTALL_DIR) $(1)/usr/lib/ipsec
 471         $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/lib/ipsec/charon $(1)/usr/lib/ipsec/
 472         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libcharon.so.* $(1)/usr/lib/ipsec/
 473 endef
 474
 475 define Package/strongswan-ipsec/install
 476         $(INSTALL_DIR) $(1)/usr/sbin
 477         $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/sbin/ipsec $(1)/usr/sbin/
 478 endef
 479
 480 define Package/strongswan-pki/install
 481         $(INSTALL_DIR) $(1)/etc/strongswan.d
 482         $(CP) $(PKG_INSTALL_DIR)/etc/strongswan.d/pki.conf $(1)/etc/strongswan.d/
 483         $(INSTALL_DIR) $(1)/usr/bin
 484         $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/pki $(1)/usr/bin/
 485 endef
 486
 487 define Package/strongswan-scepclient/install
 488         $(INSTALL_DIR) $(1)/etc/strongswan.d
 489         $(CP) $(PKG_INSTALL_DIR)/etc/strongswan.d/scepclient.conf $(1)/etc/strongswan.d/
 490         $(INSTALL_DIR) $(1)/usr/lib/ipsec
 491         $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/lib/ipsec/scepclient $(1)/usr/lib/ipsec/
 492 endef
 493
 494 define Package/strongswan-swanctl/install
 495         $(INSTALL_DIR) $(1)/etc/swanctl/{bliss,ecdsa,pkcs{12,8},private,pubkey,rsa}
 496         $(INSTALL_DIR) $(1)/etc/swanctl/x509{,aa,ac,ca,crl,ocsp}
 497         $(CP) $(PKG_INSTALL_DIR)/etc/swanctl/swanctl.conf $(1)/etc/swanctl/
 498         $(INSTALL_DIR) $(1)/usr/sbin
 499         $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/sbin/swanctl $(1)/usr/sbin/
 500 endef
 501
 502 define Package/strongswan-libtls/install
 503         $(INSTALL_DIR) $(1)/usr/lib/ipsec
 504         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libtls.so.* $(1)/usr/lib/ipsec/
 505 endef
 506
 507 define Plugin/duplicheck/install
 508         $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
 509         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/duplicheck $(1)/usr/lib/ipsec/
 510         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-duplicheck.so $(1)/usr/lib/ipsec/plugins/
 511 endef
 512
 513 define Plugin/eap-radius/install
 514         $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
 515         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libradius.so.* $(1)/usr/lib/ipsec/
 516         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-eap-radius.so $(1)/usr/lib/ipsec/plugins/
 517 endef
 518
 519 define Plugin/attr-sql/install
 520         $(INSTALL_DIR) $(1)/usr/lib/ipsec
 521         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/pool $(1)/usr/lib/ipsec/
 522 endef
 523
 524 define Plugin/stroke/install
 525         $(INSTALL_DIR) $(1)/etc/ipsec.d/aacerts
 526         $(INSTALL_DIR) $(1)/etc/ipsec.d/acerts
 527         $(INSTALL_DIR) $(1)/etc/ipsec.d/cacerts
 528         $(INSTALL_DIR) $(1)/etc/ipsec.d/certs
 529         $(INSTALL_DIR) $(1)/etc/ipsec.d/crls
 530         $(INSTALL_DIR) $(1)/etc/ipsec.d/ocspcerts
 531         $(INSTALL_DIR) $(1)/etc/ipsec.d/private
 532         $(INSTALL_DIR) $(1)/etc/ipsec.d/reqs
 533
 534         $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
 535         $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/lib/ipsec/{starter,stroke} $(1)/usr/lib/ipsec/
 536         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-stroke.so $(1)/usr/lib/ipsec/plugins/
 537 endef
 538
 539 define Plugin/updown/install
 540         $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
 541         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/_updown $(1)/usr/lib/ipsec/
 542         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-updown.so $(1)/usr/lib/ipsec/plugins/
 543         $(INSTALL_DIR) $(1)/etc
 544 endef
 545
 546 define Plugin/vici/install
 547         $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
 548         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libvici.so.* $(1)/usr/lib/ipsec/
 549         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-vici.so $(1)/usr/lib/ipsec/plugins/
 550 endef
 551
 552 define Plugin/whitelist/install
 553         $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
 554         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/whitelist $(1)/usr/lib/ipsec/
 555         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-whitelist.so $(1)/usr/lib/ipsec/plugins/
 556 endef
 557
 558 define Plugin/kernel-libipsec/install
 559         $(INSTALL_DIR) $(1)/usr/lib/ipsec
 560         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libipsec.so.* $(1)/usr/lib/ipsec/
 561 endef
 562
 563 $(eval $(call BuildPackage,strongswan))
 564 $(eval $(call BuildPackage,strongswan-default))
 565 $(eval $(call BuildPackage,strongswan-full))
 566 $(eval $(call BuildPackage,strongswan-minimal))
 567 $(eval $(call BuildPackage,strongswan-isakmp))
 568 $(eval $(call BuildPackage,strongswan-charon))
 569 $(eval $(call BuildPackage,strongswan-ipsec))
 570 $(eval $(call BuildPackage,strongswan-pki))
 571 $(eval $(call BuildPackage,strongswan-scepclient))
 572 $(eval $(call BuildPackage,strongswan-swanctl))
 573 $(eval $(call BuildPackage,strongswan-libtls))
 574 $(eval $(call BuildPlugin,addrblock,RFC 3779 address block constraint support,))
 575 $(eval $(call BuildPlugin,aes,AES crypto,))
 576 $(eval $(call BuildPlugin,af-alg,AF_ALG crypto interface to Linux Crypto API,+kmod-crypto-user))
 577 $(eval $(call BuildPlugin,agent,SSH agent signing,))
 578 $(eval $(call BuildPlugin,attr,file based config,))
 579 $(eval $(call BuildPlugin,attr-sql,SQL based config,+strongswan-charon))
 580 $(eval $(call BuildPlugin,blowfish,Blowfish crypto,))
 581 $(eval $(call BuildPlugin,ccm,CCM AEAD wrapper crypto,))
 582 $(eval $(call BuildPlugin,cmac,CMAC crypto,))
 583 $(eval $(call BuildPlugin,connmark,netfilter connection marking,))
 584 $(eval $(call BuildPlugin,constraints,advanced X509 constraint checking,))
 585 $(eval $(call BuildPlugin,coupling,IKEv2 plugin to couple peer certificates permanently to authentication,))
 586 $(eval $(call BuildPlugin,ctr,Counter Mode wrapper crypto,))
 587 $(eval $(call BuildPlugin,curl,cURL fetcher plugin,+PACKAGE_strongswan-mod-curl:libcurl))
 588 $(eval $(call BuildPlugin,curve25519,Curve25519 Diffie-Hellman,))
 589 $(eval $(call BuildPlugin,des,DES crypto,))
 590 $(eval $(call BuildPlugin,dhcp,DHCP based attribute provider,))
 591 $(eval $(call BuildPlugin,dnskey,DNS RR key decoding,))
 592 $(eval $(call BuildPlugin,duplicheck,advanced duplicate checking,))
 593 $(eval $(call BuildPlugin,eap-identity,EAP identity helper,))
 594 $(eval $(call BuildPlugin,eap-md5,EAP MD5 (CHAP) EAP auth,))
 595 $(eval $(call BuildPlugin,eap-mschapv2,EAP MS-CHAPv2 EAP auth,+strongswan-mod-md4 +strongswan-mod-des))
 596 $(eval $(call BuildPlugin,eap-radius,EAP RADIUS auth,))
 597 $(eval $(call BuildPlugin,eap-tls,EAP TLS auth,+strongswan-libtls))
 598 $(eval $(call BuildPlugin,farp,fake arp respsonses,))
 599 $(eval $(call BuildPlugin,fips-prf,FIPS PRF crypto,+strongswan-mod-sha1))
 600 $(eval $(call BuildPlugin,forecast,forward multi/broadcast traffic,+kmod-ipt-conntrack-extra))
 601 $(eval $(call BuildPlugin,gcm,GCM AEAD wrapper crypto,))
 602 $(eval $(call BuildPlugin,gcrypt,libgcrypt,+PACKAGE_strongswan-mod-gcrypt:libgcrypt))
 603 $(eval $(call BuildPlugin,gmp,libgmp,+PACKAGE_strongswan-mod-gmp:libgmp))
 604 $(eval $(call BuildPlugin,gmpdh,DH-Groups; no libgmp dep,))
 605 $(eval $(call BuildPlugin,ha,high availability cluster,))
 606 $(eval $(call BuildPlugin,hmac,HMAC crypto,))
 607 $(eval $(call BuildPlugin,kernel-libipsec,libipsec kernel interface,))
 608 $(eval $(call BuildPlugin,kernel-netlink,netlink kernel interface,))
 609 $(eval $(call BuildPlugin,ldap,LDAP,+PACKAGE_strongswan-mod-ldap:libopenldap))
 610 $(eval $(call BuildPlugin,led,LED blink on IKE activity,))
 611 $(eval $(call BuildPlugin,load-tester,load testing,))
 612 $(eval $(call BuildPlugin,nonce,nonce genereation,))
 613 $(eval $(call BuildPlugin,md4,MD4 crypto,))
 614 $(eval $(call BuildPlugin,md5,MD5 crypto,))
 615 $(eval $(call BuildPlugin,mysql,MySQL database interface,+strongswan-mod-sql +PACKAGE_strongswan-mod-mysql:libmysqlclient-r))
 616 $(eval $(call BuildPlugin,openssl,OpenSSL crypto,+PACKAGE_strongswan-mod-openssl:libopenssl))
 617 $(eval $(call BuildPlugin,pem,PEM decoding,))
 618 $(eval $(call BuildPlugin,pgp,PGP key decoding,))
 619 $(eval $(call BuildPlugin,pkcs1,PKCS1 key decoding,))
 620 $(eval $(call BuildPlugin,pkcs7,PKCS7 key decoding,))
 621 $(eval $(call BuildPlugin,pkcs8,PKCS8 key decoding,))
 622 $(eval $(call BuildPlugin,pkcs11,PKCS11 key decoding,))
 623 $(eval $(call BuildPlugin,pkcs12,PKCS12 key decoding,))
 624 $(eval $(call BuildPlugin,pubkey,raw public key,))
 625 $(eval $(call BuildPlugin,random,RNG,))
 626 $(eval $(call BuildPlugin,rc2,RC2 crypto,))
 627 $(eval $(call BuildPlugin,resolve,DNS resolver,))
 628 $(eval $(call BuildPlugin,revocation,X509 CRL/OCSP revocation,))
 629 $(eval $(call BuildPlugin,sha1,SHA1 crypto,))
 630 $(eval $(call BuildPlugin,sha2,SHA2 crypto,))
 631 $(eval $(call BuildPlugin,smp,SMP configuration and control interface,+PACKAGE_strongswan-mod-smp:libxml2))
 632 $(eval $(call BuildPlugin,socket-default,default socket implementation for charon,))
 633 $(eval $(call BuildPlugin,socket-dynamic,dynamic socket implementation for charon,))
 634 $(eval $(call BuildPlugin,sql,SQL database interface,))
 635 $(eval $(call BuildPlugin,sqlite,SQLite database interface,+strongswan-mod-sql +PACKAGE_strongswan-mod-sqlite:libsqlite3))
 636 $(eval $(call BuildPlugin,sshkey,SSH key decoding,))
 637 $(eval $(call BuildPlugin,stroke,Stroke,+strongswan-charon +strongswan-ipsec))
 638 $(eval $(call BuildPlugin,test-vectors,crypto test vectors,))
 639 $(eval $(call BuildPlugin,uci,UCI config interface,+PACKAGE_strongswan-mod-uci:libuci))
 640 $(eval $(call BuildPlugin,unity,Cisco Unity extension,))
 641 $(eval $(call BuildPlugin,updown,updown firewall,))
 642 $(eval $(call BuildPlugin,vici,Versatile IKE Configuration Interface,))
 643 $(eval $(call BuildPlugin,whitelist,peer identity whitelisting,))
 644 $(eval $(call BuildPlugin,x509,x509 certificate,))
 645 $(eval $(call BuildPlugin,xauth-eap,EAP XAuth backend,))
 646 $(eval $(call BuildPlugin,xauth-generic,generic XAuth backend,))
 647 $(eval $(call BuildPlugin,xcbc,xcbc crypto,))