net/strongswan/Makefile

   1 #
   2 # Copyright (C) 2012-2015 OpenWrt.org
   3 #
   4 # This is free software, licensed under the GNU General Public License v2.
   5 # See /LICENSE for more information.
   6 #
   7
   8 include $(TOPDIR)/rules.mk
   9
  10 PKG_NAME:=strongswan
  11 PKG_VERSION:=5.6.0
  12 PKG_RELEASE:=1
  13
  14 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2
  15 PKG_HASH:=a14dc0d92634ed52730bfc76a76db30943a28ed3c65a560066e1e9f785827b13
  16 PKG_SOURCE_URL:=http://download.strongswan.org/ http://download2.strongswan.org/
  17 PKG_LICENSE:=GPL-2.0+
  18 PKG_MAINTAINER:=Stijn Tintel <stijn@linux-ipv6.be>
  19
  20 PKG_MOD_AVAILABLE:= \
  21         addrblock \
  22         aes \
  23         af-alg \
  24         agent \
  25         attr \
  26         attr-sql \
  27         blowfish \
  28         ccm \
  29         cmac \
  30         constraints \
  31         connmark \
  32         coupling \
  33         ctr \
  34         curl \
  35         curve25519 \
  36         des \
  37         dhcp \
  38         dnskey \
  39         duplicheck \
  40         eap-identity \
  41         eap-md5 \
  42         eap-mschapv2 \
  43         eap-radius \
  44         eap-tls \
  45         farp \
  46         fips-prf \
  47         forecast \
  48         gcm \
  49         gcrypt \
  50         gmp \
  51         gmpdh \
  52         ha \
  53         hmac \
  54         kernel-libipsec \
  55         kernel-netlink \
  56         ldap \
  57         led \
  58         load-tester \
  59         nonce \
  60         md4 \
  61         md5 \
  62         mysql \
  63         openssl \
  64         pem \
  65         pgp \
  66         pkcs1 \
  67         pkcs7 \
  68         pkcs8 \
  69         pkcs11 \
  70         pkcs12 \
  71         pubkey \
  72         random \
  73         rc2 \
  74         resolve \
  75         revocation \
  76         sha1 \
  77         sha2 \
  78         smp \
  79         socket-default \
  80         socket-dynamic \
  81         sql \
  82         sqlite \
  83         sshkey \
  84         stroke \
  85         test-vectors \
  86         unity \
  87         uci \
  88         updown \
  89         vici \
  90         whitelist \
  91         x509 \
  92         xauth-eap \
  93         xauth-generic \
  94         xcbc
  95
  96 PKG_CONFIG_DEPENDS:= \
  97         CONFIG_STRONGSWAN_ROUTING_TABLE \
  98         CONFIG_STRONGSWAN_ROUTING_TABLE_PRIO \
  99         $(patsubst %,CONFIG_PACKAGE_strongswan-mod-%,$(PKG_MOD_AVAILABLE)) \
 100
 101 PKG_FIXUP:=autoreconf
 102 PKG_INSTALL:=1
 103 PKG_BUILD_PARALLEL:=1
 104
 105 include $(INCLUDE_DIR)/package.mk
 106
 107 define Package/strongswan/Default
 108   SUBMENU:=VPN
 109   SECTION:=net
 110   CATEGORY:=Network
 111   TITLE:=StrongSwan
 112   URL:=http://www.strongswan.org/
 113 endef
 114
 115 define Package/strongswan/description/Default
 116  StrongSwan is an OpenSource IPsec implementation for the Linux operating system.
 117 endef
 118
 119 define Package/strongswan
 120 $(call Package/strongswan/Default)
 121   DEPENDS:= +libpthread +ip \
 122         +kmod-crypto-authenc \
 123         +kmod-ipsec +kmod-ipsec4 +IPV6:kmod-ipsec6 \
 124         +kmod-ipt-ipsec +iptables-mod-ipsec
 125 endef
 126
 127 define Package/strongswan/config
 128   source "$(SOURCE)/Config.in"
 129 endef
 130
 131 define Package/strongswan/description
 132 $(call Package/strongswan/description/Default)
 133  This package contains shared libraries and scripts.
 134 endef
 135
 136 define Package/strongswan-full
 137 $(call Package/strongswan/Default)
 138   TITLE+= (full)
 139   DEPENDS:= +strongswan \
 140         +strongswan-charon \
 141         +strongswan-charon-cmd \
 142         +strongswan-ipsec \
 143         +strongswan-mod-addrblock \
 144         +strongswan-mod-aes \
 145         +strongswan-mod-af-alg \
 146         +strongswan-mod-agent \
 147         +strongswan-mod-attr \
 148         +strongswan-mod-attr-sql \
 149         +strongswan-mod-blowfish \
 150         +strongswan-mod-ccm \
 151         +strongswan-mod-cmac \
 152         +strongswan-mod-constraints \
 153         +strongswan-mod-connmark \
 154         +strongswan-mod-coupling \
 155         +strongswan-mod-ctr \
 156         +strongswan-mod-curl \
 157         +strongswan-mod-curve25519 \
 158         +strongswan-mod-des \
 159         +strongswan-mod-dhcp \
 160         +strongswan-mod-dnskey \
 161         +strongswan-mod-duplicheck \
 162         +strongswan-mod-eap-identity \
 163         +strongswan-mod-eap-md5 \
 164         +strongswan-mod-eap-mschapv2 \
 165         +strongswan-mod-eap-radius \
 166         +strongswan-mod-eap-tls \
 167         +strongswan-mod-farp \
 168         +strongswan-mod-fips-prf \
 169         +strongswan-mod-forecast \
 170         +strongswan-mod-gcm \
 171         +strongswan-mod-gcrypt \
 172         +strongswan-mod-gmp \
 173         +strongswan-mod-ha \
 174         +strongswan-mod-hmac \
 175         +strongswan-mod-kernel-netlink \
 176         +strongswan-mod-ldap \
 177         +strongswan-mod-led \
 178         +strongswan-mod-load-tester \
 179         +strongswan-mod-nonce \
 180         +strongswan-mod-md4 \
 181         +strongswan-mod-md5 \
 182         +strongswan-mod-mysql \
 183         +strongswan-mod-openssl \
 184         +strongswan-mod-pem \
 185         +strongswan-mod-pgp \
 186         +strongswan-mod-pkcs1 \
 187         +strongswan-mod-pkcs7 \
 188         +strongswan-mod-pkcs8 \
 189         +strongswan-mod-pkcs11 \
 190         +strongswan-mod-pkcs12 \
 191         +strongswan-mod-pubkey \
 192         +strongswan-mod-random \
 193         +strongswan-mod-rc2 \
 194         +strongswan-mod-resolve \
 195         +strongswan-mod-revocation \
 196         +strongswan-mod-sha1 \
 197         +strongswan-mod-sha2 \
 198         +strongswan-mod-smp \
 199         +strongswan-mod-socket-default \
 200         +strongswan-mod-sql \
 201         +strongswan-mod-sqlite \
 202         +strongswan-mod-sshkey \
 203         +strongswan-mod-stroke \
 204         +strongswan-mod-test-vectors \
 205         +strongswan-mod-uci \
 206         +strongswan-mod-unity \
 207         +strongswan-mod-updown \
 208         +strongswan-mod-vici \
 209         +strongswan-mod-whitelist \
 210         +strongswan-mod-x509 \
 211         +strongswan-mod-xauth-eap \
 212         +strongswan-mod-xauth-generic \
 213         +strongswan-mod-xcbc \
 214         +strongswan-pki \
 215         +strongswan-scepclient \
 216         +strongswan-swanctl \
 217         @DEVEL
 218 endef
 219
 220 define Package/strongswan-full/description
 221 $(call Package/strongswan/description/Default)
 222  This meta-package contains dependencies for all of the strongswan plugins
 223  except kernel-libipsec,
 224  socket-dynamic and which are omitted in favor of the kernel-netlink and
 225  socket-default plugins.
 226 endef
 227
 228
 229 define Package/strongswan-default
 230 $(call Package/strongswan/Default)
 231   TITLE+= (default)
 232   DEPENDS:= +strongswan \
 233         +strongswan-charon \
 234         +strongswan-ipsec \
 235         +strongswan-mod-aes \
 236         +strongswan-mod-attr \
 237         +strongswan-mod-connmark \
 238         +strongswan-mod-constraints \
 239         +strongswan-mod-des \
 240         +strongswan-mod-dnskey \
 241         +strongswan-mod-fips-prf \
 242         +strongswan-mod-gmp \
 243         +strongswan-mod-hmac \
 244         +strongswan-mod-kernel-netlink \
 245         +strongswan-mod-md5 \
 246         +strongswan-mod-nonce \
 247         +strongswan-mod-pem \
 248         +strongswan-mod-pgp \
 249         +strongswan-mod-pkcs1 \
 250         +strongswan-mod-pubkey \
 251         +strongswan-mod-random \
 252         +strongswan-mod-rc2 \
 253         +strongswan-mod-resolve \
 254         +strongswan-mod-revocation \
 255         +strongswan-mod-sha1 \
 256         +strongswan-mod-sha2 \
 257         +strongswan-mod-socket-default \
 258         +strongswan-mod-sshkey \
 259         +strongswan-mod-stroke \
 260         +strongswan-mod-updown \
 261         +strongswan-mod-x509 \
 262         +strongswan-mod-xauth-generic \
 263         +strongswan-mod-xcbc
 264 endef
 265
 266 define Package/strongswan-default/description
 267 $(call Package/strongswan/description/Default)
 268  This meta-package contains only dependencies to match upstream defaults.
 269 endef
 270
 271
 272 define Package/strongswan-isakmp
 273 $(call Package/strongswan/Default)
 274   TITLE+= (isakmp)
 275   DEPENDS:= +strongswan \
 276         +strongswan-charon \
 277         +strongswan-ipsec \
 278         +strongswan-mod-aes \
 279         +strongswan-mod-des \
 280         +strongswan-mod-gmpdh \
 281         +strongswan-mod-hmac \
 282         +strongswan-mod-kernel-netlink \
 283         +strongswan-mod-md5 \
 284         +strongswan-mod-nonce \
 285         +strongswan-mod-pubkey \
 286         +strongswan-mod-random \
 287         +strongswan-mod-sha1 \
 288         +strongswan-mod-socket-default \
 289         +strongswan-mod-stroke \
 290         +strongswan-mod-uci \
 291         +strongswan-mod-updown
 292 endef
 293
 294 define Package/strongswan-isakmp/description
 295 $(call Package/strongswan/description/Default)
 296  This meta-package contains only dependencies to establish  ISAKMP /
 297  IKE PSK connections, dropping other capabilities in favor of small size
 298  Can fit most routers even with 4Mb flash (after removing IPv6 support).
 299 endef
 300
 301
 302 define Package/strongswan-minimal
 303 $(call Package/strongswan/Default)
 304   TITLE+= (minimal)
 305   DEPENDS:= +strongswan \
 306         +strongswan-charon \
 307         +strongswan-mod-aes \
 308         +strongswan-mod-gmp \
 309         +strongswan-mod-hmac \
 310         +strongswan-mod-kernel-netlink \
 311         +strongswan-mod-nonce \
 312         +strongswan-mod-pubkey \
 313         +strongswan-mod-random \
 314         +strongswan-mod-sha1 \
 315         +strongswan-mod-socket-default \
 316         +strongswan-mod-stroke \
 317         +strongswan-mod-updown \
 318         +strongswan-mod-x509 \
 319         +strongswan-mod-xcbc
 320 endef
 321
 322 define Package/strongswan-minimal/description
 323 $(call Package/strongswan/description/Default)
 324  This meta-package contains only dependencies for a minimal IKEv2 setup.
 325 endef
 326
 327 define Package/strongswan-charon
 328 $(call Package/strongswan/Default)
 329   TITLE+= IKEv1/IKEv2 keying daemon
 330   DEPENDS:= +strongswan
 331 endef
 332
 333 define Package/strongswan-charon/description
 334 $(call Package/strongswan/description/Default)
 335  This package contains charon, an IKEv2 keying daemon.
 336 endef
 337
 338 define Package/strongswan-charon-cmd
 339 $(call Package/strongswan/Default)
 340   TITLE+= charon-cmd utility
 341   DEPENDS:= +strongswan +strongswan-charon
 342 endef
 343
 344 define Package/strongswan-charon-cmd/description
 345 $(call Package/strongswan/description/Default)
 346  This package contains the charon-cmd utility.
 347 endef
 348
 349 define Package/strongswan-ipsec
 350 $(call Package/strongswan/Default)
 351   TITLE+= utilities
 352   DEPENDS:= +strongswan
 353 endef
 354
 355 define Package/strongswan-ipsec/description
 356 $(call Package/strongswan/description/Default)
 357  This package contains the ipsec utility.
 358 endef
 359
 360 define Package/strongswan-pki
 361 $(call Package/strongswan/Default)
 362   TITLE+= PKI tool
 363   DEPENDS:= +strongswan
 364 endef
 365
 366 define Package/strongswan-pki/description
 367 $(call Package/strongswan/description/Default)
 368  This package contains the pki tool.
 369 endef
 370
 371 define Package/strongswan-scepclient
 372 $(call Package/strongswan/Default)
 373   TITLE+= SCEP client
 374   DEPENDS:= +strongswan
 375 endef
 376
 377 define Package/strongswan-scepclient/description
 378 $(call Package/strongswan/description/Default)
 379  This package contains the SCEP client.
 380 endef
 381
 382 define Package/strongswan-swanctl
 383 $(call Package/strongswan/Default)
 384   TITLE+= swanctl utility
 385   DEPENDS:= +strongswan +strongswan-mod-vici
 386 endef
 387
 388 define Package/strongswan-swanctl/description
 389 $(call Package/strongswan/description/Default)
 390  This package contains the swanctl utility.
 391 endef
 392
 393 define Package/strongswan-libtls
 394 $(call Package/strongswan/Default)
 395   TITLE+= libtls
 396   DEPENDS:= +strongswan
 397 endef
 398
 399 define Package/strongswan-libtls/description
 400 $(call Package/strongswan/description/Default)
 401  This package contains libtls for strongSwan plugins eap-tls, eap-ttls,
 402  eap-peap, tnc-tnccs
 403 endef
 404
 405 define BuildPlugin
 406   define Package/strongswan-mod-$(1)
 407     $$(call Package/strongswan/Default)
 408     TITLE:= StrongSwan $(2) plugin
 409     DEPENDS:= +strongswan $(3)
 410   endef
 411
 412   define Package/strongswan-mod-$(1)/install
 413         $(INSTALL_DIR) $$(1)/etc/strongswan.d/charon
 414         if [ -f $(PKG_INSTALL_DIR)/etc/strongswan.d/charon/$(1).conf ]; then \
 415                 $(INSTALL_DATA) $(PKG_INSTALL_DIR)/etc/strongswan.d/charon/$(1).conf $$(1)/etc/strongswan.d/charon/; fi
 416         $(INSTALL_DIR) $$(1)/usr/lib/ipsec/plugins
 417         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-$(1).so \
 418                 $$(1)/usr/lib/ipsec/plugins/
 419         $(call Plugin/$(1)/install,$$(1))
 420   endef
 421
 422   $$(eval $$(call BuildPackage,strongswan-mod-$(1)))
 423 endef
 424
 425 CONFIGURE_ARGS+= \
 426         --disable-scripts \
 427         --disable-static \
 428         --disable-fast \
 429         --enable-mediation \
 430         --with-systemdsystemunitdir=no \
 431         $(if $(CONFIG_PACKAGE_strongswan-charon-cmd),--enable-cmd,--disable-cmd) \
 432         $(if $(CONFIG_PACKAGE_strongswan-pki),--enable-pki,--disable-pki) \
 433         $(if $(CONFIG_PACKAGE_strongswan-scepclient),--enable-scepclient,--disable-scepclient) \
 434         --with-random-device=/dev/random \
 435         --with-urandom-device=/dev/urandom \
 436         --with-routing-table="$(call qstrip,$(CONFIG_STRONGSWAN_ROUTING_TABLE))" \
 437         --with-routing-table-prio="$(call qstrip,$(CONFIG_STRONGSWAN_ROUTING_TABLE_PRIO))" \
 438         $(foreach m,$(PKG_MOD_AVAILABLE), \
 439           $(if $(CONFIG_PACKAGE_strongswan-mod-$(m)),--enable-$(m),--disable-$(m)) \
 440         ) \
 441         ac_cv_search___atomic_load=no
 442
 443 EXTRA_LDFLAGS+= -Wl,-rpath-link,$(STAGING_DIR)/usr/lib
 444
 445 define Package/strongswan/conffiles
 446 /etc/ipsec.d/
 447 /etc/ipsec.conf
 448 /etc/ipsec.secrets
 449 /etc/ipsec.user
 450 /etc/strongswan.conf
 451 /etc/strongswan.d/
 452 endef
 453
 454 define Package/strongswan/install
 455         $(INSTALL_DIR) $(1)/etc
 456         $(INSTALL_CONF) $(PKG_INSTALL_DIR)/etc/ipsec.conf $(1)/etc/
 457         $(INSTALL_CONF) $(PKG_INSTALL_DIR)/etc/strongswan.conf $(1)/etc/
 458         $(INSTALL_DIR) $(1)/usr/lib/ipsec
 459         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libstrongswan.so.* $(1)/usr/lib/ipsec/
 460         $(INSTALL_CONF) ./files/ipsec.secrets $(1)/etc/
 461         $(INSTALL_CONF) ./files/ipsec.user $(1)/etc/
 462         $(INSTALL_DIR) $(1)/etc/init.d
 463         $(INSTALL_BIN) ./files/ipsec.init $(1)/etc/init.d/ipsec
 464 endef
 465
 466 define Package/strongswan-default/install
 467         true
 468 endef
 469
 470 define Package/strongswan-full/install
 471         true
 472 endef
 473
 474 define Package/strongswan-isakmp/install
 475         true
 476 endef
 477
 478 define Package/strongswan-minimal/install
 479         true
 480 endef
 481
 482 define Package/strongswan-charon/install
 483         $(INSTALL_DIR) $(1)/etc/strongswan.d
 484         $(CP) $(PKG_INSTALL_DIR)/etc/strongswan.d/charon.conf $(1)/etc/strongswan.d
 485         $(CP) $(PKG_INSTALL_DIR)/etc/strongswan.d/charon-logging.conf $(1)/etc/strongswan.d
 486         $(INSTALL_DIR) $(1)/usr/lib/ipsec
 487         $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/lib/ipsec/charon $(1)/usr/lib/ipsec/
 488         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libcharon.so.* $(1)/usr/lib/ipsec/
 489 endef
 490
 491 define Package/strongswan-charon-cmd/install
 492         $(INSTALL_DIR) $(1)/usr/sbin
 493         $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/sbin/charon-cmd $(1)/usr/sbin/
 494 endef
 495
 496 define Package/strongswan-ipsec/install
 497         $(INSTALL_DIR) $(1)/usr/sbin
 498         $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/sbin/ipsec $(1)/usr/sbin/
 499 endef
 500
 501 define Package/strongswan-pki/install
 502         $(INSTALL_DIR) $(1)/etc/strongswan.d
 503         $(CP) $(PKG_INSTALL_DIR)/etc/strongswan.d/pki.conf $(1)/etc/strongswan.d/
 504         $(INSTALL_DIR) $(1)/usr/bin
 505         $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/pki $(1)/usr/bin/
 506 endef
 507
 508 define Package/strongswan-scepclient/install
 509         $(INSTALL_DIR) $(1)/etc/strongswan.d
 510         $(CP) $(PKG_INSTALL_DIR)/etc/strongswan.d/scepclient.conf $(1)/etc/strongswan.d/
 511         $(INSTALL_DIR) $(1)/usr/lib/ipsec
 512         $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/lib/ipsec/scepclient $(1)/usr/lib/ipsec/
 513 endef
 514
 515 define Package/strongswan-swanctl/install
 516         $(INSTALL_DIR) $(1)/etc/swanctl/{bliss,ecdsa,pkcs{12,8},private,pubkey,rsa}
 517         $(INSTALL_DIR) $(1)/etc/swanctl/x509{,aa,ac,ca,crl,ocsp}
 518         $(CP) $(PKG_INSTALL_DIR)/etc/swanctl/swanctl.conf $(1)/etc/swanctl/
 519         $(INSTALL_DIR) $(1)/usr/sbin
 520         $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/sbin/swanctl $(1)/usr/sbin/
 521 endef
 522
 523 define Package/strongswan-libtls/install
 524         $(INSTALL_DIR) $(1)/usr/lib/ipsec
 525         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libtls.so.* $(1)/usr/lib/ipsec/
 526 endef
 527
 528 define Plugin/duplicheck/install
 529         $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
 530         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/duplicheck $(1)/usr/lib/ipsec/
 531         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-duplicheck.so $(1)/usr/lib/ipsec/plugins/
 532 endef
 533
 534 define Plugin/eap-radius/install
 535         $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
 536         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libradius.so.* $(1)/usr/lib/ipsec/
 537         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-eap-radius.so $(1)/usr/lib/ipsec/plugins/
 538 endef
 539
 540 define Plugin/attr-sql/install
 541         $(INSTALL_DIR) $(1)/usr/lib/ipsec
 542         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/pool $(1)/usr/lib/ipsec/
 543 endef
 544
 545 define Plugin/stroke/install
 546         $(INSTALL_DIR) $(1)/etc/ipsec.d/aacerts
 547         $(INSTALL_DIR) $(1)/etc/ipsec.d/acerts
 548         $(INSTALL_DIR) $(1)/etc/ipsec.d/cacerts
 549         $(INSTALL_DIR) $(1)/etc/ipsec.d/certs
 550         $(INSTALL_DIR) $(1)/etc/ipsec.d/crls
 551         $(INSTALL_DIR) $(1)/etc/ipsec.d/ocspcerts
 552         $(INSTALL_DIR) $(1)/etc/ipsec.d/private
 553         $(INSTALL_DIR) $(1)/etc/ipsec.d/reqs
 554
 555         $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
 556         $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/lib/ipsec/{starter,stroke} $(1)/usr/lib/ipsec/
 557         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-stroke.so $(1)/usr/lib/ipsec/plugins/
 558 endef
 559
 560 define Plugin/updown/install
 561         $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
 562         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/_updown $(1)/usr/lib/ipsec/
 563         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-updown.so $(1)/usr/lib/ipsec/plugins/
 564         $(INSTALL_DIR) $(1)/etc
 565 endef
 566
 567 define Plugin/vici/install
 568         $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
 569         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libvici.so.* $(1)/usr/lib/ipsec/
 570         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-vici.so $(1)/usr/lib/ipsec/plugins/
 571 endef
 572
 573 define Plugin/whitelist/install
 574         $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
 575         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/whitelist $(1)/usr/lib/ipsec/
 576         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-whitelist.so $(1)/usr/lib/ipsec/plugins/
 577 endef
 578
 579 define Plugin/kernel-libipsec/install
 580         $(INSTALL_DIR) $(1)/usr/lib/ipsec
 581         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libipsec.so.* $(1)/usr/lib/ipsec/
 582 endef
 583
 584 $(eval $(call BuildPackage,strongswan))
 585 $(eval $(call BuildPackage,strongswan-default))
 586 $(eval $(call BuildPackage,strongswan-full))
 587 $(eval $(call BuildPackage,strongswan-minimal))
 588 $(eval $(call BuildPackage,strongswan-isakmp))
 589 $(eval $(call BuildPackage,strongswan-charon))
 590 $(eval $(call BuildPackage,strongswan-charon-cmd))
 591 $(eval $(call BuildPackage,strongswan-ipsec))
 592 $(eval $(call BuildPackage,strongswan-pki))
 593 $(eval $(call BuildPackage,strongswan-scepclient))
 594 $(eval $(call BuildPackage,strongswan-swanctl))
 595 $(eval $(call BuildPackage,strongswan-libtls))
 596 $(eval $(call BuildPlugin,addrblock,RFC 3779 address block constraint support,))
 597 $(eval $(call BuildPlugin,aes,AES crypto,))
 598 $(eval $(call BuildPlugin,af-alg,AF_ALG crypto interface to Linux Crypto API,+kmod-crypto-user))
 599 $(eval $(call BuildPlugin,agent,SSH agent signing,))
 600 $(eval $(call BuildPlugin,attr,file based config,))
 601 $(eval $(call BuildPlugin,attr-sql,SQL based config,+strongswan-charon))
 602 $(eval $(call BuildPlugin,blowfish,Blowfish crypto,))
 603 $(eval $(call BuildPlugin,ccm,CCM AEAD wrapper crypto,))
 604 $(eval $(call BuildPlugin,cmac,CMAC crypto,))
 605 $(eval $(call BuildPlugin,connmark,netfilter connection marking,))
 606 $(eval $(call BuildPlugin,constraints,advanced X509 constraint checking,))
 607 $(eval $(call BuildPlugin,coupling,IKEv2 plugin to couple peer certificates permanently to authentication,))
 608 $(eval $(call BuildPlugin,ctr,Counter Mode wrapper crypto,))
 609 $(eval $(call BuildPlugin,curl,cURL fetcher plugin,+PACKAGE_strongswan-mod-curl:libcurl))
 610 $(eval $(call BuildPlugin,curve25519,Curve25519 Diffie-Hellman,))
 611 $(eval $(call BuildPlugin,des,DES crypto,))
 612 $(eval $(call BuildPlugin,dhcp,DHCP based attribute provider,))
 613 $(eval $(call BuildPlugin,dnskey,DNS RR key decoding,))
 614 $(eval $(call BuildPlugin,duplicheck,advanced duplicate checking,))
 615 $(eval $(call BuildPlugin,eap-identity,EAP identity helper,))
 616 $(eval $(call BuildPlugin,eap-md5,EAP MD5 (CHAP) EAP auth,))
 617 $(eval $(call BuildPlugin,eap-mschapv2,EAP MS-CHAPv2 EAP auth,+strongswan-mod-md4 +strongswan-mod-des))
 618 $(eval $(call BuildPlugin,eap-radius,EAP RADIUS auth,))
 619 $(eval $(call BuildPlugin,eap-tls,EAP TLS auth,+strongswan-libtls))
 620 $(eval $(call BuildPlugin,farp,fake arp respsonses,))
 621 $(eval $(call BuildPlugin,fips-prf,FIPS PRF crypto,+strongswan-mod-sha1))
 622 $(eval $(call BuildPlugin,forecast,forward multi/broadcast traffic,+kmod-ipt-conntrack-extra))
 623 $(eval $(call BuildPlugin,gcm,GCM AEAD wrapper crypto,))
 624 $(eval $(call BuildPlugin,gcrypt,libgcrypt,+PACKAGE_strongswan-mod-gcrypt:libgcrypt))
 625 $(eval $(call BuildPlugin,gmp,libgmp,+PACKAGE_strongswan-mod-gmp:libgmp))
 626 $(eval $(call BuildPlugin,gmpdh,DH-Groups; no libgmp dep,))
 627 $(eval $(call BuildPlugin,ha,high availability cluster,))
 628 $(eval $(call BuildPlugin,hmac,HMAC crypto,))
 629 $(eval $(call BuildPlugin,kernel-libipsec,libipsec kernel interface,))
 630 $(eval $(call BuildPlugin,kernel-netlink,netlink kernel interface,))
 631 $(eval $(call BuildPlugin,ldap,LDAP,+PACKAGE_strongswan-mod-ldap:libopenldap))
 632 $(eval $(call BuildPlugin,led,LED blink on IKE activity,))
 633 $(eval $(call BuildPlugin,load-tester,load testing,))
 634 $(eval $(call BuildPlugin,nonce,nonce genereation,))
 635 $(eval $(call BuildPlugin,md4,MD4 crypto,))
 636 $(eval $(call BuildPlugin,md5,MD5 crypto,))
 637 $(eval $(call BuildPlugin,mysql,MySQL database interface,+strongswan-mod-sql +PACKAGE_strongswan-mod-mysql:libmysqlclient-r))
 638 $(eval $(call BuildPlugin,openssl,OpenSSL crypto,+PACKAGE_strongswan-mod-openssl:libopenssl))
 639 $(eval $(call BuildPlugin,pem,PEM decoding,))
 640 $(eval $(call BuildPlugin,pgp,PGP key decoding,))
 641 $(eval $(call BuildPlugin,pkcs1,PKCS1 key decoding,))
 642 $(eval $(call BuildPlugin,pkcs7,PKCS7 key decoding,))
 643 $(eval $(call BuildPlugin,pkcs8,PKCS8 key decoding,))
 644 $(eval $(call BuildPlugin,pkcs11,PKCS11 key decoding,))
 645 $(eval $(call BuildPlugin,pkcs12,PKCS12 key decoding,))
 646 $(eval $(call BuildPlugin,pubkey,raw public key,))
 647 $(eval $(call BuildPlugin,random,RNG,))
 648 $(eval $(call BuildPlugin,rc2,RC2 crypto,))
 649 $(eval $(call BuildPlugin,resolve,DNS resolver,))
 650 $(eval $(call BuildPlugin,revocation,X509 CRL/OCSP revocation,))
 651 $(eval $(call BuildPlugin,sha1,SHA1 crypto,))
 652 $(eval $(call BuildPlugin,sha2,SHA2 crypto,))
 653 $(eval $(call BuildPlugin,smp,SMP configuration and control interface,+PACKAGE_strongswan-mod-smp:libxml2))
 654 $(eval $(call BuildPlugin,socket-default,default socket implementation for charon,))
 655 $(eval $(call BuildPlugin,socket-dynamic,dynamic socket implementation for charon,))
 656 $(eval $(call BuildPlugin,sql,SQL database interface,))
 657 $(eval $(call BuildPlugin,sqlite,SQLite database interface,+strongswan-mod-sql +PACKAGE_strongswan-mod-sqlite:libsqlite3))
 658 $(eval $(call BuildPlugin,sshkey,SSH key decoding,))
 659 $(eval $(call BuildPlugin,stroke,Stroke,+strongswan-charon +strongswan-ipsec))
 660 $(eval $(call BuildPlugin,test-vectors,crypto test vectors,))
 661 $(eval $(call BuildPlugin,uci,UCI config interface,+PACKAGE_strongswan-mod-uci:libuci))
 662 $(eval $(call BuildPlugin,unity,Cisco Unity extension,))
 663 $(eval $(call BuildPlugin,updown,updown firewall,))
 664 $(eval $(call BuildPlugin,vici,Versatile IKE Configuration Interface,))
 665 $(eval $(call BuildPlugin,whitelist,peer identity whitelisting,))
 666 $(eval $(call BuildPlugin,x509,x509 certificate,))
 667 $(eval $(call BuildPlugin,xauth-eap,EAP XAuth backend,))
 668 $(eval $(call BuildPlugin,xauth-generic,generic XAuth backend,))
 669 $(eval $(call BuildPlugin,xcbc,xcbc crypto,))