net/strongswan/Makefile

   1 #
   2 # Copyright (C) 2012-2015 OpenWrt.org
   3 #
   4 # This is free software, licensed under the GNU General Public License v2.
   5 # See /LICENSE for more information.
   6 #
   7
   8 include $(TOPDIR)/rules.mk
   9
  10 PKG_NAME:=strongswan
  11 PKG_VERSION:=5.5.3
  12 PKG_RELEASE:=1
  13
  14 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2
  15 PKG_HASH:=c5ea54b199174708de11af9b8f4ecf28b5b0743d4bc0e380e741f25b28c0f8d4
  16 PKG_SOURCE_URL:=http://download.strongswan.org/ http://download2.strongswan.org/
  17 PKG_LICENSE:=GPL-2.0+
  18 PKG_MAINTAINER:=Stijn Tintel <stijn@linux-ipv6.be>
  19
  20 PKG_MOD_AVAILABLE:= \
  21         addrblock \
  22         aes \
  23         af-alg \
  24         agent \
  25         attr \
  26         attr-sql \
  27         blowfish \
  28         ccm \
  29         cmac \
  30         constraints \
  31         connmark \
  32         coupling \
  33         ctr \
  34         curl \
  35         curve25519 \
  36         des \
  37         dhcp \
  38         dnskey \
  39         duplicheck \
  40         eap-identity \
  41         eap-md5 \
  42         eap-mschapv2 \
  43         eap-radius \
  44         eap-tls \
  45         farp \
  46         fips-prf \
  47         forecast \
  48         gcm \
  49         gcrypt \
  50         gmp \
  51         gmpdh \
  52         ha \
  53         hmac \
  54         kernel-libipsec \
  55         kernel-netlink \
  56         ldap \
  57         led \
  58         load-tester \
  59         nonce \
  60         md4 \
  61         md5 \
  62         mysql \
  63         openssl \
  64         pem \
  65         pgp \
  66         pkcs1 \
  67         pkcs7 \
  68         pkcs8 \
  69         pkcs11 \
  70         pkcs12 \
  71         pubkey \
  72         random \
  73         rc2 \
  74         resolve \
  75         revocation \
  76         sha1 \
  77         sha2 \
  78         smp \
  79         socket-default \
  80         socket-dynamic \
  81         sql \
  82         sqlite \
  83         sshkey \
  84         stroke \
  85         test-vectors \
  86         unity \
  87         uci \
  88         updown \
  89         whitelist \
  90         x509 \
  91         xauth-eap \
  92         xauth-generic \
  93         xcbc
  94
  95 PKG_CONFIG_DEPENDS:= \
  96         CONFIG_STRONGSWAN_ROUTING_TABLE \
  97         CONFIG_STRONGSWAN_ROUTING_TABLE_PRIO \
  98         $(patsubst %,CONFIG_PACKAGE_strongswan-mod-%,$(PKG_MOD_AVAILABLE)) \
  99
 100 PKG_FIXUP:=autoreconf
 101 PKG_INSTALL:=1
 102 PKG_BUILD_PARALLEL:=1
 103
 104 include $(INCLUDE_DIR)/package.mk
 105
 106 define Package/strongswan/Default
 107   SUBMENU:=VPN
 108   SECTION:=net
 109   CATEGORY:=Network
 110   TITLE:=StrongSwan
 111   URL:=http://www.strongswan.org/
 112 endef
 113
 114 define Package/strongswan/description/Default
 115  StrongSwan is an OpenSource IPsec implementation for the Linux operating system.
 116 endef
 117
 118 define Package/strongswan
 119 $(call Package/strongswan/Default)
 120   DEPENDS:= +libpthread +ip \
 121         +kmod-crypto-authenc \
 122         +kmod-ipsec +kmod-ipsec4 +IPV6:kmod-ipsec6 \
 123         +kmod-ipt-ipsec +iptables-mod-ipsec
 124 endef
 125
 126 define Package/strongswan/config
 127   source "$(SOURCE)/Config.in"
 128 endef
 129
 130 define Package/strongswan/description
 131 $(call Package/strongswan/description/Default)
 132  This package contains shared libraries and scripts.
 133 endef
 134
 135 define Package/strongswan-full
 136 $(call Package/strongswan/Default)
 137   TITLE+= (full)
 138   DEPENDS:= +strongswan \
 139         +strongswan-charon \
 140         +strongswan-mod-addrblock \
 141         +strongswan-mod-aes \
 142         +strongswan-mod-af-alg \
 143         +strongswan-mod-agent \
 144         +strongswan-mod-attr \
 145         +strongswan-mod-attr-sql \
 146         +strongswan-mod-blowfish \
 147         +strongswan-mod-ccm \
 148         +strongswan-mod-cmac \
 149         +strongswan-mod-constraints \
 150         +strongswan-mod-connmark \
 151         +strongswan-mod-coupling \
 152         +strongswan-mod-ctr \
 153         +strongswan-mod-curl \
 154         +strongswan-mod-curve25519 \
 155         +strongswan-mod-des \
 156         +strongswan-mod-dhcp \
 157         +strongswan-mod-dnskey \
 158         +strongswan-mod-duplicheck \
 159         +strongswan-mod-eap-identity \
 160         +strongswan-mod-eap-md5 \
 161         +strongswan-mod-eap-mschapv2 \
 162         +strongswan-mod-eap-radius \
 163         +strongswan-mod-eap-tls \
 164         +strongswan-mod-farp \
 165         +strongswan-mod-fips-prf \
 166         +strongswan-mod-forecast \
 167         +strongswan-mod-gcm \
 168         +strongswan-mod-gcrypt \
 169         +strongswan-mod-gmp \
 170         +strongswan-mod-ha \
 171         +strongswan-mod-hmac \
 172         +strongswan-mod-kernel-netlink \
 173         +strongswan-mod-ldap \
 174         +strongswan-mod-led \
 175         +strongswan-mod-load-tester \
 176         +strongswan-mod-nonce \
 177         +strongswan-mod-md4 \
 178         +strongswan-mod-md5 \
 179         +strongswan-mod-mysql \
 180         +strongswan-mod-openssl \
 181         +strongswan-mod-pem \
 182         +strongswan-mod-pgp \
 183         +strongswan-mod-pkcs1 \
 184         +strongswan-mod-pkcs7 \
 185         +strongswan-mod-pkcs8 \
 186         +strongswan-mod-pkcs11 \
 187         +strongswan-mod-pkcs12 \
 188         +strongswan-mod-pubkey \
 189         +strongswan-mod-random \
 190         +strongswan-mod-rc2 \
 191         +strongswan-mod-resolve \
 192         +strongswan-mod-revocation \
 193         +strongswan-mod-sha1 \
 194         +strongswan-mod-sha2 \
 195         +strongswan-mod-smp \
 196         +strongswan-mod-socket-default \
 197         +strongswan-mod-sql \
 198         +strongswan-mod-sqlite \
 199         +strongswan-mod-sshkey \
 200         +strongswan-mod-stroke \
 201         +strongswan-mod-test-vectors \
 202         +strongswan-mod-uci \
 203         +strongswan-mod-unity \
 204         +strongswan-mod-updown \
 205         +strongswan-mod-whitelist \
 206         +strongswan-mod-x509 \
 207         +strongswan-mod-xauth-eap \
 208         +strongswan-mod-xauth-generic \
 209         +strongswan-mod-xcbc \
 210         +strongswan-pki \
 211         +strongswan-utils \
 212         @DEVEL
 213 endef
 214
 215 define Package/strongswan-full/description
 216 $(call Package/strongswan/description/Default)
 217  This meta-package contains dependencies for all of the strongswan plugins
 218  except kernel-libipsec,
 219  socket-dynamic and which are omitted in favor of the kernel-netlink and
 220  socket-default plugins.
 221 endef
 222
 223
 224 define Package/strongswan-default
 225 $(call Package/strongswan/Default)
 226   TITLE+= (default)
 227   DEPENDS:= +strongswan \
 228         +strongswan-charon \
 229         +strongswan-mod-aes \
 230         +strongswan-mod-attr \
 231         +strongswan-mod-connmark \
 232         +strongswan-mod-constraints \
 233         +strongswan-mod-des \
 234         +strongswan-mod-dnskey \
 235         +strongswan-mod-fips-prf \
 236         +strongswan-mod-gmp \
 237         +strongswan-mod-hmac \
 238         +strongswan-mod-kernel-netlink \
 239         +strongswan-mod-md5 \
 240         +strongswan-mod-nonce \
 241         +strongswan-mod-pem \
 242         +strongswan-mod-pgp \
 243         +strongswan-mod-pkcs1 \
 244         +strongswan-mod-pubkey \
 245         +strongswan-mod-random \
 246         +strongswan-mod-rc2 \
 247         +strongswan-mod-resolve \
 248         +strongswan-mod-revocation \
 249         +strongswan-mod-sha1 \
 250         +strongswan-mod-sha2 \
 251         +strongswan-mod-socket-default \
 252         +strongswan-mod-sshkey \
 253         +strongswan-mod-stroke \
 254         +strongswan-mod-updown \
 255         +strongswan-mod-x509 \
 256         +strongswan-mod-xauth-generic \
 257         +strongswan-mod-xcbc \
 258         +strongswan-utils
 259 endef
 260
 261 define Package/strongswan-default/description
 262 $(call Package/strongswan/description/Default)
 263  This meta-package contains only dependencies to match upstream defaults.
 264 endef
 265
 266
 267 define Package/strongswan-isakmp
 268 $(call Package/strongswan/Default)
 269   TITLE+= (isakmp)
 270   DEPENDS:= +strongswan \
 271         +strongswan-charon \
 272         +strongswan-mod-aes \
 273         +strongswan-mod-des \
 274         +strongswan-mod-gmpdh \
 275         +strongswan-mod-hmac \
 276         +strongswan-mod-kernel-netlink \
 277         +strongswan-mod-md5 \
 278         +strongswan-mod-nonce \
 279         +strongswan-mod-pubkey \
 280         +strongswan-mod-random \
 281         +strongswan-mod-sha1 \
 282         +strongswan-mod-socket-default \
 283         +strongswan-mod-stroke \
 284         +strongswan-mod-uci \
 285         +strongswan-mod-updown \
 286         +strongswan-utils
 287 endef
 288
 289 define Package/strongswan-isakmp/description
 290 $(call Package/strongswan/description/Default)
 291  This meta-package contains only dependencies to establish  ISAKMP /
 292  IKE PSK connections, dropping other capabilities in favor of small size
 293  Can fit most routers even with 4Mb flash (after removing IPv6 support).
 294 endef
 295
 296
 297 define Package/strongswan-minimal
 298 $(call Package/strongswan/Default)
 299   TITLE+= (minimal)
 300   DEPENDS:= +strongswan \
 301         +strongswan-charon \
 302         +strongswan-mod-aes \
 303         +strongswan-mod-gmp \
 304         +strongswan-mod-hmac \
 305         +strongswan-mod-kernel-netlink \
 306         +strongswan-mod-nonce \
 307         +strongswan-mod-pubkey \
 308         +strongswan-mod-random \
 309         +strongswan-mod-sha1 \
 310         +strongswan-mod-socket-default \
 311         +strongswan-mod-stroke \
 312         +strongswan-mod-updown \
 313         +strongswan-mod-x509 \
 314         +strongswan-mod-xcbc
 315 endef
 316
 317 define Package/strongswan-minimal/description
 318 $(call Package/strongswan/description/Default)
 319  This meta-package contains only dependencies for a minimal IKEv2 setup.
 320 endef
 321
 322 define Package/strongswan-charon
 323 $(call Package/strongswan/Default)
 324   TITLE+= IKEv1/IKEv2 keying daemon
 325   DEPENDS:= +strongswan
 326 endef
 327
 328 define Package/strongswan-charon/description
 329 $(call Package/strongswan/description/Default)
 330  This package contains charon, an IKEv2 keying daemon.
 331 endef
 332
 333 define Package/strongswan-pki
 334 $(call Package/strongswan/Default)
 335   TITLE+= PKI tool
 336   DEPENDS:= +strongswan
 337 endef
 338
 339 define Package/strongswan-pki/description
 340 $(call Package/strongswan/description/Default)
 341  This package contains the pki tool.
 342 endef
 343
 344 define Package/strongswan-utils
 345 $(call Package/strongswan/Default)
 346   TITLE+= utilities
 347   DEPENDS:= +strongswan
 348 endef
 349
 350 define Package/strongswan-utils/description
 351 $(call Package/strongswan/description/Default)
 352  This package contains the scepclient utility.
 353 endef
 354
 355 define Package/strongswan-libtls
 356 $(call Package/strongswan/Default)
 357   TITLE+= libtls
 358   DEPENDS:= +strongswan
 359 endef
 360
 361 define Package/strongswan-libtls/description
 362 $(call Package/strongswan/description/Default)
 363  This package contains libtls for strongSwan plugins eap-tls, eap-ttls,
 364  eap-peap, tnc-tnccs
 365 endef
 366
 367 define BuildPlugin
 368   define Package/strongswan-mod-$(1)
 369     $$(call Package/strongswan/Default)
 370     TITLE:= StrongSwan $(2) plugin
 371     DEPENDS:= +strongswan $(3)
 372   endef
 373
 374   define Package/strongswan-mod-$(1)/install
 375         $(INSTALL_DIR) $$(1)/etc/strongswan.d/charon
 376         if [ -f $(PKG_INSTALL_DIR)/etc/strongswan.d/charon/$(1).conf ]; then \
 377                 $(INSTALL_DATA) $(PKG_INSTALL_DIR)/etc/strongswan.d/charon/$(1).conf $$(1)/etc/strongswan.d/charon/; fi
 378         $(INSTALL_DIR) $$(1)/usr/lib/ipsec/plugins
 379         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-$(1).so \
 380                 $$(1)/usr/lib/ipsec/plugins/
 381         $(call Plugin/$(1)/install,$$(1))
 382   endef
 383
 384   $$(eval $$(call BuildPackage,strongswan-mod-$(1)))
 385 endef
 386
 387 CONFIGURE_ARGS+= \
 388         --disable-scripts \
 389         --disable-static \
 390         --disable-fast \
 391         --enable-mediation \
 392         --with-systemdsystemunitdir=no \
 393         $(if $(CONFIG_PACKAGE_strongswan-pki),--enable-pki,--disable-pki) \
 394         $(if $(CONFIG_PACKAGE_strongswan-utils),--enable-scepclient,--disable-scepclient) \
 395         --with-random-device=/dev/random \
 396         --with-urandom-device=/dev/urandom \
 397         --with-routing-table="$(call qstrip,$(CONFIG_STRONGSWAN_ROUTING_TABLE))" \
 398         --with-routing-table-prio="$(call qstrip,$(CONFIG_STRONGSWAN_ROUTING_TABLE_PRIO))" \
 399         $(foreach m,$(PKG_MOD_AVAILABLE), \
 400           $(if $(CONFIG_PACKAGE_strongswan-mod-$(m)),--enable-$(m),--disable-$(m)) \
 401         ) \
 402         ac_cv_search___atomic_load=no
 403
 404 EXTRA_LDFLAGS+= -Wl,-rpath-link,$(STAGING_DIR)/usr/lib
 405
 406 define Package/strongswan/conffiles
 407 /etc/ipsec.d/
 408 /etc/ipsec.conf
 409 /etc/ipsec.secrets
 410 /etc/ipsec.user
 411 /etc/strongswan.conf
 412 /etc/strongswan.d/
 413 endef
 414
 415 define Package/strongswan/install
 416         $(INSTALL_DIR) $(1)/etc
 417         $(INSTALL_CONF) $(PKG_INSTALL_DIR)/etc/ipsec.conf $(1)/etc/
 418         $(INSTALL_CONF) $(PKG_INSTALL_DIR)/etc/strongswan.conf $(1)/etc/
 419         $(INSTALL_DIR) $(1)/usr/lib/ipsec
 420         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libstrongswan.so.* $(1)/usr/lib/ipsec/
 421         $(INSTALL_CONF) ./files/ipsec.secrets $(1)/etc/
 422         $(INSTALL_CONF) ./files/ipsec.user $(1)/etc/
 423         $(INSTALL_DIR) $(1)/etc/init.d
 424         $(INSTALL_BIN) ./files/ipsec.init $(1)/etc/init.d/ipsec
 425 endef
 426
 427 define Package/strongswan-default/install
 428         true
 429 endef
 430
 431 define Package/strongswan-full/install
 432         true
 433 endef
 434
 435 define Package/strongswan-isakmp/install
 436         true
 437 endef
 438
 439 define Package/strongswan-minimal/install
 440         true
 441 endef
 442
 443 define Package/strongswan-charon/install
 444         $(INSTALL_DIR) $(1)/usr/lib/ipsec
 445         $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/lib/ipsec/charon $(1)/usr/lib/ipsec/
 446         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libcharon.so.* $(1)/usr/lib/ipsec/
 447 endef
 448
 449 define Package/strongswan-pki/install
 450         $(INSTALL_DIR) $(1)/etc/strongswan.d
 451         $(CP) $(PKG_INSTALL_DIR)/etc/strongswan.d/pki.conf $(1)/etc/strongswan.d/
 452         $(INSTALL_DIR) $(1)/usr/bin
 453         $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/pki $(1)/usr/bin/
 454 endef
 455
 456 define Package/strongswan-utils/install
 457         $(INSTALL_DIR) $(1)/usr/sbin
 458         $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/sbin/ipsec $(1)/usr/sbin/
 459         $(INSTALL_DIR) $(1)/usr/lib/ipsec
 460         $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/lib/ipsec/scepclient $(1)/usr/lib/ipsec/
 461 endef
 462
 463 define Package/strongswan-libtls/install
 464         $(INSTALL_DIR) $(1)/usr/lib/ipsec
 465         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libtls.so.* $(1)/usr/lib/ipsec/
 466 endef
 467
 468 define Plugin/duplicheck/install
 469         $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
 470         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/duplicheck $(1)/usr/lib/ipsec/
 471         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-duplicheck.so $(1)/usr/lib/ipsec/plugins/
 472 endef
 473
 474 define Plugin/eap-radius/install
 475         $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
 476         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libradius.so.* $(1)/usr/lib/ipsec/
 477         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-eap-radius.so $(1)/usr/lib/ipsec/plugins/
 478 endef
 479
 480 define Plugin/attr-sql/install
 481         $(INSTALL_DIR) $(1)/usr/lib/ipsec
 482         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/pool $(1)/usr/lib/ipsec/
 483 endef
 484
 485 define Plugin/stroke/install
 486         $(INSTALL_DIR) $(1)/etc/ipsec.d/aacerts
 487         $(INSTALL_DIR) $(1)/etc/ipsec.d/acerts
 488         $(INSTALL_DIR) $(1)/etc/ipsec.d/cacerts
 489         $(INSTALL_DIR) $(1)/etc/ipsec.d/certs
 490         $(INSTALL_DIR) $(1)/etc/ipsec.d/crls
 491         $(INSTALL_DIR) $(1)/etc/ipsec.d/ocspcerts
 492         $(INSTALL_DIR) $(1)/etc/ipsec.d/private
 493         $(INSTALL_DIR) $(1)/etc/ipsec.d/reqs
 494
 495         $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
 496         $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/lib/ipsec/{starter,stroke} $(1)/usr/lib/ipsec/
 497         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-stroke.so $(1)/usr/lib/ipsec/plugins/
 498 endef
 499
 500 define Plugin/updown/install
 501         $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
 502         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/_updown $(1)/usr/lib/ipsec/
 503         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-updown.so $(1)/usr/lib/ipsec/plugins/
 504         $(INSTALL_DIR) $(1)/etc
 505 endef
 506
 507 define Plugin/whitelist/install
 508         $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
 509         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/whitelist $(1)/usr/lib/ipsec/
 510         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-whitelist.so $(1)/usr/lib/ipsec/plugins/
 511 endef
 512
 513 define Plugin/kernel-libipsec/install
 514         $(INSTALL_DIR) $(1)/usr/lib/ipsec
 515         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libipsec.so.* $(1)/usr/lib/ipsec/
 516 endef
 517
 518 $(eval $(call BuildPackage,strongswan))
 519 $(eval $(call BuildPackage,strongswan-default))
 520 $(eval $(call BuildPackage,strongswan-full))
 521 $(eval $(call BuildPackage,strongswan-minimal))
 522 $(eval $(call BuildPackage,strongswan-isakmp))
 523 $(eval $(call BuildPackage,strongswan-charon))
 524 $(eval $(call BuildPackage,strongswan-pki))
 525 $(eval $(call BuildPackage,strongswan-utils))
 526 $(eval $(call BuildPackage,strongswan-libtls))
 527 $(eval $(call BuildPlugin,addrblock,RFC 3779 address block constraint support,))
 528 $(eval $(call BuildPlugin,aes,AES crypto,))
 529 $(eval $(call BuildPlugin,af-alg,AF_ALG crypto interface to Linux Crypto API,+kmod-crypto-user))
 530 $(eval $(call BuildPlugin,agent,SSH agent signing,))
 531 $(eval $(call BuildPlugin,attr,file based config,))
 532 $(eval $(call BuildPlugin,attr-sql,SQL based config,+strongswan-charon))
 533 $(eval $(call BuildPlugin,blowfish,Blowfish crypto,))
 534 $(eval $(call BuildPlugin,ccm,CCM AEAD wrapper crypto,))
 535 $(eval $(call BuildPlugin,cmac,CMAC crypto,))
 536 $(eval $(call BuildPlugin,connmark,netfilter connection marking,))
 537 $(eval $(call BuildPlugin,constraints,advanced X509 constraint checking,))
 538 $(eval $(call BuildPlugin,coupling,IKEv2 plugin to couple peer certificates permanently to authentication,))
 539 $(eval $(call BuildPlugin,ctr,Counter Mode wrapper crypto,))
 540 $(eval $(call BuildPlugin,curl,cURL fetcher plugin,+PACKAGE_strongswan-mod-curl:libcurl))
 541 $(eval $(call BuildPlugin,curve25519,Curve25519 Diffie-Hellman,))
 542 $(eval $(call BuildPlugin,des,DES crypto,))
 543 $(eval $(call BuildPlugin,dhcp,DHCP based attribute provider,))
 544 $(eval $(call BuildPlugin,dnskey,DNS RR key decoding,))
 545 $(eval $(call BuildPlugin,duplicheck,advanced duplicate checking,))
 546 $(eval $(call BuildPlugin,eap-identity,EAP identity helper,))
 547 $(eval $(call BuildPlugin,eap-md5,EAP MD5 (CHAP) EAP auth,))
 548 $(eval $(call BuildPlugin,eap-mschapv2,EAP MS-CHAPv2 EAP auth,+strongswan-mod-md4 +strongswan-mod-des))
 549 $(eval $(call BuildPlugin,eap-radius,EAP RADIUS auth,))
 550 $(eval $(call BuildPlugin,eap-tls,EAP TLS auth,+strongswan-libtls))
 551 $(eval $(call BuildPlugin,farp,fake arp respsonses,))
 552 $(eval $(call BuildPlugin,fips-prf,FIPS PRF crypto,+strongswan-mod-sha1))
 553 $(eval $(call BuildPlugin,forecast,forward multi/broadcast traffic,+kmod-ipt-conntrack-extra))
 554 $(eval $(call BuildPlugin,gcm,GCM AEAD wrapper crypto,))
 555 $(eval $(call BuildPlugin,gcrypt,libgcrypt,+PACKAGE_strongswan-mod-gcrypt:libgcrypt))
 556 $(eval $(call BuildPlugin,gmp,libgmp,+PACKAGE_strongswan-mod-gmp:libgmp))
 557 $(eval $(call BuildPlugin,gmpdh,DH-Groups; no libgmp dep,))
 558 $(eval $(call BuildPlugin,ha,high availability cluster,))
 559 $(eval $(call BuildPlugin,hmac,HMAC crypto,))
 560 $(eval $(call BuildPlugin,kernel-libipsec,libipsec kernel interface,))
 561 $(eval $(call BuildPlugin,kernel-netlink,netlink kernel interface,))
 562 $(eval $(call BuildPlugin,ldap,LDAP,+PACKAGE_strongswan-mod-ldap:libopenldap))
 563 $(eval $(call BuildPlugin,led,LED blink on IKE activity,))
 564 $(eval $(call BuildPlugin,load-tester,load testing,))
 565 $(eval $(call BuildPlugin,nonce,nonce genereation,))
 566 $(eval $(call BuildPlugin,md4,MD4 crypto,))
 567 $(eval $(call BuildPlugin,md5,MD5 crypto,))
 568 $(eval $(call BuildPlugin,mysql,MySQL database interface,+strongswan-mod-sql +PACKAGE_strongswan-mod-mysql:libmysqlclient-r))
 569 $(eval $(call BuildPlugin,openssl,OpenSSL crypto,+PACKAGE_strongswan-mod-openssl:libopenssl))
 570 $(eval $(call BuildPlugin,pem,PEM decoding,))
 571 $(eval $(call BuildPlugin,pgp,PGP key decoding,))
 572 $(eval $(call BuildPlugin,pkcs1,PKCS1 key decoding,))
 573 $(eval $(call BuildPlugin,pkcs7,PKCS7 key decoding,))
 574 $(eval $(call BuildPlugin,pkcs8,PKCS8 key decoding,))
 575 $(eval $(call BuildPlugin,pkcs11,PKCS11 key decoding,))
 576 $(eval $(call BuildPlugin,pkcs12,PKCS12 key decoding,))
 577 $(eval $(call BuildPlugin,pubkey,raw public key,))
 578 $(eval $(call BuildPlugin,random,RNG,))
 579 $(eval $(call BuildPlugin,rc2,RC2 crypto,))
 580 $(eval $(call BuildPlugin,resolve,DNS resolver,))
 581 $(eval $(call BuildPlugin,revocation,X509 CRL/OCSP revocation,))
 582 $(eval $(call BuildPlugin,sha1,SHA1 crypto,))
 583 $(eval $(call BuildPlugin,sha2,SHA2 crypto,))
 584 $(eval $(call BuildPlugin,smp,SMP configuration and control interface,+PACKAGE_strongswan-mod-smp:libxml2))
 585 $(eval $(call BuildPlugin,socket-default,default socket implementation for charon,))
 586 $(eval $(call BuildPlugin,socket-dynamic,dynamic socket implementation for charon,))
 587 $(eval $(call BuildPlugin,sql,SQL database interface,))
 588 $(eval $(call BuildPlugin,sqlite,SQLite database interface,+strongswan-mod-sql +PACKAGE_strongswan-mod-sqlite:libsqlite3))
 589 $(eval $(call BuildPlugin,sshkey,SSH key decoding,))
 590 $(eval $(call BuildPlugin,stroke,Stroke,+strongswan-charon +strongswan-utils))
 591 $(eval $(call BuildPlugin,test-vectors,crypto test vectors,))
 592 $(eval $(call BuildPlugin,uci,UCI config interface,+PACKAGE_strongswan-mod-uci:libuci))
 593 $(eval $(call BuildPlugin,unity,Cisco Unity extension,))
 594 $(eval $(call BuildPlugin,updown,updown firewall,))
 595 $(eval $(call BuildPlugin,whitelist,peer identity whitelisting,))
 596 $(eval $(call BuildPlugin,x509,x509 certificate,))
 597 $(eval $(call BuildPlugin,xauth-eap,EAP XAuth backend,))
 598 $(eval $(call BuildPlugin,xauth-generic,generic XAuth backend,))
 599 $(eval $(call BuildPlugin,xcbc,xcbc crypto,))