2 # Copyright (C) 2012-2018 OpenWrt.org
4 # This is free software, licensed under the GNU General Public License v2.
5 # See /LICENSE for more information.
8 include $(TOPDIR
)/rules.mk
12 PKG_RELEASE
:=$(AUTORELEASE
)
14 PKG_SOURCE
:=$(PKG_NAME
)-$(PKG_VERSION
).
tar.bz2
15 PKG_SOURCE_URL
:=https
://download.strongswan.org
/ https
://download2.strongswan.org
/
16 PKG_HASH
:=983e4ef4a4c6c9d69f5fe6707c7fe0b2b9a9291943bbf4e008faab6bf91c0bdd
17 PKG_LICENSE
:=GPL-2.0
-or-later
18 PKG_MAINTAINER
:=Philip Prindeville
<philipp@redfish-solutions.com
>, Noel Kuntze
<noel.kuntze@thermi.consulting
>
19 PKG_CPE_ID
:=cpe
:/a
:strongswan
:strongswan
103 PKG_CONFIG_DEPENDS
:= \
104 CONFIG_STRONGSWAN_ROUTING_TABLE \
105 CONFIG_STRONGSWAN_ROUTING_TABLE_PRIO \
106 $(patsubst %,CONFIG_PACKAGE_strongswan-mod-
%,$(PKG_MOD_AVAILABLE
)) \
108 PKG_FIXUP
:=autoreconf
110 PKG_BUILD_PARALLEL
:=1
112 include $(INCLUDE_DIR
)/package.mk
113 # strongswan-mod-mysql needs iconv
114 include $(INCLUDE_DIR
)/nls.mk
116 define Package
/strongswan
/Default
121 URL
:=http
://www.strongswan.org
/
124 define Package
/strongswan
/description
/Default
125 StrongSwan is an OpenSource IPsec implementation for the Linux operating system.
128 define Package
/strongswan
129 $(call Package
/strongswan
/Default
)
131 DEPENDS
:= +libpthread
+ip \
132 +kmod-crypto-authenc \
133 +kmod-ipsec
+kmod-ipsec4
+IPV6
:kmod-ipsec6
136 define Package
/strongswan
/config
137 source
"$(SOURCE)/Config.in"
140 define Package
/strongswan
/description
141 $(call Package
/strongswan
/description
/Default
)
142 This package contains shared libraries and scripts.
145 define Package
/strongswan-full
146 $(call Package
/strongswan
/Default
)
148 DEPENDS
:= strongswan \
150 +strongswan-charon-cmd \
152 +strongswan-libnttfft \
153 +strongswan-mod-addrblock \
154 +strongswan-mod-aes \
155 +strongswan-mod-af-alg \
156 +strongswan-mod-agent \
157 +strongswan-mod-attr \
158 +strongswan-mod-attr-sql \
159 +strongswan-mod-bliss \
160 +strongswan-mod-blowfish \
161 +strongswan-mod-ccm \
162 +strongswan-mod-chapoly \
163 +strongswan-mod-cmac \
164 +strongswan-mod-constraints \
165 +strongswan-mod-connmark \
166 +strongswan-mod-coupling \
167 +strongswan-mod-ctr \
168 +strongswan-mod-curl \
169 +strongswan-mod-curve25519 \
170 +strongswan-mod-des \
171 +strongswan-mod-dhcp \
172 +strongswan-mod-dnskey \
173 +strongswan-mod-duplicheck \
174 +strongswan-mod-eap-identity \
175 +strongswan-mod-eap-md5 \
176 +strongswan-mod-eap-mschapv2 \
177 +strongswan-mod-eap-radius \
178 +strongswan-mod-eap-tls \
179 +strongswan-mod-farp \
180 +strongswan-mod-fips-prf \
181 +strongswan-mod-forecast \
182 +strongswan-mod-gcm \
183 +strongswan-mod-gcrypt \
184 +strongswan-mod-gmp \
186 +strongswan-mod-hmac \
187 +strongswan-mod-kernel-netlink \
188 +strongswan-mod-ldap \
189 +strongswan-mod-led \
190 +strongswan-mod-load-tester \
191 +strongswan-mod-nonce \
192 +strongswan-mod-md4 \
193 +strongswan-mod-md5 \
194 +strongswan-mod-mgf1 \
195 +strongswan-mod-mysql \
196 +strongswan-mod-newhope \
197 +strongswan-mod-ntru \
198 +strongswan-mod-openssl \
199 +strongswan-mod-pem \
200 +strongswan-mod-pgp \
201 +strongswan-mod-pkcs1 \
202 +strongswan-mod-pkcs7 \
203 +strongswan-mod-pkcs8 \
204 +strongswan-mod-pkcs11 \
205 +strongswan-mod-pkcs12 \
206 +strongswan-mod-pubkey \
207 +strongswan-mod-random \
208 +strongswan-mod-rc2 \
209 +strongswan-mod-resolve \
210 +strongswan-mod-revocation \
211 +strongswan-mod-sha1 \
212 +strongswan-mod-sha2 \
213 +strongswan-mod-sha3 \
214 +strongswan-mod-smp \
215 +strongswan-mod-socket-default \
216 +strongswan-mod-sql \
217 +strongswan-mod-sqlite \
218 +strongswan-mod-sshkey \
219 +strongswan-mod-stroke \
220 +strongswan-mod-test-vectors \
221 +strongswan-mod-uci \
222 +strongswan-mod-unity \
223 +strongswan-mod-updown \
224 +strongswan-mod-vici \
225 +strongswan-mod-whitelist \
226 +strongswan-mod-x509 \
227 +strongswan-mod-xauth-eap \
228 +strongswan-mod-xauth-generic \
229 +strongswan-mod-xcbc \
231 +strongswan-scepclient \
232 +strongswan-swanctl \
236 define Package
/strongswan-full
/description
237 $(call Package
/strongswan
/description
/Default
)
238 This meta-package contains dependencies for
all of the strongswan plugins
239 except kernel-libipsec
,
240 socket-dynamic and which are omitted in favor of the kernel-netlink and
241 socket-default plugins.
245 define Package
/strongswan-default
246 $(call Package
/strongswan
/Default
)
248 DEPENDS
:= strongswan \
250 +strongswan-mod-aes \
251 +strongswan-mod-attr \
252 +strongswan-mod-connmark \
253 +strongswan-mod-constraints \
254 +strongswan-mod-des \
255 +strongswan-mod-dnskey \
256 +strongswan-mod-fips-prf \
257 +strongswan-mod-gmp \
258 +strongswan-mod-hmac \
259 +strongswan-mod-kernel-netlink \
260 +strongswan-mod-md5 \
261 +strongswan-mod-nonce \
262 +strongswan-mod-pem \
263 +strongswan-mod-pgp \
264 +strongswan-mod-pkcs1 \
265 +strongswan-mod-pubkey \
266 +strongswan-mod-random \
267 +strongswan-mod-rc2 \
268 +strongswan-mod-resolve \
269 +strongswan-mod-revocation \
270 +strongswan-mod-sha1 \
271 +strongswan-mod-sha2 \
272 +strongswan-mod-socket-default \
273 +strongswan-mod-sshkey \
274 +strongswan-mod-updown \
275 +strongswan-mod-x509 \
276 +strongswan-mod-xauth-generic \
277 +strongswan-mod-xcbc \
281 define Package
/strongswan-default
/description
282 $(call Package
/strongswan
/description
/Default
)
283 This meta-package contains only dependencies to match upstream defaults.
287 define Package
/strongswan-isakmp
288 $(call Package
/strongswan
/Default
)
290 DEPENDS
:= strongswan \
293 +strongswan-mod-aes \
294 +strongswan-mod-des \
295 +strongswan-mod-gmpdh \
296 +strongswan-mod-hmac \
297 +strongswan-mod-kernel-netlink \
298 +strongswan-mod-md5 \
299 +strongswan-mod-nonce \
300 +strongswan-mod-pubkey \
301 +strongswan-mod-random \
302 +strongswan-mod-sha1 \
303 +strongswan-mod-socket-default \
304 +strongswan-mod-stroke \
305 +strongswan-mod-uci \
306 +strongswan-mod-updown
309 define Package
/strongswan-isakmp
/description
310 $(call Package
/strongswan
/description
/Default
)
311 This meta-package contains only dependencies to establish ISAKMP
/
312 IKE PSK connections
, dropping other capabilities in favor of small size
313 Can fit most routers even with
4Mb flash
(after removing IPv6 support
).
317 define Package
/strongswan-minimal
318 $(call Package
/strongswan
/Default
)
320 DEPENDS
:= strongswan \
322 +strongswan-mod-aes \
323 +strongswan-mod-gmp \
324 +strongswan-mod-hmac \
325 +strongswan-mod-kernel-netlink \
326 +strongswan-mod-nonce \
327 +strongswan-mod-pubkey \
328 +strongswan-mod-random \
329 +strongswan-mod-sha1 \
330 +strongswan-mod-socket-default \
331 +strongswan-mod-stroke \
332 +strongswan-mod-updown \
333 +strongswan-mod-x509 \
337 define Package
/strongswan-minimal
/description
338 $(call Package
/strongswan
/description
/Default
)
339 This meta-package contains only dependencies for a minimal IKEv2 setup.
342 define Package
/strongswan-charon
343 $(call Package
/strongswan
/Default
)
344 TITLE
+= IKEv1
/IKEv2 keying daemon
348 define Package
/strongswan-charon
/description
349 $(call Package
/strongswan
/description
/Default
)
350 This package contains charon
, an IKEv2 keying daemon.
353 define Package
/strongswan-charon-cmd
354 $(call Package
/strongswan
/Default
)
355 TITLE
+= charon-cmd utility
356 DEPENDS
:= strongswan
+strongswan-charon
359 define Package
/strongswan-charon-cmd
/description
360 $(call Package
/strongswan
/description
/Default
)
361 This package contains the charon-cmd utility.
364 define Package
/strongswan-ipsec
365 $(call Package
/strongswan
/Default
)
370 define Package
/strongswan-ipsec
/description
371 $(call Package
/strongswan
/description
/Default
)
372 This package contains the ipsec utility.
375 define Package
/strongswan-libnttfft
376 $(call Package
/strongswan
/Default
)
377 TITLE
+= nttfft library
381 define Package
/strongswan-libnttfft
/description
382 $(call Package
/strongswan
/description
/Default
)
383 This package contains the Number Theoretic Transforms library.
386 define Package
/strongswan-pki
387 $(call Package
/strongswan
/Default
)
392 define Package
/strongswan-pki
/description
393 $(call Package
/strongswan
/description
/Default
)
394 This package contains the pki tool.
397 define Package
/strongswan-scepclient
398 $(call Package
/strongswan
/Default
)
403 define Package
/strongswan-scepclient
/description
404 $(call Package
/strongswan
/description
/Default
)
405 This package contains the SCEP client.
408 define Package
/strongswan-swanctl
409 $(call Package
/strongswan
/Default
)
410 TITLE
+= swanctl utility
411 DEPENDS
:= strongswan
+strongswan-mod-vici
414 define Package
/strongswan-swanctl
/description
415 $(call Package
/strongswan
/description
/Default
)
416 This package contains the swanctl utility.
419 define Package
/strongswan-gencerts
420 $(call Package
/strongswan
/Default
)
421 TITLE
+= X
.509 certificate generation utility
422 DEPENDS
:= strongswan
+strongswan-pki bash
425 define Package
/strongswan-gencerts
/description
426 $(call Package
/strongswan
/description
/Default
)
427 This package contains the X
.509 certificate generation utility.
430 define Package
/strongswan-libtls
431 $(call Package
/strongswan
/Default
)
436 define Package
/strongswan-libtls
/description
437 $(call Package
/strongswan
/description
/Default
)
438 This package contains libtls for strongSwan plugins eap-tls
, eap-ttls
,
443 define Package
/strongswan-mod-
$(1)
444 $$(call Package
/strongswan
/Default
)
445 TITLE
:= StrongSwan
$(2) plugin
446 DEPENDS
:= strongswan
$(3)
449 define Package
/strongswan-mod-
$(1)/install
450 $(INSTALL_DIR
) $$(1)/etc
/strongswan.d
/charon
451 if
[ -f
$(PKG_INSTALL_DIR
)/etc
/strongswan.d
/charon
/$(1).conf
]; then \
452 $(INSTALL_DATA
) $(PKG_INSTALL_DIR
)/etc
/strongswan.d
/charon
/$(1).conf
$$(1)/etc
/strongswan.d
/charon
/; fi
453 $(INSTALL_DIR
) $$(1)/usr
/lib
/ipsec
/plugins
454 $(CP
) $(PKG_INSTALL_DIR
)/usr
/lib
/ipsec
/plugins
/libstrongswan-
$(1).so \
455 $$(1)/usr
/lib
/ipsec
/plugins
/
456 $(call Plugin
/$(1)/install,$$(1))
459 $$(eval
$$(call BuildPackage
,strongswan-mod-
$(1)))
467 --with-systemdsystemunitdir
=no \
468 $(if
$(CONFIG_PACKAGE_strongswan-charon-cmd
),--enable-cmd
,--disable-cmd
) \
469 $(if
$(CONFIG_PACKAGE_strongswan-pki
),--enable-pki
,--disable-pki
) \
470 $(if
$(CONFIG_PACKAGE_strongswan-scepclient
),--enable-scepclient
,--disable-scepclient
) \
471 --with-random-device
=/dev
/random \
472 --with-urandom-device
=/dev
/urandom \
473 --with-routing-table
="$(call qstrip,$(CONFIG_STRONGSWAN_ROUTING_TABLE))" \
474 --with-routing-table-prio
="$(call qstrip,$(CONFIG_STRONGSWAN_ROUTING_TABLE_PRIO))" \
475 $(foreach m
,$(PKG_MOD_AVAILABLE
), \
476 $(if
$(CONFIG_PACKAGE_strongswan-mod-
$(m
)),--enable-
$(m
),--disable-
$(m
)) \
478 ac_cv_search___atomic_load
=no
480 define Package
/strongswan
/conffiles
485 define Package
/strongswan
/install
486 $(INSTALL_DIR
) $(1)/etc
487 $(INSTALL_CONF
) $(PKG_INSTALL_DIR
)/etc
/strongswan.conf
$(1)/etc
/
488 echo
-e
"\ninclude /var/ipsec/strongswan.conf" >> $(1)/etc
/strongswan.conf
489 $(INSTALL_DIR
) $(1)/usr
/lib
/ipsec
490 $(CP
) $(PKG_INSTALL_DIR
)/usr
/lib
/ipsec
/libstrongswan.so.
* $(1)/usr
/lib
/ipsec
/
493 define Package
/strongswan-default
/install
497 define Package
/strongswan-full
/install
501 define Package
/strongswan-isakmp
/install
505 define Package
/strongswan-minimal
/install
509 define Package
/strongswan-charon
/install
510 $(INSTALL_DIR
) $(1)/etc
/strongswan.d
511 $(CP
) $(PKG_INSTALL_DIR
)/etc
/strongswan.d
/charon.conf
$(1)/etc
/strongswan.d
512 $(CP
) $(PKG_INSTALL_DIR
)/etc
/strongswan.d
/charon-logging.conf
$(1)/etc
/strongswan.d
513 $(INSTALL_DIR
) $(1)/usr
/lib
/ipsec
514 $(INSTALL_BIN
) $(PKG_INSTALL_DIR
)/usr
/lib
/ipsec
/charon
$(1)/usr
/lib
/ipsec
/
515 $(CP
) $(PKG_INSTALL_DIR
)/usr
/lib
/ipsec
/libcharon.so.
* $(1)/usr
/lib
/ipsec
/
518 define Package
/strongswan-charon-cmd
/install
519 $(INSTALL_DIR
) $(1)/usr
/sbin
520 $(INSTALL_BIN
) $(PKG_INSTALL_DIR
)/usr
/sbin
/charon-cmd
$(1)/usr
/sbin
/
523 define Package
/strongswan-ipsec
/conffiles
530 define Package
/strongswan-ipsec
/install
531 $(INSTALL_DIR
) $(1)/etc
/ $(1)/usr
/sbin
532 $(INSTALL_CONF
) $(PKG_INSTALL_DIR
)/etc
/ipsec.conf
$(1)/etc
/
533 echo
-e
"\ninclude /var/ipsec/ipsec.conf" >> $(1)/etc
/ipsec.conf
534 $(INSTALL_CONF
) .
/files
/ipsec.secrets
$(1)/etc
/
535 echo
-e
"\ninclude /var/ipsec/ipsec.secrets" >> $(1)/etc
/ipsec.secrets
536 $(INSTALL_CONF
) .
/files
/ipsec.user
$(1)/etc
/
537 $(INSTALL_DIR
) $(1)/etc
/init.d
538 $(INSTALL_BIN
) .
/files
/ipsec.init
$(1)/etc
/init.d
/ipsec
539 $(INSTALL_BIN
) $(PKG_INSTALL_DIR
)/usr
/sbin
/ipsec
$(1)/usr
/sbin
/
542 define Package
/strongswan-ipsec
/postinst
545 [ -z
"$${IPKG_INSTROOT}" ] || exit
0
547 opkg list-changed-conffiles | grep
-qx
/etc
/ipsec.conf ||
{
548 rm -f
/etc
/ipsec.conf-opkg
552 define Package
/strongswan-libnttfft
/install
553 $(INSTALL_DIR
) $(1)/usr
/lib
/ipsec
554 $(CP
) $(PKG_INSTALL_DIR
)/usr
/lib
/ipsec
/libnttfft.so.
* $(1)/usr
/lib
/ipsec
/
557 define Package
/strongswan-pki
/install
558 $(INSTALL_DIR
) $(1)/etc
/strongswan.d
559 $(CP
) $(PKG_INSTALL_DIR
)/etc
/strongswan.d
/pki.conf
$(1)/etc
/strongswan.d
/
560 $(INSTALL_DIR
) $(1)/usr
/bin
561 $(INSTALL_BIN
) $(PKG_INSTALL_DIR
)/usr
/bin
/pki
$(1)/usr
/bin
/
564 define Package
/strongswan-scepclient
/install
565 $(INSTALL_DIR
) $(1)/etc
/strongswan.d
566 $(CP
) $(PKG_INSTALL_DIR
)/etc
/strongswan.d
/scepclient.conf
$(1)/etc
/strongswan.d
/
567 $(INSTALL_DIR
) $(1)/usr
/lib
/ipsec
568 $(INSTALL_BIN
) $(PKG_INSTALL_DIR
)/usr
/lib
/ipsec
/scepclient
$(1)/usr
/lib
/ipsec
/
571 define Package
/strongswan-swanctl
/conffiles
576 define Package
/strongswan-swanctl
/install
577 $(INSTALL_DIR
) $(1)/etc
/init.d
578 $(INSTALL_DIR
) $(1)/etc
/swanctl
/{bliss
,conf.d
,ecdsa
,pkcs
{12,8},private
,pubkey
,rsa
}
579 $(INSTALL_DIR
) $(1)/etc
/swanctl
/x509
{,aa
,ac
,ca
,crl
,ocsp
}
580 $(CP
) $(PKG_INSTALL_DIR
)/etc
/swanctl
/swanctl.conf
$(1)/etc
/swanctl
/
581 echo
"include /var/swanctl/swanctl.conf" >> $(1)/etc
/swanctl
/swanctl.conf
582 $(INSTALL_DIR
) $(1)/usr
/sbin
583 $(INSTALL_BIN
) $(PKG_INSTALL_DIR
)/usr
/sbin
/swanctl
$(1)/usr
/sbin
/
584 $(INSTALL_BIN
) .
/files
/swanctl.init
$(1)/etc
/init.d
/swanctl
587 define Package
/strongswan-gencerts
/install
588 $(INSTALL_DIR
) $(1)/usr
/bin
589 $(INSTALL_BIN
) .
/files
/gencerts.sh
$(1)/usr
/bin
/gencerts
592 define Package
/strongswan-libtls
/install
593 $(INSTALL_DIR
) $(1)/usr
/lib
/ipsec
594 $(CP
) $(PKG_INSTALL_DIR
)/usr
/lib
/ipsec
/libtls.so.
* $(1)/usr
/lib
/ipsec
/
597 define Plugin
/duplicheck
/install
598 $(INSTALL_DIR
) $(1)/usr
/lib
/ipsec
/plugins
599 $(CP
) $(PKG_INSTALL_DIR
)/usr
/lib
/ipsec
/duplicheck
$(1)/usr
/lib
/ipsec
/
600 $(CP
) $(PKG_INSTALL_DIR
)/usr
/lib
/ipsec
/plugins
/libstrongswan-duplicheck.so
$(1)/usr
/lib
/ipsec
/plugins
/
603 define Plugin
/eap-radius
/install
604 $(INSTALL_DIR
) $(1)/usr
/lib
/ipsec
/plugins
605 $(CP
) $(PKG_INSTALL_DIR
)/usr
/lib
/ipsec
/libradius.so.
* $(1)/usr
/lib
/ipsec
/
606 $(CP
) $(PKG_INSTALL_DIR
)/usr
/lib
/ipsec
/plugins
/libstrongswan-eap-radius.so
$(1)/usr
/lib
/ipsec
/plugins
/
609 define Plugin
/attr-sql
/install
610 $(INSTALL_DIR
) $(1)/usr
/lib
/ipsec
611 $(CP
) $(PKG_INSTALL_DIR
)/usr
/lib
/ipsec
/pool
$(1)/usr
/lib
/ipsec
/
614 define Plugin
/stroke
/install
615 $(INSTALL_DIR
) $(1)/etc
/ipsec.d
/{aacerts
,acerts
,cacerts
,certs
,crls
,ocspcerts
,private
,reqs
}
617 $(INSTALL_DIR
) $(1)/usr
/lib
/ipsec
/plugins
618 $(INSTALL_BIN
) $(PKG_INSTALL_DIR
)/usr
/lib
/ipsec
/{starter
,stroke
} $(1)/usr
/lib
/ipsec
/
619 $(CP
) $(PKG_INSTALL_DIR
)/usr
/lib
/ipsec
/plugins
/libstrongswan-stroke.so
$(1)/usr
/lib
/ipsec
/plugins
/
622 define Plugin
/updown
/install
623 $(INSTALL_DIR
) $(1)/usr
/lib
/ipsec
/plugins
624 $(CP
) $(PKG_INSTALL_DIR
)/usr
/lib
/ipsec
/_updown
$(1)/usr
/lib
/ipsec
/
625 $(CP
) $(PKG_INSTALL_DIR
)/usr
/lib
/ipsec
/plugins
/libstrongswan-updown.so
$(1)/usr
/lib
/ipsec
/plugins
/
626 $(INSTALL_DIR
) $(1)/etc
/hotplug.d
/ipsec
627 $(CP
) .
/files
/etc
/hotplug.d
/ipsec
/01-user \
628 $(1)/etc
/hotplug.d
/ipsec
/01-user
631 define Plugin
/vici
/install
632 $(INSTALL_DIR
) $(1)/usr
/lib
/ipsec
/plugins
633 $(CP
) $(PKG_INSTALL_DIR
)/usr
/lib
/ipsec
/libvici.so.
* $(1)/usr
/lib
/ipsec
/
634 $(CP
) $(PKG_INSTALL_DIR
)/usr
/lib
/ipsec
/plugins
/libstrongswan-vici.so
$(1)/usr
/lib
/ipsec
/plugins
/
637 define Plugin
/whitelist
/install
638 $(INSTALL_DIR
) $(1)/usr
/lib
/ipsec
/plugins
639 $(CP
) $(PKG_INSTALL_DIR
)/usr
/lib
/ipsec
/whitelist
$(1)/usr
/lib
/ipsec
/
640 $(CP
) $(PKG_INSTALL_DIR
)/usr
/lib
/ipsec
/plugins
/libstrongswan-whitelist.so
$(1)/usr
/lib
/ipsec
/plugins
/
643 define Plugin
/kernel-libipsec
/install
644 $(INSTALL_DIR
) $(1)/usr
/lib
/ipsec
645 $(CP
) $(PKG_INSTALL_DIR
)/usr
/lib
/ipsec
/libipsec.so.
* $(1)/usr
/lib
/ipsec
/
648 $(eval
$(call BuildPackage
,strongswan
))
649 $(eval
$(call BuildPackage
,strongswan-default
))
650 $(eval
$(call BuildPackage
,strongswan-full
))
651 $(eval
$(call BuildPackage
,strongswan-minimal
))
652 $(eval
$(call BuildPackage
,strongswan-isakmp
))
653 $(eval
$(call BuildPackage
,strongswan-charon
))
654 $(eval
$(call BuildPackage
,strongswan-charon-cmd
))
655 $(eval
$(call BuildPackage
,strongswan-ipsec
))
656 $(eval
$(call BuildPackage
,strongswan-libnttfft
))
657 $(eval
$(call BuildPackage
,strongswan-pki
))
658 $(eval
$(call BuildPackage
,strongswan-scepclient
))
659 $(eval
$(call BuildPackage
,strongswan-swanctl
))
660 $(eval
$(call BuildPackage
,strongswan-gencerts
))
661 $(eval
$(call BuildPackage
,strongswan-libtls
))
662 $(eval
$(call BuildPlugin
,addrblock
,RFC
3779 address block constraint support
,))
663 $(eval
$(call BuildPlugin
,aes
,AES crypto
,))
664 $(eval
$(call BuildPlugin
,af-alg
,AF_ALG crypto interface to Linux Crypto API
,+kmod-crypto-user
))
665 $(eval
$(call BuildPlugin
,agent
,SSH agent signing
,))
666 $(eval
$(call BuildPlugin
,attr
,file based config
,))
667 $(eval
$(call BuildPlugin
,attr-sql
,SQL based config
,+strongswan-charon
))
668 $(eval
$(call BuildPlugin
,bliss
,BLISS crypto
,+strongswan-libnttfft
+strongswan-mod-mgf1
+strongswan-mod-hmac
))
669 $(eval
$(call BuildPlugin
,blowfish
,Blowfish crypto
,))
670 $(eval
$(call BuildPlugin
,ccm
,CCM AEAD wrapper crypto
,))
671 $(eval
$(call BuildPlugin
,chapoly
,ChaCha20-Poly1305 AEAD crypto
,))
672 $(eval
$(call BuildPlugin
,cmac
,CMAC crypto
,))
673 $(eval
$(call BuildPlugin
,connmark
,netfilter connection marking
,+iptables-legacy
))
674 $(eval
$(call BuildPlugin
,constraints
,advanced X509 constraint checking
,))
675 $(eval
$(call BuildPlugin
,coupling
,IKEv2 plugin to couple peer certificates permanently to authentication
,))
676 $(eval
$(call BuildPlugin
,ctr
,Counter Mode wrapper crypto
,))
677 $(eval
$(call BuildPlugin
,curl
,cURL fetcher plugin
,+PACKAGE_strongswan-mod-curl
:libcurl
))
678 $(eval
$(call BuildPlugin
,curve25519
,Curve25519 Diffie-Hellman
,))
679 $(eval
$(call BuildPlugin
,des
,DES crypto
,))
680 $(eval
$(call BuildPlugin
,dhcp
,DHCP based attribute provider
,))
681 $(eval
$(call BuildPlugin
,dnskey
,DNS RR key decoding
,))
682 $(eval
$(call BuildPlugin
,duplicheck
,advanced duplicate checking
,))
683 $(eval
$(call BuildPlugin
,eap-identity
,EAP identity helper
,))
684 $(eval
$(call BuildPlugin
,eap-md5
,EAP MD5
(CHAP
) EAP auth
,))
685 $(eval
$(call BuildPlugin
,eap-mschapv2
,EAP MS-CHAPv2 EAP auth
,+strongswan-mod-md4
+strongswan-mod-des
))
686 $(eval
$(call BuildPlugin
,eap-radius
,EAP RADIUS auth
,))
687 $(eval
$(call BuildPlugin
,eap-tls
,EAP TLS auth
,+strongswan-libtls
))
688 $(eval
$(call BuildPlugin
,farp
,fake arp respsonses
,))
689 $(eval
$(call BuildPlugin
,fips-prf
,FIPS PRF crypto
,+strongswan-mod-sha1
))
690 $(eval
$(call BuildPlugin
,forecast
,forward multi
/broadcast traffic
,+iptables-legacy
+kmod-ipt-conntrack-extra
))
691 $(eval
$(call BuildPlugin
,gcm
,GCM AEAD wrapper crypto
,))
692 $(eval
$(call BuildPlugin
,gcrypt
,libgcrypt
,+PACKAGE_strongswan-mod-gcrypt
:libgcrypt
))
693 $(eval
$(call BuildPlugin
,gmp
,libgmp
,+PACKAGE_strongswan-mod-gmp
:libgmp
))
694 $(eval
$(call BuildPlugin
,gmpdh
,DH-Groups
; no libgmp dep
,))
695 $(eval
$(call BuildPlugin
,ha
,high availability cluster
,))
696 $(eval
$(call BuildPlugin
,hmac
,HMAC crypto
,))
697 $(eval
$(call BuildPlugin
,kernel-libipsec
,libipsec kernel interface
,))
698 $(eval
$(call BuildPlugin
,kernel-netlink
,netlink kernel interface
,))
699 $(eval
$(call BuildPlugin
,ldap
,LDAP
,+PACKAGE_strongswan-mod-ldap
:libopenldap
))
700 $(eval
$(call BuildPlugin
,led
,LED blink on IKE activity
,))
701 $(eval
$(call BuildPlugin
,load-tester
,load testing
,))
702 $(eval
$(call BuildPlugin
,nonce
,nonce genereation
,))
703 $(eval
$(call BuildPlugin
,md4
,MD4 crypto
,))
704 $(eval
$(call BuildPlugin
,md5
,MD5 crypto
,))
705 $(eval
$(call BuildPlugin
,mgf1
,MGF1 crypto
,))
706 $(eval
$(call BuildPlugin
,mysql
,MySQL database interface
,+strongswan-mod-sql
+PACKAGE_strongswan-mod-mysql
:libmysqlclient-r
))
707 $(eval
$(call BuildPlugin
,newhope
,New Hope crypto
,+strongswan-libnttfft
+strongswan-mod-chapoly
+strongswan-mod-sha3
))
708 $(eval
$(call BuildPlugin
,ntru
,NTRU crypto
,+strongswan-mod-mgf1
))
709 $(eval
$(call BuildPlugin
,openssl
,OpenSSL crypto
,+PACKAGE_strongswan-mod-openssl
:libopenssl
))
710 $(eval
$(call BuildPlugin
,pem
,PEM decoding
,))
711 $(eval
$(call BuildPlugin
,pgp
,PGP key decoding
,))
712 $(eval
$(call BuildPlugin
,pkcs1
,PKCS1 key decoding
,))
713 $(eval
$(call BuildPlugin
,pkcs7
,PKCS7 key decoding
,))
714 $(eval
$(call BuildPlugin
,pkcs8
,PKCS8 key decoding
,))
715 $(eval
$(call BuildPlugin
,pkcs11
,PKCS11 key decoding
,))
716 $(eval
$(call BuildPlugin
,pkcs12
,PKCS12 key decoding
,))
717 $(eval
$(call BuildPlugin
,pubkey
,raw public key
,))
718 $(eval
$(call BuildPlugin
,random
,RNG
,))
719 $(eval
$(call BuildPlugin
,rc2
,RC2 crypto
,))
720 $(eval
$(call BuildPlugin
,resolve
,DNS resolver
,))
721 $(eval
$(call BuildPlugin
,revocation
,X509 CRL
/OCSP revocation
,))
722 $(eval
$(call BuildPlugin
,sha1
,SHA1 crypto
,))
723 $(eval
$(call BuildPlugin
,sha2
,SHA2 crypto
,))
724 $(eval
$(call BuildPlugin
,sha3
,SHA3 and SHAKE crypto
,))
725 $(eval
$(call BuildPlugin
,smp
,SMP configuration and control interface
,+PACKAGE_strongswan-mod-smp
:libxml2
))
726 $(eval
$(call BuildPlugin
,socket-default
,default socket implementation for charon
,))
727 $(eval
$(call BuildPlugin
,socket-dynamic
,dynamic socket implementation for charon
,))
728 $(eval
$(call BuildPlugin
,sql
,SQL database interface
,))
729 $(eval
$(call BuildPlugin
,sqlite
,SQLite database interface
,+strongswan-mod-sql
+PACKAGE_strongswan-mod-sqlite
:libsqlite3
))
730 $(eval
$(call BuildPlugin
,sshkey
,SSH key decoding
,))
731 $(eval
$(call BuildPlugin
,stroke
,Stroke
,+strongswan-charon
+strongswan-ipsec
))
732 $(eval
$(call BuildPlugin
,test-vectors
,crypto
test vectors
,))
733 $(eval
$(call BuildPlugin
,uci
,UCI config interface
,+PACKAGE_strongswan-mod-uci
:libuci
))
734 $(eval
$(call BuildPlugin
,unity
,Cisco Unity extension
,))
735 $(eval
$(call BuildPlugin
,updown
,updown firewall
,+iptables-legacy
+iptables-mod-ipsec
+kmod-ipt-ipsec
))
736 $(eval
$(call BuildPlugin
,vici
,Versatile IKE Configuration Interface
,))
737 $(eval
$(call BuildPlugin
,whitelist
,peer identity whitelisting
,))
738 $(eval
$(call BuildPlugin
,x509
,x509 certificate
,))
739 $(eval
$(call BuildPlugin
,xauth-eap
,EAP XAuth backend
,))
740 $(eval
$(call BuildPlugin
,xauth-generic
,generic XAuth backend
,))
741 $(eval
$(call BuildPlugin
,xcbc
,xcbc crypto
,))