net/strongswan/Makefile

   1 #
   2 # Copyright (C) 2012-2015 OpenWrt.org
   3 #
   4 # This is free software, licensed under the GNU General Public License v2.
   5 # See /LICENSE for more information.
   6 #
   7
   8 include $(TOPDIR)/rules.mk
   9
  10 PKG_NAME:=strongswan
  11 PKG_VERSION:=5.5.3
  12 PKG_RELEASE:=1
  13
  14 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2
  15 PKG_HASH:=c5ea54b199174708de11af9b8f4ecf28b5b0743d4bc0e380e741f25b28c0f8d4
  16 PKG_SOURCE_URL:=http://download.strongswan.org/ http://download2.strongswan.org/
  17 PKG_LICENSE:=GPL-2.0+
  18 PKG_MAINTAINER:=Stijn Tintel <stijn@linux-ipv6.be>
  19
  20 PKG_MOD_AVAILABLE:= \
  21         addrblock \
  22         aes \
  23         af-alg \
  24         agent \
  25         attr \
  26         attr-sql \
  27         blowfish \
  28         ccm \
  29         cmac \
  30         constraints \
  31         connmark \
  32         coupling \
  33         ctr \
  34         curl \
  35         curve25519 \
  36         des \
  37         dhcp \
  38         dnskey \
  39         duplicheck \
  40         eap-identity \
  41         eap-md5 \
  42         eap-mschapv2 \
  43         eap-radius \
  44         eap-tls \
  45         farp \
  46         fips-prf \
  47         forecast \
  48         gcm \
  49         gcrypt \
  50         gmp \
  51         gmpdh \
  52         ha \
  53         hmac \
  54         kernel-libipsec \
  55         kernel-netlink \
  56         ldap \
  57         led \
  58         load-tester \
  59         nonce \
  60         md4 \
  61         md5 \
  62         mysql \
  63         openssl \
  64         pem \
  65         pgp \
  66         pkcs1 \
  67         pkcs7 \
  68         pkcs8 \
  69         pkcs11 \
  70         pkcs12 \
  71         pubkey \
  72         random \
  73         rc2 \
  74         resolve \
  75         revocation \
  76         sha1 \
  77         sha2 \
  78         smp \
  79         socket-default \
  80         socket-dynamic \
  81         sql \
  82         sqlite \
  83         sshkey \
  84         stroke \
  85         test-vectors \
  86         unity \
  87         uci \
  88         updown \
  89         whitelist \
  90         x509 \
  91         xauth-eap \
  92         xauth-generic \
  93         xcbc
  94
  95 PKG_CONFIG_DEPENDS:= \
  96         CONFIG_STRONGSWAN_ROUTING_TABLE \
  97         CONFIG_STRONGSWAN_ROUTING_TABLE_PRIO \
  98         $(patsubst %,CONFIG_PACKAGE_strongswan-mod-%,$(PKG_MOD_AVAILABLE)) \
  99
 100 PKG_FIXUP:=autoreconf
 101 PKG_INSTALL:=1
 102 PKG_BUILD_PARALLEL:=1
 103
 104 include $(INCLUDE_DIR)/package.mk
 105
 106 define Package/strongswan/Default
 107   SUBMENU:=VPN
 108   SECTION:=net
 109   CATEGORY:=Network
 110   TITLE:=StrongSwan
 111   URL:=http://www.strongswan.org/
 112 endef
 113
 114 define Package/strongswan/description/Default
 115  StrongSwan is an OpenSource IPsec implementation for the Linux operating system.
 116 endef
 117
 118 define Package/strongswan
 119 $(call Package/strongswan/Default)
 120   DEPENDS:= +libpthread +ip \
 121         +kmod-crypto-authenc \
 122         +kmod-ipsec +kmod-ipsec4 +IPV6:kmod-ipsec6 \
 123         +kmod-ipt-ipsec +iptables-mod-ipsec
 124 endef
 125
 126 define Package/strongswan/config
 127   source "$(SOURCE)/Config.in"
 128 endef
 129
 130 define Package/strongswan/description
 131 $(call Package/strongswan/description/Default)
 132  This package contains shared libraries and scripts.
 133 endef
 134
 135 define Package/strongswan-full
 136 $(call Package/strongswan/Default)
 137   TITLE+= (full)
 138   DEPENDS:= +strongswan \
 139         +strongswan-charon \
 140         +strongswan-mod-addrblock \
 141         +strongswan-mod-aes \
 142         +strongswan-mod-af-alg \
 143         +strongswan-mod-agent \
 144         +strongswan-mod-attr \
 145         +strongswan-mod-attr-sql \
 146         +strongswan-mod-blowfish \
 147         +strongswan-mod-ccm \
 148         +strongswan-mod-cmac \
 149         +strongswan-mod-constraints \
 150         +strongswan-mod-connmark \
 151         +strongswan-mod-coupling \
 152         +strongswan-mod-ctr \
 153         +strongswan-mod-curl \
 154         +strongswan-mod-curve25519 \
 155         +strongswan-mod-des \
 156         +strongswan-mod-dhcp \
 157         +strongswan-mod-dnskey \
 158         +strongswan-mod-duplicheck \
 159         +strongswan-mod-eap-identity \
 160         +strongswan-mod-eap-md5 \
 161         +strongswan-mod-eap-mschapv2 \
 162         +strongswan-mod-eap-radius \
 163         +strongswan-mod-eap-tls \
 164         +strongswan-mod-farp \
 165         +strongswan-mod-fips-prf \
 166         +strongswan-mod-forecast \
 167         +strongswan-mod-gcm \
 168         +strongswan-mod-gcrypt \
 169         +strongswan-mod-gmp \
 170         +strongswan-mod-ha \
 171         +strongswan-mod-hmac \
 172         +strongswan-mod-kernel-netlink \
 173         +strongswan-mod-ldap \
 174         +strongswan-mod-led \
 175         +strongswan-mod-load-tester \
 176         +strongswan-mod-nonce \
 177         +strongswan-mod-md4 \
 178         +strongswan-mod-md5 \
 179         +strongswan-mod-mysql \
 180         +strongswan-mod-openssl \
 181         +strongswan-mod-pem \
 182         +strongswan-mod-pgp \
 183         +strongswan-mod-pkcs1 \
 184         +strongswan-mod-pkcs7 \
 185         +strongswan-mod-pkcs8 \
 186         +strongswan-mod-pkcs11 \
 187         +strongswan-mod-pkcs12 \
 188         +strongswan-mod-pubkey \
 189         +strongswan-mod-random \
 190         +strongswan-mod-rc2 \
 191         +strongswan-mod-resolve \
 192         +strongswan-mod-revocation \
 193         +strongswan-mod-sha1 \
 194         +strongswan-mod-sha2 \
 195         +strongswan-mod-smp \
 196         +strongswan-mod-socket-default \
 197         +strongswan-mod-sql \
 198         +strongswan-mod-sqlite \
 199         +strongswan-mod-sshkey \
 200         +strongswan-mod-stroke \
 201         +strongswan-mod-test-vectors \
 202         +strongswan-mod-uci \
 203         +strongswan-mod-unity \
 204         +strongswan-mod-updown \
 205         +strongswan-mod-whitelist \
 206         +strongswan-mod-x509 \
 207         +strongswan-mod-xauth-eap \
 208         +strongswan-mod-xauth-generic \
 209         +strongswan-mod-xcbc \
 210         +strongswan-utils \
 211         @DEVEL
 212 endef
 213
 214 define Package/strongswan-full/description
 215 $(call Package/strongswan/description/Default)
 216  This meta-package contains dependencies for all of the strongswan plugins
 217  except kernel-libipsec,
 218  socket-dynamic and which are omitted in favor of the kernel-netlink and
 219  socket-default plugins.
 220 endef
 221
 222
 223 define Package/strongswan-default
 224 $(call Package/strongswan/Default)
 225   TITLE+= (default)
 226   DEPENDS:= +strongswan \
 227         +strongswan-charon \
 228         +strongswan-mod-aes \
 229         +strongswan-mod-attr \
 230         +strongswan-mod-connmark \
 231         +strongswan-mod-constraints \
 232         +strongswan-mod-des \
 233         +strongswan-mod-dnskey \
 234         +strongswan-mod-fips-prf \
 235         +strongswan-mod-gmp \
 236         +strongswan-mod-hmac \
 237         +strongswan-mod-kernel-netlink \
 238         +strongswan-mod-md5 \
 239         +strongswan-mod-nonce \
 240         +strongswan-mod-pem \
 241         +strongswan-mod-pgp \
 242         +strongswan-mod-pkcs1 \
 243         +strongswan-mod-pubkey \
 244         +strongswan-mod-random \
 245         +strongswan-mod-rc2 \
 246         +strongswan-mod-resolve \
 247         +strongswan-mod-revocation \
 248         +strongswan-mod-sha1 \
 249         +strongswan-mod-sha2 \
 250         +strongswan-mod-socket-default \
 251         +strongswan-mod-sshkey \
 252         +strongswan-mod-stroke \
 253         +strongswan-mod-updown \
 254         +strongswan-mod-x509 \
 255         +strongswan-mod-xauth-generic \
 256         +strongswan-mod-xcbc \
 257         +strongswan-utils
 258 endef
 259
 260 define Package/strongswan-default/description
 261 $(call Package/strongswan/description/Default)
 262  This meta-package contains only dependencies to match upstream defaults.
 263 endef
 264
 265
 266 define Package/strongswan-isakmp
 267 $(call Package/strongswan/Default)
 268   TITLE+= (isakmp)
 269   DEPENDS:= +strongswan \
 270         +strongswan-charon \
 271         +strongswan-mod-aes \
 272         +strongswan-mod-des \
 273         +strongswan-mod-gmpdh \
 274         +strongswan-mod-hmac \
 275         +strongswan-mod-kernel-netlink \
 276         +strongswan-mod-md5 \
 277         +strongswan-mod-nonce \
 278         +strongswan-mod-pubkey \
 279         +strongswan-mod-random \
 280         +strongswan-mod-sha1 \
 281         +strongswan-mod-socket-default \
 282         +strongswan-mod-stroke \
 283         +strongswan-mod-uci \
 284         +strongswan-mod-updown \
 285         +strongswan-utils
 286 endef
 287
 288 define Package/strongswan-isakmp/description
 289 $(call Package/strongswan/description/Default)
 290  This meta-package contains only dependencies to establish  ISAKMP /
 291  IKE PSK connections, dropping other capabilities in favor of small size
 292  Can fit most routers even with 4Mb flash (after removing IPv6 support).
 293 endef
 294
 295
 296 define Package/strongswan-minimal
 297 $(call Package/strongswan/Default)
 298   TITLE+= (minimal)
 299   DEPENDS:= +strongswan \
 300         +strongswan-charon \
 301         +strongswan-mod-aes \
 302         +strongswan-mod-gmp \
 303         +strongswan-mod-hmac \
 304         +strongswan-mod-kernel-netlink \
 305         +strongswan-mod-nonce \
 306         +strongswan-mod-pubkey \
 307         +strongswan-mod-random \
 308         +strongswan-mod-sha1 \
 309         +strongswan-mod-socket-default \
 310         +strongswan-mod-stroke \
 311         +strongswan-mod-updown \
 312         +strongswan-mod-x509 \
 313         +strongswan-mod-xcbc
 314 endef
 315
 316 define Package/strongswan-minimal/description
 317 $(call Package/strongswan/description/Default)
 318  This meta-package contains only dependencies for a minimal IKEv2 setup.
 319 endef
 320
 321 define Package/strongswan-charon
 322 $(call Package/strongswan/Default)
 323   TITLE+= IKEv1/IKEv2 keying daemon
 324   DEPENDS:= +strongswan
 325 endef
 326
 327 define Package/strongswan-charon/description
 328 $(call Package/strongswan/description/Default)
 329  This package contains charon, an IKEv2 keying daemon.
 330 endef
 331
 332 define Package/strongswan-utils
 333 $(call Package/strongswan/Default)
 334   TITLE+= utilities
 335   DEPENDS:= +strongswan
 336 endef
 337
 338 define Package/strongswan-utils/description
 339 $(call Package/strongswan/description/Default)
 340  This package contains the pki & scepclient utilities.
 341 endef
 342
 343 define Package/strongswan-libtls
 344 $(call Package/strongswan/Default)
 345   TITLE+= libtls
 346   DEPENDS:= +strongswan
 347 endef
 348
 349 define Package/strongswan-libtls/description
 350 $(call Package/strongswan/description/Default)
 351  This package contains libtls for strongSwan plugins eap-tls, eap-ttls,
 352  eap-peap, tnc-tnccs
 353 endef
 354
 355 define BuildPlugin
 356   define Package/strongswan-mod-$(1)
 357     $$(call Package/strongswan/Default)
 358     TITLE:= StrongSwan $(2) plugin
 359     DEPENDS:= +strongswan $(3)
 360   endef
 361
 362   define Package/strongswan-mod-$(1)/install
 363         $(INSTALL_DIR) $$(1)/etc/strongswan.d/charon
 364         if [ -f $(PKG_INSTALL_DIR)/etc/strongswan.d/charon/$(1).conf ]; then \
 365                 $(INSTALL_DATA) $(PKG_INSTALL_DIR)/etc/strongswan.d/charon/$(1).conf $$(1)/etc/strongswan.d/charon/; fi
 366         $(INSTALL_DIR) $$(1)/usr/lib/ipsec/plugins
 367         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-$(1).so \
 368                 $$(1)/usr/lib/ipsec/plugins/
 369         $(call Plugin/$(1)/install,$$(1))
 370   endef
 371
 372   $$(eval $$(call BuildPackage,strongswan-mod-$(1)))
 373 endef
 374
 375 CONFIGURE_ARGS+= \
 376         --disable-scripts \
 377         --disable-static \
 378         --disable-fast \
 379         --enable-mediation \
 380         --with-systemdsystemunitdir=no \
 381         $(if $(CONFIG_PACKAGE_strongswan-utils),--enable-pki --enable-scepclient,--disable-pki --disable-scepclient) \
 382         --with-random-device=/dev/random \
 383         --with-urandom-device=/dev/urandom \
 384         --with-routing-table="$(call qstrip,$(CONFIG_STRONGSWAN_ROUTING_TABLE))" \
 385         --with-routing-table-prio="$(call qstrip,$(CONFIG_STRONGSWAN_ROUTING_TABLE_PRIO))" \
 386         $(foreach m,$(PKG_MOD_AVAILABLE), \
 387           $(if $(CONFIG_PACKAGE_strongswan-mod-$(m)),--enable-$(m),--disable-$(m)) \
 388         ) \
 389         ac_cv_search___atomic_load=no
 390
 391 EXTRA_LDFLAGS+= -Wl,-rpath-link,$(STAGING_DIR)/usr/lib
 392
 393 define Package/strongswan/conffiles
 394 /etc/ipsec.d/
 395 /etc/ipsec.conf
 396 /etc/ipsec.secrets
 397 /etc/ipsec.user
 398 /etc/strongswan.conf
 399 /etc/strongswan.d/
 400 endef
 401
 402 define Package/strongswan/install
 403         $(INSTALL_DIR) $(1)/etc
 404         $(INSTALL_CONF) $(PKG_INSTALL_DIR)/etc/ipsec.conf $(1)/etc/
 405         $(INSTALL_CONF) $(PKG_INSTALL_DIR)/etc/strongswan.conf $(1)/etc/
 406         $(INSTALL_DIR) $(1)/usr/lib/ipsec
 407         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libstrongswan.so.* $(1)/usr/lib/ipsec/
 408         $(INSTALL_CONF) ./files/ipsec.secrets $(1)/etc/
 409         $(INSTALL_CONF) ./files/ipsec.user $(1)/etc/
 410         $(INSTALL_DIR) $(1)/etc/init.d
 411         $(INSTALL_BIN) ./files/ipsec.init $(1)/etc/init.d/ipsec
 412 endef
 413
 414 define Package/strongswan-default/install
 415         true
 416 endef
 417
 418 define Package/strongswan-full/install
 419         true
 420 endef
 421
 422 define Package/strongswan-isakmp/install
 423         true
 424 endef
 425
 426 define Package/strongswan-minimal/install
 427         true
 428 endef
 429
 430 define Package/strongswan-charon/install
 431         $(INSTALL_DIR) $(1)/usr/lib/ipsec
 432         $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/lib/ipsec/charon $(1)/usr/lib/ipsec/
 433         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libcharon.so.* $(1)/usr/lib/ipsec/
 434 endef
 435
 436 define Package/strongswan-utils/install
 437         $(INSTALL_DIR) $(1)/usr/sbin
 438         $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/sbin/ipsec $(1)/usr/sbin/
 439         $(INSTALL_DIR) $(1)/usr/bin
 440         $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/pki $(1)/usr/bin/
 441         $(INSTALL_DIR) $(1)/usr/lib/ipsec
 442         $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/lib/ipsec/scepclient $(1)/usr/lib/ipsec/
 443 endef
 444
 445 define Package/strongswan-libtls/install
 446         $(INSTALL_DIR) $(1)/usr/lib/ipsec
 447         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libtls.so.* $(1)/usr/lib/ipsec/
 448 endef
 449
 450 define Plugin/duplicheck/install
 451         $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
 452         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/duplicheck $(1)/usr/lib/ipsec/
 453         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-duplicheck.so $(1)/usr/lib/ipsec/plugins/
 454 endef
 455
 456 define Plugin/eap-radius/install
 457         $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
 458         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libradius.so.* $(1)/usr/lib/ipsec/
 459         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-eap-radius.so $(1)/usr/lib/ipsec/plugins/
 460 endef
 461
 462 define Plugin/attr-sql/install
 463         $(INSTALL_DIR) $(1)/usr/lib/ipsec
 464         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/pool $(1)/usr/lib/ipsec/
 465 endef
 466
 467 define Plugin/stroke/install
 468         $(INSTALL_DIR) $(1)/etc/ipsec.d/aacerts
 469         $(INSTALL_DIR) $(1)/etc/ipsec.d/acerts
 470         $(INSTALL_DIR) $(1)/etc/ipsec.d/cacerts
 471         $(INSTALL_DIR) $(1)/etc/ipsec.d/certs
 472         $(INSTALL_DIR) $(1)/etc/ipsec.d/crls
 473         $(INSTALL_DIR) $(1)/etc/ipsec.d/ocspcerts
 474         $(INSTALL_DIR) $(1)/etc/ipsec.d/private
 475         $(INSTALL_DIR) $(1)/etc/ipsec.d/reqs
 476
 477         $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
 478         $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/lib/ipsec/{starter,stroke} $(1)/usr/lib/ipsec/
 479         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-stroke.so $(1)/usr/lib/ipsec/plugins/
 480 endef
 481
 482 define Plugin/updown/install
 483         $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
 484         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/_updown $(1)/usr/lib/ipsec/
 485         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-updown.so $(1)/usr/lib/ipsec/plugins/
 486         $(INSTALL_DIR) $(1)/etc
 487 endef
 488
 489 define Plugin/whitelist/install
 490         $(INSTALL_DIR) $(1)/usr/lib/ipsec/plugins
 491         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/whitelist $(1)/usr/lib/ipsec/
 492         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/plugins/libstrongswan-whitelist.so $(1)/usr/lib/ipsec/plugins/
 493 endef
 494
 495 define Plugin/kernel-libipsec/install
 496         $(INSTALL_DIR) $(1)/usr/lib/ipsec
 497         $(CP) $(PKG_INSTALL_DIR)/usr/lib/ipsec/libipsec.so.* $(1)/usr/lib/ipsec/
 498 endef
 499
 500 $(eval $(call BuildPackage,strongswan))
 501 $(eval $(call BuildPackage,strongswan-default))
 502 $(eval $(call BuildPackage,strongswan-full))
 503 $(eval $(call BuildPackage,strongswan-minimal))
 504 $(eval $(call BuildPackage,strongswan-isakmp))
 505 $(eval $(call BuildPackage,strongswan-charon))
 506 $(eval $(call BuildPackage,strongswan-utils))
 507 $(eval $(call BuildPackage,strongswan-libtls))
 508 $(eval $(call BuildPlugin,addrblock,RFC 3779 address block constraint support,))
 509 $(eval $(call BuildPlugin,aes,AES crypto,))
 510 $(eval $(call BuildPlugin,af-alg,AF_ALG crypto interface to Linux Crypto API,+kmod-crypto-user))
 511 $(eval $(call BuildPlugin,agent,SSH agent signing,))
 512 $(eval $(call BuildPlugin,attr,file based config,))
 513 $(eval $(call BuildPlugin,attr-sql,SQL based config,+strongswan-charon))
 514 $(eval $(call BuildPlugin,blowfish,Blowfish crypto,))
 515 $(eval $(call BuildPlugin,ccm,CCM AEAD wrapper crypto,))
 516 $(eval $(call BuildPlugin,cmac,CMAC crypto,))
 517 $(eval $(call BuildPlugin,connmark,netfilter connection marking,))
 518 $(eval $(call BuildPlugin,constraints,advanced X509 constraint checking,))
 519 $(eval $(call BuildPlugin,coupling,IKEv2 plugin to couple peer certificates permanently to authentication,))
 520 $(eval $(call BuildPlugin,ctr,Counter Mode wrapper crypto,))
 521 $(eval $(call BuildPlugin,curl,cURL fetcher plugin,+PACKAGE_strongswan-mod-curl:libcurl))
 522 $(eval $(call BuildPlugin,curve25519,Curve25519 Diffie-Hellman,))
 523 $(eval $(call BuildPlugin,des,DES crypto,))
 524 $(eval $(call BuildPlugin,dhcp,DHCP based attribute provider,))
 525 $(eval $(call BuildPlugin,dnskey,DNS RR key decoding,))
 526 $(eval $(call BuildPlugin,duplicheck,advanced duplicate checking,))
 527 $(eval $(call BuildPlugin,eap-identity,EAP identity helper,))
 528 $(eval $(call BuildPlugin,eap-md5,EAP MD5 (CHAP) EAP auth,))
 529 $(eval $(call BuildPlugin,eap-mschapv2,EAP MS-CHAPv2 EAP auth,+strongswan-mod-md4 +strongswan-mod-des))
 530 $(eval $(call BuildPlugin,eap-radius,EAP RADIUS auth,))
 531 $(eval $(call BuildPlugin,eap-tls,EAP TLS auth,+strongswan-libtls))
 532 $(eval $(call BuildPlugin,farp,fake arp respsonses,))
 533 $(eval $(call BuildPlugin,fips-prf,FIPS PRF crypto,+strongswan-mod-sha1))
 534 $(eval $(call BuildPlugin,forecast,forward multi/broadcast traffic,+kmod-ipt-conntrack-extra))
 535 $(eval $(call BuildPlugin,gcm,GCM AEAD wrapper crypto,))
 536 $(eval $(call BuildPlugin,gcrypt,libgcrypt,+PACKAGE_strongswan-mod-gcrypt:libgcrypt))
 537 $(eval $(call BuildPlugin,gmp,libgmp,+PACKAGE_strongswan-mod-gmp:libgmp))
 538 $(eval $(call BuildPlugin,gmpdh,DH-Groups; no libgmp dep,))
 539 $(eval $(call BuildPlugin,ha,high availability cluster,))
 540 $(eval $(call BuildPlugin,hmac,HMAC crypto,))
 541 $(eval $(call BuildPlugin,kernel-libipsec,libipsec kernel interface,))
 542 $(eval $(call BuildPlugin,kernel-netlink,netlink kernel interface,))
 543 $(eval $(call BuildPlugin,ldap,LDAP,+PACKAGE_strongswan-mod-ldap:libopenldap))
 544 $(eval $(call BuildPlugin,led,LED blink on IKE activity,))
 545 $(eval $(call BuildPlugin,load-tester,load testing,))
 546 $(eval $(call BuildPlugin,nonce,nonce genereation,))
 547 $(eval $(call BuildPlugin,md4,MD4 crypto,))
 548 $(eval $(call BuildPlugin,md5,MD5 crypto,))
 549 $(eval $(call BuildPlugin,mysql,MySQL database interface,+strongswan-mod-sql +PACKAGE_strongswan-mod-mysql:libmysqlclient-r))
 550 $(eval $(call BuildPlugin,openssl,OpenSSL crypto,+PACKAGE_strongswan-mod-openssl:libopenssl))
 551 $(eval $(call BuildPlugin,pem,PEM decoding,))
 552 $(eval $(call BuildPlugin,pgp,PGP key decoding,))
 553 $(eval $(call BuildPlugin,pkcs1,PKCS1 key decoding,))
 554 $(eval $(call BuildPlugin,pkcs7,PKCS7 key decoding,))
 555 $(eval $(call BuildPlugin,pkcs8,PKCS8 key decoding,))
 556 $(eval $(call BuildPlugin,pkcs11,PKCS11 key decoding,))
 557 $(eval $(call BuildPlugin,pkcs12,PKCS12 key decoding,))
 558 $(eval $(call BuildPlugin,pubkey,raw public key,))
 559 $(eval $(call BuildPlugin,random,RNG,))
 560 $(eval $(call BuildPlugin,rc2,RC2 crypto,))
 561 $(eval $(call BuildPlugin,resolve,DNS resolver,))
 562 $(eval $(call BuildPlugin,revocation,X509 CRL/OCSP revocation,))
 563 $(eval $(call BuildPlugin,sha1,SHA1 crypto,))
 564 $(eval $(call BuildPlugin,sha2,SHA2 crypto,))
 565 $(eval $(call BuildPlugin,smp,SMP configuration and control interface,+PACKAGE_strongswan-mod-smp:libxml2))
 566 $(eval $(call BuildPlugin,socket-default,default socket implementation for charon,))
 567 $(eval $(call BuildPlugin,socket-dynamic,dynamic socket implementation for charon,))
 568 $(eval $(call BuildPlugin,sql,SQL database interface,))
 569 $(eval $(call BuildPlugin,sqlite,SQLite database interface,+strongswan-mod-sql +PACKAGE_strongswan-mod-sqlite:libsqlite3))
 570 $(eval $(call BuildPlugin,sshkey,SSH key decoding,))
 571 $(eval $(call BuildPlugin,stroke,Stroke,+strongswan-charon +strongswan-utils))
 572 $(eval $(call BuildPlugin,test-vectors,crypto test vectors,))
 573 $(eval $(call BuildPlugin,uci,UCI config interface,+PACKAGE_strongswan-mod-uci:libuci))
 574 $(eval $(call BuildPlugin,unity,Cisco Unity extension,))
 575 $(eval $(call BuildPlugin,updown,updown firewall,))
 576 $(eval $(call BuildPlugin,whitelist,peer identity whitelisting,))
 577 $(eval $(call BuildPlugin,x509,x509 certificate,))
 578 $(eval $(call BuildPlugin,xauth-eap,EAP XAuth backend,))
 579 $(eval $(call BuildPlugin,xauth-generic,generic XAuth backend,))
 580 $(eval $(call BuildPlugin,xcbc,xcbc crypto,))