initial buildroot for linux 5.15
This commit is contained in:
Huan.Feng
@@ -0,0 +1,213 @@
|
||||
comment "strongswan needs a toolchain w/ threads, dynamic library"
|
||||
depends on BR2_USE_MMU
|
||||
depends on BR2_TOOLCHAIN_HAS_ATOMIC
|
||||
depends on !BR2_TOOLCHAIN_HAS_THREADS || BR2_STATIC_LIBS
|
||||
|
||||
menuconfig BR2_PACKAGE_STRONGSWAN
|
||||
bool "strongswan"
|
||||
depends on BR2_USE_MMU # fork()
|
||||
depends on BR2_TOOLCHAIN_HAS_THREADS
|
||||
depends on BR2_TOOLCHAIN_HAS_ATOMIC
|
||||
depends on !BR2_STATIC_LIBS
|
||||
help
|
||||
strongSwan is an OpenSource IPsec implementation for the
|
||||
Linux operating system. It is based on the discontinued
|
||||
FreeS/WAN project and the X.509 patch.
|
||||
|
||||
The focus is on:
|
||||
- simplicity of configuration
|
||||
- strong encryption and authentication methods
|
||||
- powerful IPsec policies supporting large and complex
|
||||
VPN networks
|
||||
|
||||
strongSwan provide many plugins. Only a few are presented
|
||||
here.
|
||||
|
||||
http://www.strongswan.org/
|
||||
|
||||
if BR2_PACKAGE_STRONGSWAN
|
||||
|
||||
choice
|
||||
prompt "Cryptographic backend"
|
||||
default BR2_PACKAGE_STRONGSWAN_GMP
|
||||
|
||||
config BR2_PACKAGE_STRONGSWAN_BOTAN
|
||||
bool "botan"
|
||||
depends on BR2_PACKAGE_BOTAN_ARCH_SUPPORTS
|
||||
depends on BR2_INSTALL_LIBSTDCPP
|
||||
depends on BR2_TOOLCHAIN_GCC_AT_LEAST_4_8
|
||||
depends on !BR2_TOOLCHAIN_HAS_GCC_BUG_64735
|
||||
select BR2_PACKAGE_BOTAN
|
||||
|
||||
comment "botan backend needs a toolchain w/ C++, gcc >= 4.8"
|
||||
depends on !BR2_INSTALL_LIBSTDCPP \
|
||||
|| !BR2_TOOLCHAIN_GCC_AT_LEAST_4_8
|
||||
depends on BR2_PACKAGE_BOTAN_ARCH_SUPPORTS
|
||||
|
||||
comment "botan backend needs a toolchain not affected by GCC bug 64735"
|
||||
depends on BR2_PACKAGE_BOTAN_ARCH_SUPPORTS
|
||||
depends on BR2_TOOLCHAIN_HAS_GCC_BUG_64735
|
||||
|
||||
config BR2_PACKAGE_STRONGSWAN_OPENSSL
|
||||
bool "OpenSSL"
|
||||
select BR2_PACKAGE_OPENSSL
|
||||
|
||||
config BR2_PACKAGE_STRONGSWAN_GCRYPT
|
||||
bool "libgcrypt"
|
||||
depends on BR2_PACKAGE_LIBGPG_ERROR_ARCH_SUPPORTS # libgcrypt
|
||||
select BR2_PACKAGE_LIBGCRYPT
|
||||
|
||||
config BR2_PACKAGE_STRONGSWAN_GMP
|
||||
bool "GNU MP (libgmp)"
|
||||
select BR2_PACKAGE_GMP
|
||||
|
||||
config BR2_PACKAGE_STRONGSWAN_WOLFSSL
|
||||
bool "wolfssl"
|
||||
select BR2_PACKAGE_WOLFSSL
|
||||
|
||||
endchoice
|
||||
|
||||
config BR2_PACKAGE_STRONGSWAN_AF_ALG
|
||||
bool "Enable AF_ALG crypto interface to Linux Crypto API"
|
||||
|
||||
config BR2_PACKAGE_STRONGSWAN_CURL
|
||||
bool "Enable CURL fetcher plugin to fetch files via libcurl"
|
||||
select BR2_PACKAGE_LIBCURL
|
||||
|
||||
config BR2_PACKAGE_STRONGSWAN_MD4
|
||||
bool "Enable MD4 hash algorithm"
|
||||
|
||||
config BR2_PACKAGE_STRONGSWAN_CHARON
|
||||
bool "Enable the IKEv1/IKEv2 keying daemon charon"
|
||||
default y
|
||||
|
||||
if BR2_PACKAGE_STRONGSWAN_CHARON
|
||||
|
||||
config BR2_PACKAGE_STRONGSWAN_TNCCS_11
|
||||
bool "Enable TNCCS 1.1 protocol module"
|
||||
select BR2_PACKAGE_LIBXML2
|
||||
|
||||
config BR2_PACKAGE_STRONGSWAN_TNCCS_20
|
||||
bool "Enable TNCCS 2.0 protocol module"
|
||||
|
||||
config BR2_PACKAGE_STRONGSWAN_TNCCS_DYNAMIC
|
||||
bool "Enable dynamic TNCCS protocol discovery module"
|
||||
|
||||
config BR2_PACKAGE_STRONGSWAN_SYSTIME_FIX
|
||||
bool "Enable systime-fix plugin"
|
||||
|
||||
config BR2_PACKAGE_STRONGSWAN_EAP_SIM
|
||||
bool "Enable EAP-SIM"
|
||||
default y if BR2_PACKAGE_STRONGSWAN_EAP # legacy
|
||||
|
||||
config BR2_PACKAGE_STRONGSWAN_EAP_SIM_FILE
|
||||
bool "Enable EAP-SIM file backend"
|
||||
default y if BR2_PACKAGE_STRONGSWAN_EAP # legacy
|
||||
select BR2_PACKAGE_STRONGSWAN_EAP_SIM
|
||||
|
||||
config BR2_PACKAGE_STRONGSWAN_EAP_SIM_PCSC
|
||||
bool "Enable EAP-SIM smart card backend"
|
||||
depends on !BR2_STATIC_LIBS # pcsc-lite
|
||||
select BR2_PACKAGE_PCSC_LITE
|
||||
select BR2_PACKAGE_STRONGSWAN_EAP_SIM
|
||||
|
||||
config BR2_PACKAGE_STRONGSWAN_EAP_AKA
|
||||
bool "Enable EAP-AKA"
|
||||
default y if BR2_PACKAGE_STRONGSWAN_EAP # legacy
|
||||
|
||||
config BR2_PACKAGE_STRONGSWAN_EAP_AKA_3GPP2
|
||||
bool "Enable EAP-AKA 3GPP2 algorithms"
|
||||
default y if BR2_PACKAGE_STRONGSWAN_EAP # legacy
|
||||
select BR2_PACKAGE_GMP
|
||||
select BR2_PACKAGE_STRONGSWAN_EAP_AKA
|
||||
|
||||
config BR2_PACKAGE_STRONGSWAN_EAP_SIMAKA_SQL
|
||||
bool "Enable EAP-SIM/AKA backend based on a triplet/quintuplet SQL database"
|
||||
default y if BR2_PACKAGE_STRONGSWAN_EAP # legacy
|
||||
select BR2_PACKAGE_STRONGSWAN_EAP_AKA
|
||||
select BR2_PACKAGE_STRONGSWAN_EAP_SIM
|
||||
|
||||
config BR2_PACKAGE_STRONGSWAN_EAP_SIMAKA_PSEUDONYM
|
||||
bool "Enable EAP-SIM/AKA pseudonym storage"
|
||||
default y if BR2_PACKAGE_STRONGSWAN_EAP # legacy
|
||||
select BR2_PACKAGE_STRONGSWAN_EAP_AKA
|
||||
select BR2_PACKAGE_STRONGSWAN_EAP_SIM
|
||||
|
||||
config BR2_PACKAGE_STRONGSWAN_EAP_SIMAKA_REAUTH
|
||||
bool "Enable EAP-SIM/AKA reauthentication data storage"
|
||||
default y if BR2_PACKAGE_STRONGSWAN_EAP # legacy
|
||||
select BR2_PACKAGE_STRONGSWAN_EAP_AKA
|
||||
select BR2_PACKAGE_STRONGSWAN_EAP_SIM
|
||||
|
||||
config BR2_PACKAGE_STRONGSWAN_EAP_IDENTITY
|
||||
bool "Enable EAP-Identity"
|
||||
default y if BR2_PACKAGE_STRONGSWAN_EAP # legacy
|
||||
|
||||
config BR2_PACKAGE_STRONGSWAN_EAP_MD5
|
||||
bool "Enable EAP-MD5"
|
||||
default y if BR2_PACKAGE_STRONGSWAN_EAP # legacy
|
||||
|
||||
config BR2_PACKAGE_STRONGSWAN_EAP_GTC
|
||||
bool "Enable EAP-GDC"
|
||||
default y if BR2_PACKAGE_STRONGSWAN_EAP # legacy
|
||||
|
||||
config BR2_PACKAGE_STRONGSWAN_EAP_MSCHAPV2
|
||||
bool "Enable EAP-MSCHAPv2"
|
||||
default y if BR2_PACKAGE_STRONGSWAN_EAP # legacy
|
||||
select BR2_PACKAGE_STRONGSWAN_MD4
|
||||
|
||||
config BR2_PACKAGE_STRONGSWAN_EAP_PEAP
|
||||
bool "Enable EAP-PEAP"
|
||||
default y if BR2_PACKAGE_STRONGSWAN_EAP # legacy
|
||||
|
||||
config BR2_PACKAGE_STRONGSWAN_EAP_RADIUS
|
||||
bool "Enable EAP-RADIUS"
|
||||
default y if BR2_PACKAGE_STRONGSWAN_EAP # legacy
|
||||
|
||||
config BR2_PACKAGE_STRONGSWAN_EAP_TLS
|
||||
bool "Enable EAP-TLS"
|
||||
default y if BR2_PACKAGE_STRONGSWAN_EAP # legacy
|
||||
|
||||
config BR2_PACKAGE_STRONGSWAN_EAP_TTLS
|
||||
bool "Enable EAP-TTLS"
|
||||
default y if BR2_PACKAGE_STRONGSWAN_EAP # legacy
|
||||
|
||||
config BR2_PACKAGE_STRONGSWAN_EAP_DYNAMIC
|
||||
bool "Enable EAP-DYNAMIC"
|
||||
default y if BR2_PACKAGE_STRONGSWAN_EAP # legacy
|
||||
|
||||
config BR2_PACKAGE_STRONGSWAN_EAP_TNC
|
||||
bool "Enable EAP-TNC"
|
||||
default y if BR2_PACKAGE_STRONGSWAN_EAP # legacy
|
||||
|
||||
config BR2_PACKAGE_STRONGSWAN_UNITY
|
||||
bool "Enables Cisco Unity extension plugin"
|
||||
|
||||
config BR2_PACKAGE_STRONGSWAN_STROKE
|
||||
bool "Enable charons stroke configuration backend"
|
||||
default y
|
||||
|
||||
config BR2_PACKAGE_STRONGSWAN_SQL
|
||||
bool "Enable SQL database configuration backend"
|
||||
depends on BR2_PACKAGE_SQLITE || BR2_PACKAGE_MYSQL
|
||||
|
||||
endif
|
||||
|
||||
config BR2_PACKAGE_STRONGSWAN_PKI
|
||||
bool "Enable pki certificate utility"
|
||||
default y
|
||||
|
||||
config BR2_PACKAGE_STRONGSWAN_SCEP
|
||||
bool "Enable SCEP client tool"
|
||||
|
||||
config BR2_PACKAGE_STRONGSWAN_SCRIPTS
|
||||
bool "Enable additional utilities (found in scripts directory)"
|
||||
default y
|
||||
depends on BR2_PACKAGE_STRONGSWAN_CHARON
|
||||
|
||||
config BR2_PACKAGE_STRONGSWAN_VICI
|
||||
bool "Enable vici/swanctl"
|
||||
default y
|
||||
depends on BR2_PACKAGE_STRONGSWAN_CHARON
|
||||
|
||||
endif
|
||||
@@ -0,0 +1,7 @@
|
||||
# From http://download.strongswan.org/strongswan-5.9.4.tar.bz2.md5
|
||||
md5 9c387eb77f0159fdefbcf7e81c905c35 strongswan-5.9.4.tar.bz2
|
||||
# Calculated based on the hash above
|
||||
sha256 45fdf1a4c2af086d8ff5b76fd7b21d3b6f0890f365f83bf4c9a75dda26887518 strongswan-5.9.4.tar.bz2
|
||||
# Locally calculated
|
||||
sha256 8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643 COPYING
|
||||
sha256 2292e21797754548dccdef9eef6aee7584e552fbd890fa914e1de8d3577d23f0 LICENSE
|
||||
@@ -0,0 +1,92 @@
|
||||
################################################################################
|
||||
#
|
||||
# strongswan
|
||||
#
|
||||
################################################################################
|
||||
|
||||
STRONGSWAN_VERSION = 5.9.4
|
||||
STRONGSWAN_SOURCE = strongswan-$(STRONGSWAN_VERSION).tar.bz2
|
||||
STRONGSWAN_SITE = http://download.strongswan.org
|
||||
STRONGSWAN_LICENSE = GPL-2.0+
|
||||
STRONGSWAN_LICENSE_FILES = COPYING LICENSE
|
||||
STRONGSWAN_CPE_ID_VENDOR = strongswan
|
||||
STRONGSWAN_DEPENDENCIES = host-pkgconf
|
||||
STRONGSWAN_INSTALL_STAGING = YES
|
||||
STRONGSWAN_CONF_OPTS += \
|
||||
--without-lib-prefix \
|
||||
--enable-led \
|
||||
--enable-pkcs11=yes \
|
||||
--enable-kernel-netlink=yes \
|
||||
--enable-socket-default=yes \
|
||||
--enable-botan=$(if $(BR2_PACKAGE_STRONGSWAN_BOTAN),yes,no) \
|
||||
--enable-openssl=$(if $(BR2_PACKAGE_STRONGSWAN_OPENSSL),yes,no) \
|
||||
--enable-gcrypt=$(if $(BR2_PACKAGE_STRONGSWAN_GCRYPT),yes,no) \
|
||||
--enable-gmp=$(if $(BR2_PACKAGE_STRONGSWAN_GMP),yes,no) \
|
||||
--enable-af-alg=$(if $(BR2_PACKAGE_STRONGSWAN_AF_ALG),yes,no) \
|
||||
--enable-curl=$(if $(BR2_PACKAGE_STRONGSWAN_CURL),yes,no) \
|
||||
--enable-charon=$(if $(BR2_PACKAGE_STRONGSWAN_CHARON),yes,no) \
|
||||
--enable-tnccs-11=$(if $(BR2_PACKAGE_STRONGSWAN_TNCCS_11),yes,no) \
|
||||
--enable-tnccs-20=$(if $(BR2_PACKAGE_STRONGSWAN_TNCCS_20),yes,no) \
|
||||
--enable-tnccs-dynamic=$(if $(BR2_PACKAGE_STRONGSWAN_TNCCS_DYNAMIC),yes,no) \
|
||||
--enable-eap-sim-pcsc=$(if $(BR2_PACKAGE_STRONGSWAN_EAP_SIM_PCSC),yes,no) \
|
||||
--enable-unity=$(if $(BR2_PACKAGE_STRONGSWAN_UNITY),yes,no) \
|
||||
--enable-stroke=$(if $(BR2_PACKAGE_STRONGSWAN_STROKE),yes,no) \
|
||||
--enable-sql=$(if $(BR2_PACKAGE_STRONGSWAN_SQL),yes,no) \
|
||||
--enable-pki=$(if $(BR2_PACKAGE_STRONGSWAN_PKI),yes,no) \
|
||||
--enable-scepclient=$(if $(BR2_PACKAGE_STRONGSWAN_SCEP),yes,no) \
|
||||
--enable-scripts=$(if $(BR2_PACKAGE_STRONGSWAN_SCRIPTS),yes,no) \
|
||||
--enable-vici=$(if $(BR2_PACKAGE_STRONGSWAN_VICI),yes,no) \
|
||||
--enable-swanctl=$(if $(BR2_PACKAGE_STRONGSWAN_VICI),yes,no) \
|
||||
--enable-wolfssl=$(if $(BR2_PACKAGE_STRONGSWAN_WOLFSSL),yes,no) \
|
||||
--enable-md4=$(if $(BR2_PACKAGE_STRONGSWAN_MD4),yes,no) \
|
||||
--enable-systime-fix=$(if $(BR2_PACKAGE_STRONGSWAN_SYSTIME_FIX),yes,no) \
|
||||
--enable-eap-sim=$(if $(BR2_PACKAGE_STRONGSWAN_EAP_SIM),yes,no) \
|
||||
--enable-eap-sim-file=$(if $(BR2_PACKAGE_STRONGSWAN_EAP_SIM_FILE),yes,no) \
|
||||
--enable-eap-aka=$(if $(BR2_PACKAGE_STRONGSWAN_EAP_AKA),yes,no) \
|
||||
--enable-eap-aka-3gpp2=$(if $(BR2_PACKAGE_STRONGSWAN_EAP_AKA_3GPP2),yes,no) \
|
||||
--enable-eap-simaka-sql=$(if $(BR2_PACKAGE_STRONGSWAN_EAP_SIMAKA_SQL),yes,no) \
|
||||
--enable-eap-simaka-pseudonym=$(if $(BR2_PACKAGE_STRONGSWAN_EAP_SIMAKA_PSEUDONYM),yes,no) \
|
||||
--enable-eap-simaka-reauth=$(if $(BR2_PACKAGE_STRONGSWAN_EAP_SIMAKA_REAUTH),yes,no) \
|
||||
--enable-eap-identity=$(if $(BR2_PACKAGE_STRONGSWAN_EAP_IDENTITY),yes,no) \
|
||||
--enable-eap-md5=$(if $(BR2_PACKAGE_STRONGSWAN_EAP_MD5),yes,no) \
|
||||
--enable-eap-gtc=$(if $(BR2_PACKAGE_STRONGSWAN_EAP_GTC),yes,no) \
|
||||
--enable-eap-mschapv2=$(if $(BR2_PACKAGE_STRONGSWAN_EAP_MSCHAPV2),yes,no) \
|
||||
--enable-eap-tls=$(if $(BR2_PACKAGE_STRONGSWAN_EAP_TLS),yes,no) \
|
||||
--enable-eap-ttls=$(if $(BR2_PACKAGE_STRONGSWAN_EAP_TTLS),yes,no) \
|
||||
--enable-eap-peap=$(if $(BR2_PACKAGE_STRONGSWAN_EAP_PEAP),yes,no) \
|
||||
--enable-eap-tnc=$(if $(BR2_PACKAGE_STRONGSWAN_EAP_TNC),yes,no) \
|
||||
--enable-eap-dynamic=$(if $(BR2_PACKAGE_STRONGSWAN_EAP_DYNAMIC),yes,no) \
|
||||
--enable-eap-radius=$(if $(BR2_PACKAGE_STRONGSWAN_EAP_RADIUS),yes,no) \
|
||||
--with-ipseclibdir=/usr/lib \
|
||||
--with-plugindir=/usr/lib/ipsec/plugins \
|
||||
--with-imcvdir=/usr/lib/ipsec/imcvs \
|
||||
--with-dev-headers=/usr/include
|
||||
|
||||
ifeq ($(BR2_TOOLCHAIN_HAS_LIBATOMIC),y)
|
||||
STRONGSWAN_CONF_ENV += LIBS='-latomic'
|
||||
endif
|
||||
|
||||
STRONGSWAN_DEPENDENCIES += \
|
||||
$(if $(BR2_PACKAGE_STRONGSWAN_BOTAN),botan) \
|
||||
$(if $(BR2_PACKAGE_STRONGSWAN_OPENSSL),openssl) \
|
||||
$(if $(BR2_PACKAGE_STRONGSWAN_GCRYPT),libgcrypt) \
|
||||
$(if $(BR2_PACKAGE_STRONGSWAN_GMP),gmp) \
|
||||
$(if $(BR2_PACKAGE_STRONGSWAN_EAP_AKA_3GPP2),gmp) \
|
||||
$(if $(BR2_PACKAGE_STRONGSWAN_CURL),libcurl) \
|
||||
$(if $(BR2_PACKAGE_STRONGSWAN_TNCCS_11),libxml2) \
|
||||
$(if $(BR2_PACKAGE_STRONGSWAN_EAP_SIM_PCSC),pcsc-lite) \
|
||||
$(if $(BR2_PACKAGE_STRONGSWAN_WOLFSSL),wolfssl)
|
||||
|
||||
ifeq ($(BR2_PACKAGE_STRONGSWAN_SQL),y)
|
||||
STRONGSWAN_DEPENDENCIES += \
|
||||
$(if $(BR2_PACKAGE_SQLITE),sqlite) \
|
||||
$(if $(BR2_PACKAGE_MYSQL),mysql)
|
||||
endif
|
||||
|
||||
# disable connmark/forecast until net/if.h vs. linux/if.h conflict resolved
|
||||
# problem exist since linux 4.5 header changes
|
||||
STRONGSWAN_CONF_OPTS += \
|
||||
--disable-connmark \
|
||||
--disable-forecast
|
||||
|
||||
$(eval $(autotools-package))
|
||||
Reference in New Issue
Block a user