add strongswan package

package/strongswan/Makefile

@@ -0,0 +1,60 @@
+# This file is part of the OpenADK project. OpenADK is copyrighted
+# material, please see the LICENCE file in the top-level directory.
+
+include $(TOPDIR)/rules.mk
+
+PKG_NAME:=		strongswan
+PKG_VERSION:=		4.4.0
+PKG_RELEASE:=		1
+PKG_MD5SUM:=		22dae13782f493ec675d54b67d79a66d
+PKG_DESCR:=		IPsec software
+PKG_SECTION:=		net/security
+PKG_DEPENDS:=		libgmp ip libpthread kmod-net-key kmod-xfrm-user
+PKG_DEPENDS+=		kmod-inet-ah kmod-inet-esp kmod-inet-ipcomp
+PKG_DEPENDS+=		kmod-inet-xfrm-mode-tunnel kmod-inet-xfrm-mode-transport
+PKG_BUILDDEP+=		gmp
+PKG_URL:=		http://strongswan.org/index.htm
+PKG_SITES:=		http://download.strongswan.org/
+
+include $(TOPDIR)/mk/package.mk
+
+$(eval $(call PKG_template,STRONGSWAN,$(PKG_NAME),$(PKG_VERSION)-${PKG_RELEASE},${PKG_DEPENDS},${PKG_DESCR},${PKG_SECTION}))
+
+post-install:
+	$(INSTALL_DIR) $(IDIR_STRONGSWAN)/etc
+	$(INSTALL_DIR) $(IDIR_STRONGSWAN)/usr/sbin
+	$(INSTALL_DIR) $(IDIR_STRONGSWAN)/usr/lib
+	$(INSTALL_DIR) $(IDIR_STRONGSWAN)/usr/libexec/ipsec/plugins
+	$(CP) $(WRKINST)/usr/libexec/ipsec/plugins/*.so \
+		$(IDIR_STRONGSWAN)/usr/libexec/ipsec/plugins
+	$(CP) $(WRKINST)/etc/* $(IDIR_STRONGSWAN)/etc
+	$(INSTALL_BIN) $(WRKINST)/usr/libexec/ipsec/charon \
+		$(IDIR_STRONGSWAN)/usr/libexec/ipsec
+	$(INSTALL_BIN) $(WRKINST)/usr/libexec/ipsec/openac \
+		$(IDIR_STRONGSWAN)/usr/libexec/ipsec
+	$(INSTALL_BIN) $(WRKINST)/usr/libexec/ipsec/_pluto_adns \
+		$(IDIR_STRONGSWAN)/usr/libexec/ipsec
+	$(INSTALL_BIN) $(WRKINST)/usr/libexec/ipsec/starter \
+		$(IDIR_STRONGSWAN)/usr/libexec/ipsec
+	$(INSTALL_BIN) $(WRKINST)/usr/libexec/ipsec/_updown \
+		$(IDIR_STRONGSWAN)/usr/libexec/ipsec
+	$(INSTALL_BIN) $(WRKINST)/usr/libexec/ipsec/whack \
+		$(IDIR_STRONGSWAN)/usr/libexec/ipsec
+	$(INSTALL_BIN) $(WRKINST)/usr/libexec/ipsec/_copyright \
+		$(IDIR_STRONGSWAN)/usr/libexec/ipsec
+	$(INSTALL_BIN) $(WRKINST)/usr/libexec/ipsec/pki \
+		$(IDIR_STRONGSWAN)/usr/libexec/ipsec
+	$(INSTALL_BIN) $(WRKINST)/usr/libexec/ipsec/pluto \
+		$(IDIR_STRONGSWAN)/usr/libexec/ipsec
+	$(INSTALL_BIN) $(WRKINST)/usr/libexec/ipsec/scepclient \
+		$(IDIR_STRONGSWAN)/usr/libexec/ipsec
+	$(INSTALL_BIN) $(WRKINST)/usr/libexec/ipsec/stroke \
+		$(IDIR_STRONGSWAN)/usr/libexec/ipsec
+	$(INSTALL_BIN) $(WRKINST)/usr/libexec/ipsec/_updown_espmark \
+		$(IDIR_STRONGSWAN)/usr/libexec/ipsec
+	$(INSTALL_BIN) $(WRKINST)/usr/sbin/ipsec \
+		$(IDIR_STRONGSWAN)/usr/sbin
+	$(CP) $(WRKINST)/usr/lib/lib*.so* \
+		$(IDIR_STRONGSWAN)/usr/lib
+
+include ${TOPDIR}/mk/pkg-bottom.mk

package/strongswan/patches/patch-src_pluto_alg_info_c

@@ -0,0 +1,11 @@
+--- strongswan-4.4.0.orig/src/pluto/alg_info.c	2010-03-15 21:52:51.000000000 +0100
++++ strongswan-4.4.0/src/pluto/alg_info.c	2010-07-13 22:49:11.775081075 +0200
+@@ -414,7 +414,7 @@ struct alg_info_esp *alg_info_esp_create
+ 	alg_info_esp = malloc_thing (struct alg_info_esp);
+ 	zero(alg_info_esp);
+ 
+-	pfs_name=index (alg_str, ';');
++	pfs_name=strchr (alg_str, ';');
+ 	if (pfs_name)
+ 	{
+ 		memcpy(esp_buf, alg_str, pfs_name-alg_str);

target/linux/config/Config.in.ipsec

@@ -7,15 +7,22 @@ config ADK_KPACKAGE_KMOD_NET_KEY
 	help
 	  PF_KEYv2 socket family, compatible to KAME ones.
 
+config ADK_KPACKAGE_KMOD_XFRM_USER
+	prompt "kmod-xfrm-user.................... IPsec usertools support"
+	tristate
+	default n
+	help
+
 config ADK_KPACKAGE_KMOD_INET_AH
-	prompt "kmod-net-ipsec-ah................. IPsec AH support"
+	prompt "kmod-inet-ah...................... IPsec AH support"
 	tristate
+	select ADK_KPACKAGE_KMOD_CRYPTO_HASH
 	default n
 	help
 	  Support for IPsec AH.
 
 config ADK_KPACKAGE_KMOD_INET_ESP
-	prompt "kmod-net-ipsec-esp................ IPsec ESP support"
+	prompt "kmod-inet-esp..................... IPsec ESP support"
 	tristate
 	select ADK_KPACKAGE_KMOD_CRYPTO_AEAD
 	default n
@@ -23,7 +30,7 @@ config ADK_KPACKAGE_KMOD_INET_ESP
 	  Support for IPsec ESP.
 
 config ADK_KPACKAGE_KMOD_INET_IPCOMP
-	prompt "kmod-net-ipsec-comp................ IP Payload Compression"
+	prompt "kmod-inet-ipcomp.................. IP Payload Compression"
 	tristate
 	default n
 	help
@@ -31,21 +38,21 @@ config ADK_KPACKAGE_KMOD_INET_IPCOMP
 	  typically needed for IPsec.
 
 config ADK_KPACKAGE_KMOD_INET_XFRM_MODE_TRANSPORT
-	prompt "kmod-net-ipsec-transport........... IPsec transport mode"
+	prompt "kmod-inet-xfrm-mode-transport..... IPsec transport mode"
 	tristate
 	default n
 	help
 	  Support for IPsec transport mode.
 
 config ADK_KPACKAGE_KMOD_INET_XFRM_MODE_TUNNEL
-	prompt "kmod-net-ipsec-tunnel.............. IPsec tunnel mode"
+	prompt "kmod-inet-xfrm-mode-tunnel........ IPsec tunnel mode"
 	tristate
 	default n
 	help
 	  Support for IPsec tunnel mode.
 
 config ADK_KPACKAGE_KMOD_INET_XFRM_MODE_BEET
-	prompt "kmod-net-ipsec-beet................ IPsec BEET mode"
+	prompt "kmod-inet-xfrm-mode-beet.......... IPsec BEET mode"
 	tristate
 	default n
 	help