add ipsec-tools package per case 0000439

diff --git a/package/Config.in b/package/Config.in
index e22adfbd272ffa6d721e3731af27fe2c46fe0f64..9987829dd9a805e56c18fdb2f44483d315d7fe7c 100644 (file)
--- a/package/Config.in
+++ b/package/Config.in
@@ -51,6 +51,7 @@ source "package/hostap/Config.in"
 source "package/hotplug/Config.in"
 source "package/iostat/Config.in"
 source "package/iproute2/Config.in"
+source "package/ipsec-tools/Config.in"
 source "package/iptables/Config.in"
 source "package/jpeg/Config.in"
 source "package/less/Config.in"

diff --git a/package/ipsec-tools/Config.in b/package/ipsec-tools/Config.in
new file mode 100644 (file)
index 0000000..964218e
--- /dev/null
+++ b/package/ipsec-tools/Config.in
@@ -0,0 +1,64 @@
+config BR2_PACKAGE_IPSEC_TOOLS
+       bool "ipsec-tools"
+       default n
+        select BR2_PACKAGE_OPENSSL
+       help
+         This package is required to support IPSec for Linux 2.6+
+
+config BR2_PACKAGE_IPSEC_TOOLS_ADMINPORT
+       default y
+       depends on BR2_PACKAGE_IPSEC_TOOLS
+       bool "Enable racoonctl(8)."
+       help
+               Lets racoon to listen to racoon admin port, which is to
+                be contacted by racoonctl(8).
+
+config BR2_PACKAGE_IPSEC_TOOLS_NATT
+       default n
+       depends on BR2_PACKAGE_IPSEC_TOOLS
+       bool "Enable NAT-Traversal"
+       help
+               This needs kernel support, which is available on Linux. On 
+               NetBSD, NAT-Traversal kernel support has not been integrated 
+               yet, you can get it from here: 
+
+               http://ipsec-tools.sourceforge.net/netbsd_nat-t.diff If you 
+
+               live in a country where software patents are legal, using 
+               NAT-Traversal might infringe a patent.
+
+
+config BR2_PACKAGE_IPSEC_TOOLS_FRAG
+       default n
+       depends on BR2_PACKAGE_IPSEC_TOOLS
+       bool "Enable IKE fragmentation."
+       help
+                Enable IKE fragmentation, which is a workaround for
+                broken routers that drop fragmented packets
+
+config BR2_PACKAGE_IPSEC_TOOLS_STATS
+       default y
+       depends on BR2_PACKAGE_IPSEC_TOOLS
+       bool "Enable statistics logging function."
+
+config BR2_PACKAGE_IPSEC_TOOLS_IPV6
+       default y
+       depends on BR2_PACKAGE_IPSEC_TOOLS
+       bool "Enable IPv6 support"
+       help
+               This option has no effect if uClibc has been compiled without
+               IPv6 support.
+
+config BR2_PACKAGE_IPSEC_TOOLS_READLINE
+       default n
+       depends on BR2_PACKAGE_IPSEC_TOOLS
+       select BR2_READLINE
+       bool "Enable readline input support if available."
+
+config BR2_PACKAGE_IPSEC_TOOLS_LIBS
+       bool "Install IPSec libraries under staging_dir/lib"
+       default y
+       depends on BR2_PACKAGE_IPSEC_TOOLS
+       help
+         Install libipsec.a and libracoon.a under staging_dir/lib for further
+         development on a host machine.

diff --git a/package/ipsec-tools/ipsec-tools.mk b/package/ipsec-tools/ipsec-tools.mk
new file mode 100644 (file)
index 0000000..220d05c
--- /dev/null
+++ b/package/ipsec-tools/ipsec-tools.mk
@@ -0,0 +1,154 @@
+#############################################################
+#
+# ipsec-tools
+#
+#############################################################
+
+IPSEC_TOOLS_VER:=0.6.1
+IPSEC_TOOLS_SOURCE:=ipsec-tools-$(IPSEC_TOOLS_VER).tar.bz2
+IPSEC_TOOLS_DIR:=$(BUILD_DIR)/ipsec-tools-$(IPSEC_TOOLS_VER)
+
+IPSEC_TOOLS_BINARY_SETKEY:=src/setkey/setkey
+IPSEC_TOOLS_BINARY_RACOON:=src/racoon/racoon
+IPSEC_TOOLS_BINARY_RACOONCTL:=src/racoon/racoonctl
+
+IPSEC_TOOLS_TARGET_BINARY_SETKEY:=usr/sbin/setkey
+IPSEC_TOOLS_TARGET_BINARY_RACOON:=usr/sbin/racoon
+IPSEC_TOOLS_TARGET_BINARY_RACOONCTL:=usr/sbin/racoonctl
+IPSEC_TOOLS_SITE=http://$(BR2_SOURCEFORGE_MIRROR).dl.sourceforge.net/sourceforge/ipsec-tools/
+
+ifeq ($(strip $(BR2_PACKAGE_IPSEC_TOOLS_ADMINPORT)), y)
+IPSEC_TOOLS_CONFIG_FLAGS+=     --enable-adminport
+else
+IPSEC_TOOLS_CONFIG_FLAGS+=     --disable-adminport
+endif
+
+ifeq ($(strip $(BR2_PACKAGE_IPSEC_TOOLS_NATT)), y)
+IPSEC_TOOLS_CONFIG_FLAGS+=     --enable-natt
+else
+IPSEC_TOOLS_CONFIG_FLAGS+=     --disable-natt
+endif
+
+ifeq ($(strip $(BR2_PACKAGE_IPSEC_TOOLS_FRAG)), y)
+IPSEC_TOOLS_CONFIG_FLAGS+=     --enable-frag
+else
+IPSEC_TOOLS_CONFIG_FLAGS+=     --disable-frag
+endif
+
+ifeq ($(strip $(BR2_PACKAGE_IPSEC_TOOLS_STATS)), y)
+IPSEC_TOOLS_CONFIG_FLAGS+=     --enable-stats
+else
+IPSEC_TOOLS_CONFIG_FLAGS+=     --disable-stats
+endif
+
+# At first check, if uClibc supports IPv6
+ifeq ($(shell grep -q '__UCLIBC_HAS_IPV6__ 1' \
+       $(STAGING_DIR)/include/bits/uClibc_config.h && echo IPV6), IPV6)
+
+ifeq ($(strip $(BR2_PACKAGE_IPSEC_TOOLS_IPV6)), y)
+IPSEC_TOOLS_CONFIG_FLAGS+=     --enable-ipv6
+else
+IPSEC_TOOLS_CONFIG_FLAGS+=     --disable-ipv6
+endif
+
+else # ignore user's choice if it doesn't
+IPSEC_TOOLS_CONFIG_FLAGS+=     --disable-ipv6
+endif
+
+ifneq ($(strip $(BR2_PACKAGE_IPSEC_TOOLS_READLINE)), y)
+IPSEC_TOOLS_CONFIG_FLAGS+=     --without-readline
+endif
+
+$(DL_DIR)/$(IPSEC_TOOLS_SOURCE):
+       $(WGET) -P $(DL_DIR) $(IPSEC_TOOLS_SITE)/$(IPSEC_TOOLS_SOURCE)
+
+
+$(IPSEC_TOOLS_DIR)/.source: $(DL_DIR)/$(IPSEC_TOOLS_SOURCE)
+       bunzip2 -c  $(DL_DIR)/$(IPSEC_TOOLS_SOURCE) | tar -C $(BUILD_DIR) $(TAR_OPTIONS) -
+       touch $(IPSEC_TOOLS_DIR)/.source
+
+$(IPSEC_TOOLS_DIR)/.configured: $(IPSEC_TOOLS_DIR)/.source
+       ( cd $(IPSEC_TOOLS_DIR); \
+         $(TARGET_CONFIGURE_OPTS) \
+         CFLAGS="$(TARGET_CFLAGS)" \
+         ./configure \
+         --target=$(GNU_TARGET_NAME) \
+         --host=$(GNU_TARGET_NAME) \
+         --build=$(GNU_HOST_NAME) \
+         --prefix=/usr \
+         --sysconfdir=/etc \
+         --disable-hybrid \
+         --without-libpam \
+         --disable-gssapi \
+         --with-kernel-headers=$(STAGING_DIR)/include \
+         $(IPSEC_TOOLS_CONFIG_FLAGS) \
+       ); 
+       touch $(IPSEC_TOOLS_DIR)/.configured
+
+$(IPSEC_TOOLS_DIR)/$(IPSEC_TOOLS_BINARY_SETKEY) \
+$(IPSEC_TOOLS_DIR)/$(IPSEC_TOOLS_BINARY_RACOON) \
+$(IPSEC_TOOLS_DIR)/$(IPSEC_TOOLS_BINARY_RACOONCTL): \
+    $(IPSEC_TOOLS_DIR)/.configured
+       $(MAKE) CC=$(TARGET_CC) -C $(IPSEC_TOOLS_DIR)
+       
+$(TARGET_DIR)/$(IPSEC_TOOLS_TARGET_BINARY_SETKEY) \
+$(TARGET_DIR)/$(IPSEC_TOOLS_TARGET_BINARY_RACOON) \
+$(TARGET_DIR)/$(IPSEC_TOOLS_TARGET_BINARY_RACOONCTL): \
+  $(IPSEC_TOOLS_DIR)/$(IPSEC_TOOLS_BINARY_SETKEY) \
+  $(IPSEC_TOOLS_DIR)/$(IPSEC_TOOLS_BINARY_RACOON) \
+  $(IPSEC_TOOLS_DIR)/$(IPSEC_TOOLS_BINARY_RACOONCTL) 
+       make -C $(IPSEC_TOOLS_DIR) DESTDIR=$(TARGET_DIR) install
+       strip --strip-unneeded --remove-section=.comment \
+          --remove-section=.note \
+         $(TARGET_DIR)/$(IPSEC_TOOLS_TARGET_BINARY_SETKEY) \
+         $(TARGET_DIR)/$(IPSEC_TOOLS_TARGET_BINARY_RACOON) \
+         $(TARGET_DIR)/$(IPSEC_TOOLS_TARGET_BINARY_RACOONCTL)
+       -rm -f $(TARGET_DIR)/usr/man/man3/ipsec_strerror.3 \
+         $(TARGET_DIR)/usr/man/man3/ipsec_set_policy.3 \
+         $(TARGET_DIR)/usr/man/man5/racoon.conf.5 \
+         $(TARGET_DIR)/usr/man/man8/racoonctl.8 \
+         $(TARGET_DIR)/usr/man/man8/racoon.8 \
+         $(TARGET_DIR)/usr/man/man8/plainrsa-gen.8 \
+         $(TARGET_DIR)/usr/man/man8/setkey.8
+ifeq ($(strip $(BR2_PACKAGE_IPSEC_TOOLS_LIBS)), y)
+       install -D $(IPSEC_TOOLS_DIR)/src/libipsec/.libs/libipsec.a \
+         $(IPSEC_TOOLS_DIR)/src/libipsec/.libs/libipsec.la \
+         $(IPSEC_TOOLS_DIR)/src/racoon/.libs/libracoon.a \
+         $(IPSEC_TOOLS_DIR)/src/racoon/.libs/libracoon.la \
+         $(STAGING_DIR)/lib
+endif
+ifneq ($(strip $(BR2_PACKAGE_IPSEC_TOOLS_ADMINPORT)), y)
+       -rm -f $(TARGET_DIR)/$(IPSEC_TOOLS_TARGET_BINARY_RACOONCTL)
+endif
+
+IPSEC_TOOLS_PROGS= $(TARGET_DIR)/$(IPSEC_TOOLS_TARGET_BINARY_SETKEY) \
+    $(TARGET_DIR)/$(IPSEC_TOOLS_TARGET_BINARY_RACOON)
+
+ifeq ($(strip $(BR2_PACKAGE_IPSEC_TOOLS_ADMINPORT)), y)
+IPSEC_TOOLS_PROGS+= $(TARGET_DIR)/$(IPSEC_TOOLS_TARGET_BINARY_RACOONCTL)
+endif
+
+ipsec-tools: uclibc openssl $(IPSEC_TOOLS_PROGS)
+
+ipsec-tools-source: $(DL_DIR)/$(IPSEC_TOOLS_SOURCE)
+
+ipsec-tools-uninstall:
+
+ipsec-tools-clean:
+       make -C $(IPSEC_TOOLS_DIR) DESTDIR=$(TARGET_DIR) uninstall
+       make -C $(IPSEC_TOOLS_DIR) clean
+ifeq ($(strip $(BR2_PACKAGE_IPSEC_TOOLS_LIBS)), y)
+       -rm -f $(STAGING_DIR)/lib/libipsec.a
+       -rm -f $(STAGING_DIR)/lib/libipsec.la
+       -rm -f $(STAGING_DIR)/lib/libracoon.a
+       -rm -f $(STAGING_DIR)/lib/libracoon.la
+endif
+       -rm $(IPSEC_TOOLS_DIR)/.configured
+
+ipsec-tools-dirclean:
+       @echo $(LINUX_DIR)
+       -rm -rf $(IPSEC_TOOLS_DIR)
+
+ifeq ($(strip $(BR2_PACKAGE_IPSEC_TOOLS)), y)
+TARGETS+=ipsec-tools
+endif