Version bump per security bug #238534.

Package-Manager: portage-2.2_rc8/cvs/Linux 2.6.27-rc1-10246-gca5de40 x86_64

4 files changed, 127 insertions, 12 deletions

diff --git a/net-misc/strongswan/ChangeLog b/net-misc/strongswan/ChangeLog
index fb9f0625980e..3778ea261bae 100644
--- a/net-misc/strongswan/ChangeLog
+++ b/net-misc/strongswan/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for net-misc/strongswan
 # Copyright 2002-2008 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/net-misc/strongswan/ChangeLog,v 1.65 2008/08/23 17:59:58 maekke Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-misc/strongswan/ChangeLog,v 1.66 2008/09/24 02:48:51 robbat2 Exp $
+
+*strongswan-4.2.7 (24 Sep 2008)
+
+  24 Sep 2008; Robin H. Johnson <robbat2@gentoo.org>
+  +files/strongswan-4.2.7-install.patch, +strongswan-4.2.7.ebuild:
+  Version bump per security bug #238534.
 
   23 Aug 2008; Markus Meier <maekke@gentoo.org> strongswan-4.1.11.ebuild:
   add ~amd64, bug #215669
diff --git a/net-misc/strongswan/Manifest b/net-misc/strongswan/Manifest
index 434c912cc4a7..fed2f52b6307 100644
--- a/net-misc/strongswan/Manifest
+++ b/net-misc/strongswan/Manifest
@@ -1,6 +1,3 @@
------BEGIN PGP SIGNED MESSAGE-----
-Hash: SHA1
-
 AUX ipsec 445 RMD160 9240cf2699984634fae9b0f45c813742fd05e047 SHA1 efcc1bedfbeae8a5b85f85e4926472edbca37be0 SHA256 5ba492de6d612d7def1cb7ceacadf8397e50f8433b91c4f2f09bf216eed34da6
 AUX ipsec-install-4.1.11.patch 1261 RMD160 acd6328cee41a9368f04a34bced2c8ab3614a8b5 SHA1 23b84b54066706d201b2c2c6750c7aad1295fe8a SHA256 ed865a76a0bb4931094eadc646b538f976239b6ec600f13aa9cbeee93f806daa
 AUX ipsec-install-4.1.9.patch 593 RMD160 d9193d76c0975b49a2eee6e1dd066e0ff6d65a69 SHA1 68f61e4cd6a2fda386ce6a89092765f0f87f7ef7 SHA256 31ff4f5ab5344082574abcb684683f97d45f9945459ed39cba4557f9e3137cd0
@@ -8,24 +5,20 @@ AUX ipsec-path-2.8.3.patch.bz2 17544 RMD160 5d1d1382e9a02d552a2b56f8ddcdf00c30af
 AUX ipsec-path-2.8.4.patch.bz2 18821 RMD160 d000f677196bf4545af6f0ef26c5ae9482c4ffa6 SHA1 7f51a2542352ad83d81810a51f8930a1d4a9fa37 SHA256 f4f7c38c15b3308ea19bc06d85517598f15f27eba28912c613811fca48bc8d7f
 AUX ipsec-path.patch.bz2 28829 RMD160 bd4b6b85b4cdefbf7d6eaa69a68baa00f4a7a25d SHA1 cea2ba7610b932b3e5b8cf62dddadf6f1d9029b3 SHA256 6cf1de4d2f1b256ab9a11ef4345cc791843a99df03adfad8050899ebe6761616
 AUX strongswan-4.2.3-install.patch 2100 RMD160 1afb1271773b620465f0f4c1166c1dcfab8dd5a7 SHA1 9f9fb2a730121c65af86b69f490eb0dd2383269d SHA256 556216323b8de18928ebae848d0ed61dd80413cb8adb26c8408e2d0955b201a4
+AUX strongswan-4.2.7-install.patch 1070 RMD160 fa5815d1de4d4bba5674832def181f139a66ae7e SHA1 4adc2f9e704553dabf744667d74d8c6ed6ae9c59 SHA256 0ea8ba27ba6ad5a4f90ad4f233fd05ec431dccdb1c08b794e2f7ee72ea4fc87a
 DIST strongswan-2.8.0.tar.bz2 2534893 RMD160 c5ff3e675bbf02d243775e4418858bd2cb1ddaac SHA1 d946d508b33b1afd7fef8ffac4c141a853a58f70 SHA256 998231c62cc2a27060fe9523c64cfd12f42865a9e3a0bf1a2f27e5a7aa900fa2
 DIST strongswan-2.8.4.tar.bz2 1705469 RMD160 7ca3fdb89eb62e07bd8e9144ca2af179fd3f75d1 SHA1 9fb43a803d24f183a50d3026910a52c10d6289a8 SHA256 218db809108bc84c49cf185149cbb9371947281a14fce209c139cdd13b6bd904
 DIST strongswan-4.1.11.tar.bz2 2234335 RMD160 e7247e9e58340d3183a06036f322bcd47c78b6e6 SHA1 3250388e86955a34c236044e373af10c0fbe8a9d SHA256 9d2761b780fd8b11eafce63dc44336ece6941405dae819bd03e62a5f6b2f82fb
 DIST strongswan-4.1.6.tar.bz2 1950676 RMD160 ee1d768cda0dd8d6464e3046e251dab1d3a7da16 SHA1 9404f098ea32930e974e4cb02d935284cb1eeb7d SHA256 5d22f2f2f95a2c2f6493b60ef22f5ced7cd4200d490ec165f8a49357cd8f5a42
 DIST strongswan-4.1.9.tar.bz2 2176339 RMD160 a140bd2295284910dc8e54bba1227f0bd384813f SHA1 75f2af380b530b341b31b927ec3babf46443d0df SHA256 37ea5119dc54cb150d444302f82f84854a15d35e45a817e3a29be86b7d750587
 DIST strongswan-4.2.3.tar.bz2 2391083 RMD160 2582b06071f7ab995f16f3754d1719a760cf6d68 SHA1 995bef80f0148ffa9d722e9feb1d4fd7355cf0e1 SHA256 ff4e813f17f27a7c03b09bfa735e7a5f84bc6343b474f1c0d16f9b106e887834
+DIST strongswan-4.2.7.tar.bz2 2876436 RMD160 2ad089902d4ea9ba6d6b2aaec8d072986341020a SHA1 7239eb09a8b1127e483c8a66e6f70d4b1542f76c SHA256 7c41fa538633c71cb1f2ef22c3871bfce76f5667120d3824b2bd3159c98e50a9
 EBUILD strongswan-2.8.0.ebuild 3784 RMD160 a3ef784f54d5fa5d0d7e2d9bfa9453cb344044db SHA1 e4eaabee706ee6f573557aab61eb8efdd8e61096 SHA256 53be8e6e57f2551e71e486818769d218a682c629fe19db3107bbb8fb3100f801
 EBUILD strongswan-2.8.4.ebuild 3980 RMD160 e4410ef12634ebcd88241f468f5aabb6d56ebb25 SHA1 3d84f1bd482bbd1b0ca4bf39163f90f680919acb SHA256 35da00ca8b86a27ea8af9ffc1656c19911a7729686cbb97ed5e42dbcb3e85b04
 EBUILD strongswan-4.1.11.ebuild 2798 RMD160 b17e82ff44c450c85b71abcef829bc7a806474d0 SHA1 5c5431ab47bdc1e020070a7c6d564cf2766bb9cb SHA256 85a8d96139867f2b8d492f24b757c9bc249c017805fe0c60f754f51f77f026a6
 EBUILD strongswan-4.1.6.ebuild 2409 RMD160 ef180497548c7a3d15f8b9b9a60a49bacec63983 SHA1 545ace14736958ee135d1df7dd74682f39e08f85 SHA256 8595e5b25b99ce4b52c35969bad15bc295d2269e127a420f4a6e7b6ac467e7e3
 EBUILD strongswan-4.1.9.ebuild 2500 RMD160 ce9749958d2d4fdd5bb54550a07eef0a88812510 SHA1 6fa481d9337dc82501942a640df53062d6f2eca8 SHA256 66a4ef11be2086ceca530e11dc5ae649ef0bb7321bac534e1bc8ff6371b3e591
 EBUILD strongswan-4.2.3.ebuild 2777 RMD160 cf13d59bcb3ab3145ac2ced234725bad0bcaa2a4 SHA1 e1f71cc8f316f83268c515e3c10bb013a0a54786 SHA256 f1a9304b8ae4873bef08b11bb5a6c6f175d54a05321cc65aa4f868b292df8332
-MISC ChangeLog 11049 RMD160 aba700b83abd872082b92016f414299cfb6d4755 SHA1 3295f248b49bb36845e0a18510ddd6d536b8bd3a SHA256 6dedf3f010d2fbc4c2b121eadb22792445fa2f2965d552c1b348ea281bd61d1d
+EBUILD strongswan-4.2.7.ebuild 2777 RMD160 11f00ea6b359f84c7fa15dae76a6f8c07d869663 SHA1 29f6b623bae453b2c217345ec5654b5def4d1706 SHA256 ef7f6751eefab40b14847f3088555b7bf478f214d774c6af3da9abf24f1d6c1e
+MISC ChangeLog 11245 RMD160 d43066897b1765cd0b024dd2845c02411dcb49f7 SHA1 24ac6ddb1506639bdade3bafcb89971cabce98d6 SHA256 a0eb3ff1d1cd8e0d09ca13deca8a0936051ae045a9f32bc82250ed29549b747e
 MISC metadata.xml 728 RMD160 f52f566d32412c1bf0ef640e3c3febd75562d967 SHA1 9b1c89a09b1b13b7d56e634a551ccf84b91d2a7a SHA256 9ad8fa8fc0d08314ab1196e344d84661d586a419df220463dc66578e2067c031
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v2.0.9 (GNU/Linux)
-
-iEYEARECAAYFAkiwUHEACgkQkKaRLQcq0GI2WwCdEBBqjypg4UHzZ6I865LP63yu
-Z0oAn3t60h+jCO2XHx3iJM/AcRu6wZe1
-=YKHv
------END PGP SIGNATURE-----
diff --git a/net-misc/strongswan/files/strongswan-4.2.7-install.patch b/net-misc/strongswan/files/strongswan-4.2.7-install.patch
new file mode 100644
index 000000000000..d72d12971df3
--- /dev/null
+++ b/net-misc/strongswan/files/strongswan-4.2.7-install.patch
@@ -0,0 +1,12 @@
+diff -Nuar strongswan-4.2.7.orig/src/starter/Makefile.am strongswan-4.2.7/src/starter/Makefile.am
+--- strongswan-4.2.7.orig/src/starter/Makefile.am	2008-09-17 14:10:31.000000000 -0700
++++ strongswan-4.2.7/src/starter/Makefile.am	2008-09-23 19:28:49.085627647 -0700
+@@ -31,7 +31,7 @@
+ 		$(COMPILE) -c -o $@ $<
+ 
+ install-exec-local :	
+-		test -e "$(DESTDIR)${sysconfdir}/ipsec.d" || $(INSTALL) -o ${ipsecuser} -g ${ipsecgroup} -d "$(DESTDIR)$(sysconfdir)/ipsec.d" || true
++		test -e "$(DESTDIR)${sysconfdir}/ipsec.d" || $(INSTALL) -D -o ${ipsecuser} -g ${ipsecgroup} -d "$(DESTDIR)$(sysconfdir)/ipsec.d" || true
+ 		test -e "$(DESTDIR)${sysconfdir}/ipsec.d/cacerts" || $(INSTALL) -o ${ipsecuser} -g ${ipsecgroup} -d "$(DESTDIR)$(sysconfdir)/ipsec.d/cacerts" || true
+ 		test -e "$(DESTDIR)${sysconfdir}/ipsec.d/ocspcerts" || $(INSTALL) -o ${ipsecuser} -g ${ipsecgroup} -d "$(DESTDIR)$(sysconfdir)/ipsec.d/ocspcerts" || true
+ 		test -e "$(DESTDIR)${sysconfdir}/ipsec.d/certs" || $(INSTALL) -o ${ipsecuser} -g ${ipsecgroup} -d "$(DESTDIR)$(sysconfdir)/ipsec.d/certs" || true
diff --git a/net-misc/strongswan/strongswan-4.2.7.ebuild b/net-misc/strongswan/strongswan-4.2.7.ebuild
new file mode 100644
index 000000000000..4ae91718ed0b
--- /dev/null
+++ b/net-misc/strongswan/strongswan-4.2.7.ebuild
@@ -0,0 +1,104 @@
+# Copyright 1999-2008 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/net-misc/strongswan/strongswan-4.2.7.ebuild,v 1.1 2008/09/24 02:48:51 robbat2 Exp $
+
+inherit eutils linux-info
+
+UGID="ipsec"
+
+DESCRIPTION="Open Source implementation of IPsec for the Linux operating system."
+HOMEPAGE="http://www.strongswan.org/"
+SRC_URI="http://download.strongswan.org/${P}.tar.bz2"
+
+LICENSE="GPL-2 RSA-MD2 RSA-MD5 RSA-PKCS11 DES"
+SLOT="0"
+KEYWORDS="~ppc ~sparc ~x86 ~amd64"
+IUSE="cisco curl debug ldap nat smartcard static xml"
+
+COMMON_DEPEND="!net-misc/openswan
+	dev-libs/gmp"
+DEPEND="${COMMON_DEPEND}
+	virtual/linux-sources
+	sys-kernel/linux-headers
+	curl? ( net-misc/curl )
+	ldap? ( net-nds/openldap )
+	smartcard? ( dev-libs/opensc )
+	xml? ( dev-libs/libxml2 )"
+RDEPEND="${COMMON_DEPEND}
+	virtual/logger
+	sys-apps/iproute2"
+
+src_unpack() {
+	unpack ${A}
+	cd "${S}"
+
+	epatch "${FILESDIR}"/${P}-install.patch
+}
+
+pkg_setup() {
+	linux-info_pkg_setup
+
+	einfo "Linux kernel is version ${KV_FULL}"
+
+	if kernel_is 2 6; then
+		einfo "This ebuild will set ${P} to use 2.6 native IPsec (KAME)."
+	else
+		eerror "Sorry, no support for your kernel version ${KV_FULL}."
+		die "Install an IPsec enabled 2.6 kernel."
+	fi
+
+	# change to an unprivileged user by default
+	enewgroup ${UGID}
+	enewuser ${UGID} -1 -1 -1 ${UGID}
+}
+
+src_compile() {
+	local myconf=""
+
+	# change to an unprivileged user by default
+	#myconf="${myconf} --with-user=${UGID} --with-group=${UGID}"
+	# strongswan enables both by default; switch to the user's wish
+	if use static; then
+		myconf="${myconf} --enable-static --disable-shared"
+	else
+		myconf="${myconf} --disable-static --enable-shared"
+	fi
+
+	econf \
+		$(use_enable curl http) \
+		$(use_enable ldap) \
+		$(use_enable xml) \
+		$(use_enable smartcard) \
+		$(use_enable cisco cisco-quirks) \
+		$(use_enable debug leak-detective) \
+		$(use_enable nat nat-transport) \
+		${myconf} \
+		|| die "econf failed"
+
+	emake || die "emake failed"
+}
+
+src_install() {
+	einstall || die "einstall failed."
+
+	doinitd "${FILESDIR}"/ipsec
+
+	fowners ipsec:ipsec /etc/ipsec.conf
+}
+
+pkg_postinst() {
+	echo
+	ewarn "Starting with the strongswan-4 branch, the configuration files"
+	ewarn "will be installed into the default directory \"/etc/\""
+	ewarn "instead of the Gentoo-specific directory \"/etc/ipsec/\"."
+	ewarn "Please adjust your configuration!"
+	echo
+	einfo "For your own security we install strongSwan without superuser"
+	einfo "privileges.  If you use iptables, you might want to change that"
+	einfo "setting.  See http://wiki.strongswan.org/wiki/nonRoot for more"
+	einfo "information."
+	echo
+	einfo "The up-to-date configuration manual is available online at"
+	einfo "http://www.strongswan.org/docs/readme.htm"
+	echo
+}