version bump

Package-Manager: portage-2.2_rc60/cvs/Linux i686

3 files changed, 139 insertions, 3 deletions

diff --git a/net-misc/strongswan/ChangeLog b/net-misc/strongswan/ChangeLog
index 44c1f87d327d..16dcb49d6434 100644
--- a/net-misc/strongswan/ChangeLog
+++ b/net-misc/strongswan/ChangeLog
@@ -1,6 +1,12 @@
 # ChangeLog for net-misc/strongswan
-# Copyright 1999-2009 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/net-misc/strongswan/ChangeLog,v 1.77 2009/11/02 13:23:04 wschlich Exp $
+# Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
+# $Header: /var/cvsroot/gentoo-x86/net-misc/strongswan/ChangeLog,v 1.78 2010/02/17 08:49:14 wschlich Exp $
+
+*strongswan-4.3.6 (17 Feb 2010)
+
+  17 Feb 2010; Wolfram Schlich <wschlich@gentoo.org>
+  +strongswan-4.3.6.ebuild:
+  version bump
 
 *strongswan-4.3.5 (02 Nov 2009)
 
diff --git a/net-misc/strongswan/Manifest b/net-misc/strongswan/Manifest
index f6fb7afaa221..ce980e8f4deb 100644
--- a/net-misc/strongswan/Manifest
+++ b/net-misc/strongswan/Manifest
@@ -5,9 +5,11 @@ DIST strongswan-4.2.17.tar.bz2 2734072 RMD160 83237b06b8b9dcfe4338a626439749eb1c
 DIST strongswan-4.3.3.tar.bz2 2666862 RMD160 cf85ffff83c51ab9f9f5a6794397ec4de3a2e527 SHA1 935c822084b332a269821edf1e4a951132f962b2 SHA256 24717a99b0af34059aad2c9ffceaaa02efedab0050278605e493cb489c5f3c73
 DIST strongswan-4.3.4.tar.bz2 2680982 RMD160 4478c6860119400fe478a8fce1a985943a023c0c SHA1 4c3bd24d286c340dc43e8ff8f1f6147b35dc2767 SHA256 6073c244232f2e741233533fd4a13498421398174757c5e42a51afa4bf16600c
 DIST strongswan-4.3.5.tar.bz2 2700284 RMD160 440dba766d6200445ddd0003eb7a7f6ac337b3a3 SHA1 7dc9f39f8bcd30e264225383f069e34ba829c1da SHA256 12b5d4a62dac7ecbc5afa0eb706a8d30d62f8e9dfd552d038b43db962cc7febb
+DIST strongswan-4.3.6.tar.bz2 2831944 RMD160 9cef4ba83e19c17693d09a512e91cdadee1e3beb SHA1 f38c237047f9d81d1af6277eb27f94101188d3bb SHA256 39a311c62f4f2474faf239c0edf6518a14a953b9c2092bbfa473cd34dcb8f5e7
 EBUILD strongswan-4.2.17.ebuild 2812 RMD160 29491eb031f13c780eacc38f3231d0bb476f9cbc SHA1 07d1fbb57fc2aed75a28cf5195ae799f040e4f28 SHA256 ba9672f320e7c8d8bdbf9f861522c3434006d301f45e83bb1f7b27526bc3d17d
 EBUILD strongswan-4.3.3.ebuild 2763 RMD160 26b06c589df8274c41ccc095ba9fdccfb4efb319 SHA1 0ce99ebcdb7332a1efae968868a8ca7c0e316535 SHA256 bef30e93f6ef5722749f9f3b9b841b188f80f75ed947661b9f80f25d98031967
 EBUILD strongswan-4.3.4.ebuild 3778 RMD160 ada414b771a72b7e99e6f00160a3a3729ba5f3c1 SHA1 419b372511d33598f2e7ac732023508aaa779077 SHA256 5aa145b2b61a9a13024e2ba98ef6b017af863cb3b753fc6a8f489418a6688601
 EBUILD strongswan-4.3.5.ebuild 3772 RMD160 452d37562330750e69e0fb2a1477026ee14d08bb SHA1 78e2c4433f0c8e149b66748b827a336eaff75e0e SHA256 b47cce84dada995b35e2f7c89aeb73941268ec17f98590d26dfff624c3c1c42c
-MISC ChangeLog 13749 RMD160 69c6057dba159c560a7ad6c62daa12b29e1154c9 SHA1 5289b7f755be52e6be4f8f99b04b5db2c3aad831 SHA256 2d7ba1fa769334f19c69f136972f7c7169a732d0a5b4d16a009b95467f6f3a20
+EBUILD strongswan-4.3.6.ebuild 3772 RMD160 9902d7d7dcb97c7b4080a44c7cf29dc8ba4aef6d SHA1 eea6fec82ec10d237bf0e0692c44881d2ce35993 SHA256 8b507b876e19ade97fc871a1f2b96dd4691c4c67e5d737fe8e5ddedb9b95ef65
+MISC ChangeLog 13879 RMD160 3bdac3956becdc6ba46a595ecff33e3645fd7d3e SHA1 eff16e6170e9d8dd58ac1901864b0ced79f155b1 SHA256 b566f101231cfc1ff261c37ea29d877fa8a48b21cee232f306465c4a0041c03e
 MISC metadata.xml 790 RMD160 e0f60060a1dfe7281928b16c9418fbe1a8dafbe2 SHA1 ea2e94902df1eb340433f998afceff59642b3ab6 SHA256 99878b2ebdb19513074de656e8e27afd79c272fef8be6128c6af61451615e256
diff --git a/net-misc/strongswan/strongswan-4.3.6.ebuild b/net-misc/strongswan/strongswan-4.3.6.ebuild
new file mode 100644
index 000000000000..695e31ba82ee
--- /dev/null
+++ b/net-misc/strongswan/strongswan-4.3.6.ebuild
@@ -0,0 +1,128 @@
+# Copyright 1999-2010 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/net-misc/strongswan/strongswan-4.3.6.ebuild,v 1.1 2010/02/17 08:49:14 wschlich Exp $
+
+EAPI=2
+inherit eutils linux-info
+
+UGID="ipsec"
+
+DESCRIPTION="Open Source implementation of IPsec for the Linux operating system."
+HOMEPAGE="http://www.strongswan.org/"
+SRC_URI="http://download.strongswan.org/${P}.tar.bz2"
+
+LICENSE="GPL-2 RSA-MD2 RSA-MD5 RSA-PKCS11 DES"
+SLOT="0"
+KEYWORDS="~ppc ~sparc ~x86 ~amd64"
+IUSE="caps cisco curl debug ldap nat smartcard static xml"
+
+COMMON_DEPEND="!net-misc/openswan
+	dev-libs/gmp
+	dev-libs/libgcrypt
+	caps? ( sys-libs/libcap )
+	curl? ( net-misc/curl )
+	ldap? ( net-nds/openldap )
+	smartcard? ( dev-libs/opensc )
+	xml? ( dev-libs/libxml2 )"
+DEPEND="${COMMON_DEPEND}
+	virtual/linux-sources
+	sys-kernel/linux-headers"
+RDEPEND="${COMMON_DEPEND}
+	virtual/logger
+	sys-apps/iproute2"
+
+#src_prepare() {
+#	epatch "${FILESDIR}"/${PN}-4.3.3-install.patch
+#	eautoreconf
+#}
+
+pkg_setup() {
+	linux-info_pkg_setup
+
+	elog "Linux kernel is version ${KV_FULL}"
+
+	if kernel_is 2 6; then
+		elog "This ebuild will set ${P} to use 2.6 native IPsec (KAME)."
+	else
+		eerror "Sorry, no support for your kernel version ${KV_FULL}."
+		die "Install an IPsec enabled 2.6 kernel."
+	fi
+
+	if use caps; then
+		# change to an unprivileged user if libcaps support is requested
+		enewgroup ${UGID}
+		enewuser ${UGID} -1 -1 -1 ${UGID}
+	fi
+}
+
+src_configure() {
+	local myconf=""
+
+	if use caps; then
+		# change to an unprivileged user if libcaps support is requested
+		myconf="${myconf} --with-user=${UGID} --with-group=${UGID}"
+	fi
+
+	# strongswan enables both by default; switch to the user's wish
+	if use static; then
+		myconf="${myconf} --enable-static --disable-shared"
+	else
+		myconf="${myconf} --disable-static --enable-shared"
+	fi
+
+	# TODO: Review new configure options such as networkmanager
+	econf \
+		$(use_with caps capabilities libcap) \
+		$(use_enable curl) \
+		$(use_enable ldap) \
+		$(use_enable xml smp) \
+		$(use_enable smartcard) \
+		$(use_enable cisco cisco-quirks) \
+		$(use_enable debug leak-detective) \
+		$(use_enable nat nat-transport) \
+		${myconf} \
+		|| die "econf failed"
+}
+
+src_install() {
+	einstall || die "einstall failed."
+
+	doinitd "${FILESDIR}"/ipsec
+
+	if use caps; then
+		fowners ipsec:ipsec /etc/ipsec.conf
+	fi
+}
+
+pkg_postinst() {
+	if use caps; then
+		echo
+		elog "strongSwan has been installed without superuser privileges as"
+		elog "requested (USE=caps). There are certain restrictions and"
+		elog "issues regarding non-root operation, so please have a look at:"
+		elog "  http://wiki.strongswan.org/wiki/nonRoot"
+		echo
+		elog "Please be aware that with dropped privileges most leftupdown and"
+		elog "rightupdown scripts will no longer run if they require root privileges."
+		elog "You might want to use sudo to allow the user \"ipsec\" to run"
+		elog "the ipsec helper script (/usr/sbin/ipsec) as root."
+		elog "Example for /etc/sudoers:"
+		elog "  Defaults:ipsec always_set_home,!env_reset"
+		elog "  ipsec ALL=(ALL) NOPASSWD: /usr/sbin/ipsec"
+		elog "Example for a connection block in /etc/ipsec.conf:"
+		elog "  leftupdown=\"sudo ipsec _updown\""
+		echo
+#		elog "And please do not forget to add CAP_NET_ADMIN capabilities to"
+#		elog "your charon and pluto binaries each time you emerge this ebuild."
+#		echo
+#		elog "setcap -v cap_net_admin=ep /usr/libexec/ipsec/pluto"
+#		elog "setcap -v cap_net_admin=ep /usr/libexec/ipsec/charon"
+#		echo
+#		elog "For more information reagrding POSIX capabilities support please"
+#		elog "have a look at http://www.friedhoff.org/posixfilecaps.html"
+#		echo
+	fi
+	elog "The up-to-date manual is available online at:"
+	elog "  http://wiki.strongswan.org/"
+	echo
+}