blob: 6cc5ee3a0d3be3d7fedc61bf1c953258a54e92be (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
|
# Copyright 1999-2008 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/net-misc/openswan/openswan-2.4.11.ebuild,v 1.3 2008/06/28 21:28:48 gentoofan23 Exp $
inherit eutils linux-info
DESCRIPTION="Open Source implementation of IPsec for the Linux operating system (was SuperFreeS/WAN)."
HOMEPAGE="http://www.openswan.org/"
SRC_URI="http://www.openswan.org/download/${P}.tar.gz"
LICENSE="GPL-2"
SLOT="0"
KEYWORDS="amd64 ~ppc ~sparc x86"
IUSE="curl ldap smartcard extra-algorithms weak-algorithms"
COMMON_DEPEND="!net-misc/strongswan
>=dev-libs/gmp-4.2.1
smartcard? ( dev-libs/opensc )
curl? ( net-misc/curl )
ldap? ( net-nds/openldap )"
DEPEND="${COMMON_DEPEND}
virtual/linux-sources"
RDEPEND="${COMMON_DEPEND}
virtual/logger
sys-apps/iproute2"
pkg_setup() {
linux-info_pkg_setup
if kernel_is 2 6; then
einfo "This ebuild will set ${P} to use 2.6 native IPsec (KAME)."
einfo "KLIPS will not be compiled/installed."
MYMAKE="programs"
elif kernel_is 2 4; then
if ! [[ -d "${KERNEL_DIR}/net/ipsec" ]]; then
eerror "You need to have an IPsec enabled 2.4.x kernel."
eerror "Ensure you have one running and make a symlink to it in /usr/src/linux"
die
fi
einfo "Using patched-in IPsec code for kernel 2.4"
einfo "Your kernel only supports KLIPS for kernel level IPsec."
MYMAKE="confcheck programs"
else
die "Unsupported kernel version"
fi
}
src_unpack() {
unpack ${A}
cd "${S}"
epatch "${FILESDIR}"/${P}-gentoo.patch
epatch "${FILESDIR}"/${P}-implicit-decl.patch
}
get_make_options() {
echo KERNELSRC=\"${KERNEL_DIR}\" \
FINALCONFDIR=/etc/ipsec \
INC_RCDEFAULT=/etc/init.d \
INC_USRLOCAL=/usr \
INC_MANDIR=share/man \
FINALEXAMPLECONFDIR=/usr/share/doc/${P} \
FINALDOCDIR=/usr/share/doc/${P} \
DESTDIR=\"${D}\" \
USERCOMPILE=\"${CFLAGS}\"
if use smartcard ; then
echo USE_SMARTCARD=true
fi
if use extra-algorithms ; then
echo USE_EXTRACRYPTO=true
fi
if use weak-algorithms ; then
echo USE_WEAKSTUFF=true
fi
echo USE_OE=false # by default, turn off Opportunistic Encryption
local USETHREADS=false
if use curl; then
echo USE_LIBCURL=true
USETHREADS=true
fi
if use ldap; then
echo USE_LDAP=true
USETHREADS=true
fi
echo HAVE_THREADS=${USETHREADS}
}
src_compile() {
eval set -- $(get_make_options)
emake "$@" \
${MYMAKE} || die "emake failed"
}
src_install() {
eval set -- $(get_make_options)
emake "$@" \
install || die "emake install failed"
dosym /etc/ipsec/ipsec.d /etc/ipsec.d
doinitd "${FILESDIR}"/ipsec || die "failed to install init script"
dodir /var/run/pluto || die "failed to create /var/run/pluto"
}
pkg_preinst() {
# Try to fix previous openswan-2.4.9 blooper (#193824)
if [[ "${ROOT}" == / ]] && has_version "=net-misc/openswan-2.4.9" ; then
elog "Trying to remove empty {rundir,subsysdir} erroneously created by openswan-2.4.9"
local base dir
for base in / /root/ /etc/ ; do
for dir in rundir subsysdir ; do
if [[ -d "${base}${dir}" ]]; then
rmdir "${base}${dir}" \
&& elog "Empty directory ${base}${dir} has been removed" \
|| ewarn "Failed to remove ${base}${dir} (perhaps some other package owns it?)"
fi
done
done
fi
}
pkg_postinst() {
if kernel_is 2 6; then
CONFIG_CHECK="~NET_KEY ~INET_XFRM_MODE_TRANSPORT ~INET_XFRM_MODE_TUNNEL ~INET_AH ~INET_ESP ~INET_IPCOMP"
WARNING_INET_AH="CONFIG_INET_AH:\tmissing IPsec AH support (needed if you want only authentication)"
WARNING_INET_ESP="CONFIG_INET_ESP:\tmissing IPsec ESP support (needed if you want authentication and encryption)"
WARNING_INET_IPCOMP="CONFIG_INET_IPCOMP:\tmissing IPsec Payload Compression (required for compress=yes)"
check_extra_config
fi
}
|
GitWeb