Accepted strongswan 5.1.0-2~bpo70+1 (all amd64 i386 source)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 23 Oct 2013 22:11:58 +0200
Source: strongswan
Binary: strongswan libstrongswan strongswan-dbg strongswan-starter strongswan-ike strongswan-nm strongswan-ikev1 strongswan-ikev2
Architecture: all amd64 i386 source
Version: 5.1.0-2~bpo70+1
Distribution: wheezy-backports
Urgency: medium
Maintainer: Rene Mayrhofer <rmayr@debian.org>
Changed-By: Romain Francoise <rfrancoise@debian.org>
Closes: 529854 600326 611846 640928 659879 664190 665612 679745 680722 681312
Description:
libstrongswan - strongSwan utility and crypto library
strongswan-dbg - strongSwan library and binaries - debugging symbols
strongswan-ike - strongSwan Internet Key Exchange (v2) daemon
strongswan-ikev1 - strongswan IKEv1 daemon, transitional package
strongswan-ikev2 - strongswan IKEv2 daemon, transitional package
strongswan - IPsec VPN solution metapackage
strongswan-nm - strongSwan plugin to interact with NetworkManager
strongswan-starter - strongSwan daemon starter and configuration file parser
Changes:
strongswan (5.1.0-2~bpo70+1) wheezy-backports; urgency=low
.
* Rebuild for wheezy-backports.
* debian/control: Add myself to uploaders.
.
strongswan (5.1.0-2) unstable; urgency=medium
.
* urgency=medium since we already spent 16 days in unstable and the fix is
trivial
* debian/control:
- strongswan-ike: only depends on iproute on linux arches.
.
strongswan (5.1.0-1) unstable; urgency=low
.
* New upstream release.
* debian/libstrongswan.install:
- install new rc2, pkcs12 and sshkey plugins.
* debian/control:
- update standards version to 3.9.4.
- add build-dep on dh-autoreconf.
* debian/rules:
- use autoreconf addon to refresh autotools helper files and gain support
for ARM64.
- enable charon-cmd command line tool.
* debian/source/options: ignore files regenerated by autoreconf addon.
* debian/strongswan-ike.install:
- install charon-cmd command and manpage.
* debian/NEWS:
- warn users about charon replacing pluto as IKEv1 daemon and provide some
migration pointers.
.
strongswan (5.0.4-3) experimental; urgency=low
.
* debian/rules, debian/libstrongswan.install:
- only install rdrand plugin on i386 and amd64.
.
strongswan (5.0.4-2) experimental; urgency=low
.
* debian/rules:
- only enable RdRand on i386 and amd64.
.
strongswan (5.0.4-1) experimental; urgency=low
.
* New upstream release.
- Fix for ECDSA signature verification vulnerability (CVE-2013-2944).
* debian/patches:
- 01_fix-manpages refreshed.
- 02_add-LICENSE dropped, included upstream.
- 03_Pass-lo-as-faked-tundev-to-NM-as-it-now-needs-a-vali removed,
included upstream.
- 04-Fixed-IPv6-source-address-lookup dropped, included upstream.
* debian/rules:
- --enable-smartcard, --with-default-pkcs11 and --enable-nat-transport not
valid anymore for ./configure, remove them.
- add --enable-xauth-eap and --enable-xauth-pam.
- remove pluto handling since it's gone
- don't special-case XAuth on kFreeBSD anymore.
- add --enable-attr-sql and --enable-rdrand.
- build using all hardening flags.
- use -Wl,--as-needed -Wl,-O1 for LDFLAGS.
* debian/control:
- drop strongswan-ikev1 package
- rename strongswan-ikev2 package to strongswan-ike for now and makes it
replace strongswan-ikev1 and strongswan-ikev2.
- rephrase long description to remove references to pluto.
- provide transition -ikev{1,2} packages for upgrades.
* debian/strongswan-ikev1.install removed.
* debian/strongswan-ikev2.* renamed to strongswan-ike.
* debian/strongswan-nm.install:
- NetworkManager plugin is now a separate executable.
* debian/libstrongswan.install:
- install new pkcs7, xauth-eap, xauth-generic, xauth-pam and nonce plugins.
- install libpttls files (experimental implementation of PT-TLS, RFC 6876)
- install rdrand plugin.
* debian/strongswan.docs: CREDITS file is gone.
* debian/ipsec.secrets.proto: remove reference to pluto.
* debian/strongswan-starter.* remove references to pluto.
* debian/po: update potfiles for new phrasing.
.
strongswan (4.6.4-6) unstable; urgency=low
.
* debian/rules:
- revert dropping privileges, it breaks too many setups for now and it's
not possible to disable it. reopens #529854 and closes: #680722
* debian/control:
- add Breaks/Replaces strongswan-ikev2 on libstrongswan because of moved
plugins. closes: #681312
.
strongswan (4.6.4-5) unstable; urgency=low
.
[ Yves-Alexis Perez ]
* debian/control:
- and finally make libcap-dev linux-any too...
- make -ikev1 linux-any since pluto can't be build on FreeBSD.
* debian/rules:
- stop installing logcheck rules manually. closes: #679745
- handle non kFreeBSD more carefully closes: #640928
+ don't enable NM and Linux capabilities drop;
+ disable pluto (and xauth plugin);
+ don't enable farp and dhcp, enable kernel-pf{key,route} plugins
* Handle logcheck files from dh_installlogcheck and thus name them correctly
so they are not installed in the wrong package. closes: #679745
* debian/po
- add turkish translation, thanks Atila KOÇ. closes: #659879
* debian/patches:
- 04-Fixed-IPv6-source-address-lookup added, backported from upstream.
Fix IPv6 tunnels, broken because of bad handling of source routing.
.
[ Laurent Bigonville ]
* Do not use multi-arch paths, this makes no sense as only one instance of
the daemon can be run and all libraries are private.
* d/p/03_Pass-lo-as-faked-tundev-to-NM-as-it-now-needs-a-vali.patch: NM now
requires a tundev, pass the loopback interface to make it happy
(thanks to Martin Willi)
* debian/control: Fix Vcs-Browser URL
.
strongswan (4.6.4-4) unstable; urgency=low
.
* debian/control:
- libnm-glib-vpn-dev also is linux-any, fix build-deps.
.
strongswan (4.6.4-3) unstable; urgency=low
.
* debian/strongswan-starter.postrm
- remove strongswan user on purge.
* debian/rules:
- enable gcrypt plugin. closes: #600326
* debian/libstrongswan.install:
- ship gcrypt plugin.
.
strongswan (4.6.4-2) unstable; urgency=low
.
* Upload to unstable.
* debian/rules:
- use the strongswan user. closes: #529854
* debian/control:
- fix libnm-glib-vpn-dev build-dep, it's linux-any.
.
strongswan (4.6.4-1) experimental; urgency=low
.
* New upstream release. closes: #664190
- stop including individual glib headers. closes: #665612
* debian/patches:
- drop all patches, they're all included upstream now.
* debian/*.install:
- drop destination path
- libs are in ipsec folder now
- add libradius, libtls, libtnccs and libsimaka to libstrongswan.
- add tnc-tnccs, pkcs8 and cmac plugins to libstrongswan.
- use multiarch paths
- move ldap, curl, kernel-netlink and attr* plugins to libstrongswan,
since they are used by pluto too. closes: #611846
* debian/control:
- add myself to uploaders, in hope that some others will join.
- update standards version to 3.9.3.
- add depend on adduser to strongswan-starter for use in maintainer
scripts.
- update debhelper build-dep to 9 and add dpkg-dev 1.16.2 build-dep for
hardening support.
- make strongswan-nm linux-any and adjust network-manager-dev build-dep to
only happen on linux arches. closes: #640928
* debian/compat bumped to 9.
* debian/rules:
- enable hardening flags with PIE and bindnow.
- use multiarch paths.
- inconditionnally enable network-manager.
- switch to dh.
- ignore plugins in dh_makeshlibs.
- don't generate maintainer scripts snippets for init scripts, it's
already handled (atlhough we might want to change that later)
- stop bypassing dh_installdocs.
- disable DES and Blowfish plugin as they are under a 4 clauses BSD-like
license.
* debian/libstrongswan.lintian-overrides,
debian/libstrongswan-ikev2.lintian-overrides:
- override warning for hardening flags, we do use them.
* debian/patches:
- 01_fix-manpages added, fix space in NAME section.
- 02_add-LICENSE added, add the license file from upstream not yet present
in tarball.
* debian/copyright completely rewritten.
Checksums-Sha1:
cd83f07b167c2ab6c174a2f2cf4596ccf80ae9d5 2784 strongswan_5.1.0-2~bpo70+1.dsc
725c15c0cfb6b9862390313dd128e6c59af7ae54 136179 strongswan_5.1.0-2~bpo70+1.debian.tar.gz
9f6b5eef683d90e2e23f7e96a5fd8375b01371b3 83784 strongswan_5.1.0-2~bpo70+1_all.deb
bad57f8664ef4d2ea09350d01902a105cb516b16 748576 libstrongswan_5.1.0-2~bpo70+1_amd64.deb
d7cbc97a2391f9e3c1c34686a2b18a35c6174046 7437032 strongswan-dbg_5.1.0-2~bpo70+1_amd64.deb
3279e73162c1565eed3b52e5e81bac7b15303acf 320268 strongswan-starter_5.1.0-2~bpo70+1_amd64.deb
9554a65448bfad72e30d20f0fbaf3b5bf210bade 353380 strongswan-ike_5.1.0-2~bpo70+1_amd64.deb
66033623e4380fffd101985022efc030ddd4d915 80446 strongswan-nm_5.1.0-2~bpo70+1_amd64.deb
4a6ff90abc9196e180778f1392b194189f33231c 66402 strongswan-ikev1_5.1.0-2~bpo70+1_all.deb
39a273ed06c0ab38267958a4ed204b5b9318e833 66394 strongswan-ikev2_5.1.0-2~bpo70+1_all.deb
0c023fdf90bbfcfd3c022fe7a34c28fcb3bc451c 730576 libstrongswan_5.1.0-2~bpo70+1_i386.deb
4fb4469b1d1b090f8ba3cd3d86f706b4c97325fb 7272704 strongswan-dbg_5.1.0-2~bpo70+1_i386.deb
58ff6a8f0a9b7d9882751124d8fce880c6f0ef0d 315180 strongswan-starter_5.1.0-2~bpo70+1_i386.deb
87d6504d67bcc833f5e6ef535e3ac0d52eae662d 354530 strongswan-ike_5.1.0-2~bpo70+1_i386.deb
fc3aec5b8136f794a7faa77d3acb837168549245 80424 strongswan-nm_5.1.0-2~bpo70+1_i386.deb
Checksums-Sha256:
b3a78dbca2dee825fe449000d937e24e9250a6831cb7a88aa9504b548092afbf 2784 strongswan_5.1.0-2~bpo70+1.dsc
33a003f7b0377b8ca82caf5ddfa859c5892becfbe56153f98e4cfa8a9aa2656c 136179 strongswan_5.1.0-2~bpo70+1.debian.tar.gz
cc2d60e275e668b69c8453a31a057e60ae3beba8fbadc7cb76c85fa2aca7da57 83784 strongswan_5.1.0-2~bpo70+1_all.deb
fd7b236543b83838a4676fce45a06e3fcbe532599d87f8270df38a1bf9420131 748576 libstrongswan_5.1.0-2~bpo70+1_amd64.deb
20ea3f474b8a0ab68eb03b53837fc7fd5511e8959722629af17d693266ffcc6f 7437032 strongswan-dbg_5.1.0-2~bpo70+1_amd64.deb
b84bbd7bb347a684ac4b28b09353154081a3108bf5568f45889b48d2ba3a80c2 320268 strongswan-starter_5.1.0-2~bpo70+1_amd64.deb
75f5b2ae28f5f329b635aa6ad89d2a51a5bc90f3bb162cadaf0af028a52c1f25 353380 strongswan-ike_5.1.0-2~bpo70+1_amd64.deb
d3b3f4e8b562c9aed469eee8fcf2b8d5cc0796075a6c3d0c5e18482b10c3a726 80446 strongswan-nm_5.1.0-2~bpo70+1_amd64.deb
158eae591fc6b63ed2eabfe30c1920d0854f3f26d1e81612fb8ba6b0707c97f2 66402 strongswan-ikev1_5.1.0-2~bpo70+1_all.deb
b746f91e2df3084a5b4cc6ec79536a6e616b5597082eab5891c5d4b2db5a6620 66394 strongswan-ikev2_5.1.0-2~bpo70+1_all.deb
243e52c159482034f8d56cdf4bb486e6d4599ea97696a2caebdbf708872f3f1c 730576 libstrongswan_5.1.0-2~bpo70+1_i386.deb
752e2a548f24ed7e45a857bec2d5871da3e1c83e1e555fbfb9179fd7a1e53450 7272704 strongswan-dbg_5.1.0-2~bpo70+1_i386.deb
5c61665e1d9ae7c76e45b37944f41d6e370f37c72675defdd2fb628819035b2d 315180 strongswan-starter_5.1.0-2~bpo70+1_i386.deb
3b0f0ca7a6d16d19a0dd5431d46f49f08f6a99e992a8a95d341cc6eedf857417 354530 strongswan-ike_5.1.0-2~bpo70+1_i386.deb
df08f1c4baada07ed9d2ec3c6646ddf19444522dca4ef015f8a131fb3fa8062b 80424 strongswan-nm_5.1.0-2~bpo70+1_i386.deb
Files:
74e9486f22570bbf52c603f56b6af2dc 2784 net optional strongswan_5.1.0-2~bpo70+1.dsc
73ca30d20b3af61a5d9e91731234ae93 136179 net optional strongswan_5.1.0-2~bpo70+1.debian.tar.gz
e667fc0a2d05e15647b8d7420e19f304 83784 net optional strongswan_5.1.0-2~bpo70+1_all.deb
ec17b6bb5f934f0aece2eed49b0d7be6 748576 net optional libstrongswan_5.1.0-2~bpo70+1_amd64.deb
1f2910cde78d77c79cc8dd03529460ab 7437032 debug extra strongswan-dbg_5.1.0-2~bpo70+1_amd64.deb
96919e30dbc4411fdb866fc07520692f 320268 net optional strongswan-starter_5.1.0-2~bpo70+1_amd64.deb
2af69cd63b4e11f726214ecd8050ceec 353380 net optional strongswan-ike_5.1.0-2~bpo70+1_amd64.deb
484283b191374d5c140b3318b69ff85e 80446 net optional strongswan-nm_5.1.0-2~bpo70+1_amd64.deb
5a2c8026094e92ecd3ed62ce9a988153 66402 oldlibs extra strongswan-ikev1_5.1.0-2~bpo70+1_all.deb
01e05d16cf229e1a290b9ef7cde4605a 66394 oldlibs extra strongswan-ikev2_5.1.0-2~bpo70+1_all.deb
c1adddc36a7a0f2a25b1552225b8a69b 730576 net optional libstrongswan_5.1.0-2~bpo70+1_i386.deb
ff8d64873a1c1db7e955338b81e61410 7272704 debug extra strongswan-dbg_5.1.0-2~bpo70+1_i386.deb
a73a662ed9f9be19fac6e775cd92535b 315180 net optional strongswan-starter_5.1.0-2~bpo70+1_i386.deb
59fd2eb4e4cbd70d4d5c0968a5c7e71d 354530 net optional strongswan-ike_5.1.0-2~bpo70+1_i386.deb
8e85a2271ceabd4f604ce15391d1fc45 80424 net optional strongswan-nm_5.1.0-2~bpo70+1_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.15 (GNU/Linux)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=fcW4
-----END PGP SIGNATURE-----
Reply to: