openwrt/packages
1
0
Fork 0
mirror of https://github.com/openwrt/packages.git synced 2026-05-31 06:51:51 +08:00
Code Issues Packages Projects Releases Wiki Activity

strongswan: drop deprecated crypto protocols

Browse Source 
AEAD, CCM, MD4, and MS CHAP v2 are all deprecated due to insecurity.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
This commit is contained in:
Philip Prindeville
2026-05-24 13:23:01 -06:00
parent 3fddbe2e07
commit a05eeb5574
2 changed files with 16 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
net/strongswan/Config.in
+5
View File
@@ -14,6 +14,11 @@ config STRONGSWAN_ROUTING_TABLE_PRIO
prompt "Set the IPsec routing table priority" prompt "Set the IPsec routing table priority"
default "220" default "220"
config STRONGSWAN_INCLUDE_INSECURE
bool
prompt "Include cryptographically weak protocols"
default !PACKAGE_libopenssl
comment "Packages" comment "Packages"
endif endif
net/strongswan/Makefile
+11 -10
View File
@@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
PKG_NAME:=strongswan PKG_NAME:=strongswan
PKG_VERSION:=6.0.6 PKG_VERSION:=6.0.6
PKG_RELEASE:=1 PKG_RELEASE:=2
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2
PKG_SOURCE_URL:=https://download.strongswan.org/ https://download2.strongswan.org/ PKG_SOURCE_URL:=https://download.strongswan.org/ https://download2.strongswan.org/
@@ -26,7 +26,7 @@ PKG_MOD_AVAILABLE:= \
attr \ attr \
attr-sql \ attr-sql \
blowfish \ blowfish \
ccm \ $(if $(CONFIG_STRONGSWAN_INCLUDE_INSECURE),ccm,) \
chapoly \ chapoly \
cmac \ cmac \
constraints \ constraints \
@@ -43,7 +43,7 @@ PKG_MOD_AVAILABLE:= \
eap-dynamic \ eap-dynamic \
eap-identity \ eap-identity \
eap-md5 \ eap-md5 \
eap-mschapv2 \ $(if $(CONFIG_STRONGSWAN_INCLUDE_INSECURE),eap-mschapv2,) \
eap-radius \ eap-radius \
eap-tls \ eap-tls \
farp \ farp \
@@ -62,7 +62,7 @@ PKG_MOD_AVAILABLE:= \
led \ led \
load-tester \ load-tester \
lookip \ lookip \
md4 \ $(if $(CONFIG_STRONGSWAN_INCLUDE_INSECURE),md4,) \
md5 \ md5 \
mgf1 \ mgf1 \
mysql \ mysql \
@@ -103,7 +103,8 @@ PKG_MOD_AVAILABLE:= \
PKG_CONFIG_DEPENDS:= \ PKG_CONFIG_DEPENDS:= \
CONFIG_STRONGSWAN_ROUTING_TABLE \ CONFIG_STRONGSWAN_ROUTING_TABLE \
CONFIG_STRONGSWAN_ROUTING_TABLE_PRIO \ CONFIG_STRONGSWAN_ROUTING_TABLE_PRIO \
$(patsubst %,CONFIG_PACKAGE_strongswan-mod-%,$(PKG_MOD_AVAILABLE)) \ CONFIG_STRONGSWAN_INCLUDE_INSECURE \
$(patsubst %,CONFIG_PACKAGE_strongswan-mod-%,$(PKG_MOD_AVAILABLE))
PKG_FIXUP:=autoreconf PKG_FIXUP:=autoreconf
PKG_INSTALL:=1 PKG_INSTALL:=1
@@ -130,7 +131,7 @@ define Package/strongswan
$(call Package/strongswan/Default) $(call Package/strongswan/Default)
MENU:=1 MENU:=1
DEPENDS:= +libpthread +ip \ DEPENDS:= +libpthread +ip \
+kmod-crypto-aead \ +STRONGSWAN_INCLUDE_INSECURE:kmod-crypto-aead \
+kmod-crypto-authenc \ +kmod-crypto-authenc \
+kmod-crypto-cbc \ +kmod-crypto-cbc \
+kmod-lib-zlib-inflate \ +kmod-lib-zlib-inflate \
@@ -166,7 +167,7 @@ $(call Package/strongswan/Default)
+strongswan-mod-attr \ +strongswan-mod-attr \
+strongswan-mod-attr-sql \ +strongswan-mod-attr-sql \
+strongswan-mod-blowfish \ +strongswan-mod-blowfish \
+strongswan-mod-ccm \ +STRONGSWAN_INCLUDE_INSECURE:strongswan-mod-ccm \
+strongswan-mod-chapoly \ +strongswan-mod-chapoly \
+strongswan-mod-cmac \ +strongswan-mod-cmac \
+strongswan-mod-constraints \ +strongswan-mod-constraints \
@@ -183,7 +184,7 @@ $(call Package/strongswan/Default)
+strongswan-mod-eap-dynamic \ +strongswan-mod-eap-dynamic \
+strongswan-mod-eap-identity \ +strongswan-mod-eap-identity \
+strongswan-mod-eap-md5 \ +strongswan-mod-eap-md5 \
+strongswan-mod-eap-mschapv2 \ +STRONGSWAN_INCLUDE_INSECURE:strongswan-mod-eap-mschapv2 \
+strongswan-mod-eap-radius \ +strongswan-mod-eap-radius \
+strongswan-mod-eap-tls \ +strongswan-mod-eap-tls \
+strongswan-mod-farp \ +strongswan-mod-farp \
@@ -200,7 +201,7 @@ $(call Package/strongswan/Default)
+strongswan-mod-led \ +strongswan-mod-led \
+strongswan-mod-load-tester \ +strongswan-mod-load-tester \
+strongswan-mod-lookip \ +strongswan-mod-lookip \
+strongswan-mod-md4 \ +STRONGSWAN_INCLUDE_INSECURE:strongswan-mod-md4 \
+strongswan-mod-md5 \ +strongswan-mod-md5 \
+strongswan-mod-mgf1 \ +strongswan-mod-mgf1 \
+strongswan-mod-mysql \ +strongswan-mod-mysql \
@@ -467,7 +468,7 @@ CONFIGURE_ARGS+= \
--with-urandom-device=/dev/urandom \ --with-urandom-device=/dev/urandom \
--with-routing-table="$(call qstrip,$(CONFIG_STRONGSWAN_ROUTING_TABLE))" \ --with-routing-table="$(call qstrip,$(CONFIG_STRONGSWAN_ROUTING_TABLE))" \
--with-routing-table-prio="$(call qstrip,$(CONFIG_STRONGSWAN_ROUTING_TABLE_PRIO))" \ --with-routing-table-prio="$(call qstrip,$(CONFIG_STRONGSWAN_ROUTING_TABLE_PRIO))" \
$(foreach m,$(PKG_MOD_AVAILABLE), \ $(foreach m,$(PKG_MOD_AVAILABLE) ccm eap-mschapv2 md4, \
$(if $(CONFIG_PACKAGE_strongswan-mod-$(m)),--enable-$(m),--disable-$(m)) \ $(if $(CONFIG_PACKAGE_strongswan-mod-$(m)),--enable-$(m),--disable-$(m)) \
) \ ) \
ac_cv_search___atomic_load=no ac_cv_search___atomic_load=no