All New cutting edge freeswan (sha2, aes, blowfish... and more!)

freeswan-1.98b-r2.ebuild (text/plain), 6.26 KB, created by Philipp Morger on 2002-09-12 10:16:33 UTC

# Copyright 1999-2002 Gentoo Technologies, Inc.
# Distributed under the terms of the GNU General Public License, v2 or later
# $Header: /home/cvsroot/gentoo-x86/net-misc/freeswan/freeswan-1.98b.ebuild,v 1.2 2002/07/07 06:38:12 phoenix Exp $

X509_PATCH=0.9.15
S=${WORKDIR}/${P}
DESCRIPTION="FreeS/WAN IPSec Userspace Utilities with X.509 Patches"
SRC_URI="ftp://ftp.xs4all.nl/pub/crypto/freeswan/${P}.tar.gz
	 http://www.strongsec.com/freeswan/x509patch-${X509_PATCH}-${P}.tar.gz
	 http://www.osep.mendoza.gov.ar/juanjo/ipsec/freeswan-alg-0.8.0-BASE-common.diff.gz
	 http://www.osep.mendoza.gov.ar/juanjo/ipsec/freeswan-alg-0.8.0-BASE-klips.diff.gz
	 http://www.osep.mendoza.gov.ar/juanjo/ipsec/freeswan-alg-0.8.0-BASE-pluto_with_x509.diff.gz
	 http://www.osep.mendoza.gov.ar/juanjo/ipsec/freeswan-alg-0.8.0-auth-md5.diff.gz
	 http://www.osep.mendoza.gov.ar/juanjo/ipsec/freeswan-alg-0.8.0-auth-sha1.diff.gz
	 http://www.osep.mendoza.gov.ar/juanjo/ipsec/freeswan-alg-0.8.0-auth-sha2.diff.gz
	 http://www.osep.mendoza.gov.ar/juanjo/ipsec/freeswan-alg-0.8.0-enc-3des.diff.gz
	 http://www.osep.mendoza.gov.ar/juanjo/ipsec/freeswan-alg-0.8.0-enc-aes.diff.gz
	 http://www.osep.mendoza.gov.ar/juanjo/ipsec/freeswan-alg-0.8.0-enc-blowfish.diff.gz
	 http://www.osep.mendoza.gov.ar/juanjo/ipsec/freeswan-alg-0.8.0-enc-cast.diff.gz
	 http://www.osep.mendoza.gov.ar/juanjo/ipsec/freeswan-alg-0.8.0-enc-null.diff.gz
	 http://www.osep.mendoza.gov.ar/juanjo/ipsec/freeswan-alg-0.8.0-enc-serpent.diff.gz
	 http://www.osep.mendoza.gov.ar/juanjo/ipsec/freeswan-alg-0.8.0-enc-twofish.diff.gz"

HOMEPAGE="http://www.freeswan.org"
DEPEND="virtual/glibc
        virtual/linux-sources
	>=dev-libs/gmp-3.1.1"
LICENSE="GPL-2"
RDEPEND=""
SLOT="0"
KEYWORDS="x86"

pkg_setup() {
    [ -d /usr/src/linux/net/ipsec ] || {
		echo You need to have the crypto-enabled version of Gentoo Sources
		echo with a symlink to it in /usr/src/linux in order to have IPSec
		echo kernel compatibility.  Please emerge sys-kernel/crypto-sources, 
		echo compile an IPSec-enabled kernel and attempt this ebuild again.
		exit 1
	}
}

src_unpack() {

	unpack ${A}
    cd freeswan-1.98b

	echo "Entering: `pwd`"
    patch -p1 < ${FILESDIR}/freeswan-gentoo-cflags.patch                    || die
    sed 's:/etc/ipsec.d:/etc/ipsec/ipsec.d:g' ${WORKDIR}/x509patch-${X509_PATCH}-${P}/freeswan.diff | patch -p1 || die
    patch -p1 < ${WORKDIR}/freeswan-alg-0.8.0-BASE-common.diff              || die
    patch -p1 < ${WORKDIR}/freeswan-alg-0.8.0-BASE-klips.diff               || die
    patch -p1 < ${WORKDIR}/freeswan-alg-0.8.0-BASE-pluto_with_x509.diff     || die
    patch -p1 < ${WORKDIR}/freeswan-alg-0.8.0-auth-md5.diff                 || die
    patch -p1 < ${WORKDIR}/freeswan-alg-0.8.0-auth-sha1.diff                || die
    patch -p1 < ${WORKDIR}/freeswan-alg-0.8.0-auth-sha2.diff                || die
    patch -p1 < ${WORKDIR}/freeswan-alg-0.8.0-enc-3des.diff                 || die
    patch -p1 < ${WORKDIR}/freeswan-alg-0.8.0-enc-aes.diff                  || die
    patch -p1 < ${WORKDIR}/freeswan-alg-0.8.0-enc-blowfish.diff             || die
    patch -p1 < ${WORKDIR}/freeswan-alg-0.8.0-enc-cast.diff                 || die
    patch -p1 < ${WORKDIR}/freeswan-alg-0.8.0-enc-null.diff                 || die
    patch -p1 < ${WORKDIR}/freeswan-alg-0.8.0-enc-serpent.diff              || die
    patch -p1 < ${WORKDIR}/freeswan-alg-0.8.0-enc-twofish.diff              || die

}

src_compile() {
    echo "Entering: `pwd`"
	make	 				   	\
		DESTDIR=${D}				\
		USERCOMPILE="${CFLAGS}"			\
		FINALCONFDIR=/etc/ipsec			\
		INC_RCDEFAULT=/etc/init.d		\
		INC_USRLOCAL=/usr			\
		INC_MANDIR=share/man			\
		confcheck programs || die
}

pkg_preinst() {
    cd ${S}
    echo "Entering: `pwd`"

    if (grep IPSEC /usr/src/linux/.config); then
      echo "Good, you have already a configured kernel..."
      echo "    hope you've done it right!"
    else
      echo "CONFIG_IPSEC=y" >>/usr/src/linux/.config
      echo "CONFIG_IPSEC_IPIP=y" >>/usr/src/linux/.config
      echo "CONFIG_IPSEC_AH=y" >>/usr/src/linux/.config
      echo "# CONFIG_IPSEC_AUTH_HMAC_MD5 is not set" >>/usr/src/linux/.config
      echo "# CONFIG_IPSEC_AUTH_HMAC_SHA1 is not set" >>/usr/src/linux/.config
      echo "CONFIG_IPSEC_ESP=y" >>/usr/src/linux/.config
      echo "# CONFIG_IPSEC_ENC_3DES is not set" >>/usr/src/linux/.config
      echo "CONFIG_IPSEC_ALG=y" >>/usr/src/linux/.config
      echo "# CONFIG_IPSEC_ALG_MD5 is not set" >>/usr/src/linux/.config
      echo "CONFIG_IPSEC_ALG_SHA1=y" >>/usr/src/linux/.config
      echo "CONFIG_IPSEC_ALG_SHA2=y" >>/usr/src/linux/.config
      echo "CONFIG_IPSEC_ALG_3DES=y" >>/usr/src/linux/.config
      echo "CONFIG_IPSEC_ALG_AES=y" >>/usr/src/linux/.config
      echo "CONFIG_IPSEC_ALG_BLOWFISH=y" >>/usr/src/linux/.config
      echo "# CONFIG_IPSEC_ALG_CAST is not set" >>/usr/src/linux/.config
      echo "# CONFIG_IPSEC_ALG_NULL is not set" >>/usr/src/linux/.config
      echo "# CONFIG_IPSEC_ALG_SERPENT is not set" >>/usr/src/linux/.config
      echo "# CONFIG_IPSEC_ALG_TWOFISH is not set" >>/usr/src/linux/.config
      echo "CONFIG_IPSEC_IPCOMP=y" >>/usr/src/linux/.config
      echo "CONFIG_IPSEC_DEBUG=y" >>/usr/src/linux/.config
    fi

    make precheck verset insert ocf confcheck programs install
}

plg_postinst() {
    echo "Your Kernel-Source has been updated"
    echo "   you may have to build/install the new kernel/modules"
    echo "The New Feature may be found under:"
    echo "      /Network Options/IP Security Protocol/"
    echo "The enhanced Algos are found under:"
    echo "      /Network Options/IP Security Protocol/IPSEC Modular Extensions"
    echo "Please note that"
    echo      "\"IPSEC:Authentication Header\""
    echo      " and "
    echo      "\"IPSEC:Encapsulating Security Payload\""
    echo      " still need to be enabled"
}

src_install() {
	
	# try make prefix=${D}/usr install

	make 						\
		DESTDIR=${D}				\
		USERCOMPILE="${CFLAGS}"			\
		FINALCONFDIR=/etc/ipsec			\
		INC_RCDEFAULT=/etc/init.d		\
		INC_USRLOCAL=/usr			\
		INC_MANDIR=share/man			\
		install || die

	newdoc ${WORKDIR}/x509patch-${X509_PATCH}-${P}/README README.x509
    newdoc ${WORKDIR}/x509patch-${X509_PATCH}-${P}/CHANGES CHANGES.x509
    newdoc ${WORKDIR}/x509patch-${X509_PATCH}-${P}/ipsec.secrets.template ipsec.secrets.x509
    dodoc INSTALL COPYING CREDITS BUGS CHANGES README doc/*
}