blob: c76bd6646c5119e2931cf46d3e91f07f2fb6b602 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
|
# Copyright 1999-2007 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/net-misc/openswan/openswan-2.4.9-r1.ebuild,v 1.1 2007/09/26 08:14:22 mrness Exp $
inherit eutils linux-info
DESCRIPTION="Open Source implementation of IPsec for the Linux operating system (was SuperFreeS/WAN)."
HOMEPAGE="http://www.openswan.org/"
SRC_URI="http://www.openswan.org/download/${P}.tar.gz"
LICENSE="GPL-2"
SLOT="0"
KEYWORDS="amd64 ~ppc ~sparc x86"
IUSE="smartcard extra-algorithms weak-algorithms"
COMMON_DEPEND="!net-misc/strongswan
>=dev-libs/gmp-4.2.1
smartcard? ( dev-libs/opensc )"
DEPEND="${COMMON_DEPEND}
virtual/linux-sources"
RDEPEND="${COMMON_DEPEND}
virtual/logger
sys-apps/iproute2"
pkg_setup() {
linux-info_pkg_setup
if kernel_is 2 6; then
einfo "This ebuild will set ${P} to use 2.6 native IPsec (KAME)."
einfo "KLIPS will not be compiled/installed."
MYMAKE="programs"
elif kernel_is 2 4; then
if ! [ -d /usr/src/linux/net/ipsec ]; then
eerror "You need to have an IPsec enabled 2.4.x kernel."
eerror "Ensure you have one running and make a symlink to it in /usr/src/linux"
die
fi
einfo "Using patched-in IPsec code for kernel 2.4"
einfo "Your kernel only supports KLIPS for kernel level IPsec."
MYMAKE="confcheck programs"
else
die "Unsupported kernel version"
fi
}
src_unpack() {
unpack ${A}
cd "${S}"
epatch "${FILESDIR}"/${P}-gentoo.patch
epatch "${FILESDIR}"/${P}-mkdir.patch
}
get_make_options() {
local MY_MAKE_OPTIONS="FINALCONFDIR=/etc/ipsec \
INC_RCDEFAULT=/etc/init.d \
INC_USRLOCAL=/usr \
INC_MANDIR=share/man \
FINALEXAMPLECONFDIR=/usr/share/doc/${P} \
FINALDOCDIR=/usr/share/doc/${P}"
if use smartcard ; then
MY_MAKE_OPTIONS="${MY_MAKE_OPTIONS} USE_SMARTCARD=true"
fi
if use extra-algorithms ; then
MY_MAKE_OPTIONS="${MY_MAKE_OPTIONS} USE_EXTRACRYPTO=true"
fi
if use weak-algorithms ; then
MY_MAKE_OPTIONS="${MY_MAKE_OPTIONS} USE_WEAKSTUFF=true"
fi
echo ${MY_MAKE_OPTIONS}
}
src_compile() {
emake \
DESTDIR="${D}" \
USERCOMPILE="${CFLAGS}" \
$(get_make_options) \
${MYMAKE} || die "emake failed"
}
src_install() {
emake \
DESTDIR="${D}" \
USERCOMPILE="${CFLAGS}" \
$(get_make_options) \
install || die "emake install failed"
dosym /etc/ipsec/ipsec.d /etc/ipsec.d
doinitd "${FILESDIR}"/ipsec || die "failed to install init script"
dodir /var/run/pluto || die "failed to create /var/run/pluto"
}
pkg_preinst() {
# Try to fix previous openswan-2.4.9 blooper (#193824)
if [[ "${ROOT}" == / ]] && has_version "=net-misc/openswan-2.4.9" ; then
elog "Trying to remove empty {rundir,subsysdir} erroneously created by openswan-2.4.9"
local base dir
for base in / /root/ /etc/ ; do
for dir in rundir subsysdir ; do
if [[ -d "${base}${dir}" ]]; then
rmdir "${base}${dir}" \
&& elog "Empty directory ${base}${dir} has been removed" \
|| ewarn "Failed to remove ${base}${dir} (perhaps some other package owns it?)"
fi
done
done
fi
}
pkg_postinst() {
if kernel_is 2 6; then
CONFIG_CHECK="~NET_KEY ~INET_XFRM_MODE_TRANSPORT ~INET_XFRM_MODE_TUNNEL ~INET_AH ~INET_ESP ~INET_IPCOMP"
WARNING_INET_AH="CONFIG_INET_AH:\tmissing IPsec AH support (needed if you want only authentication)"
WARNING_INET_ESP="CONFIG_INET_ESP:\tmissing IPsec ESP support (needed if you want authentication and encryption)"
WARNING_INET_IPCOMP="CONFIG_INET_IPCOMP:\tmissing IPsec Payload Compression (required for compress=yes)"
check_extra_config
fi
}
|
GitWeb