The protocol has long been replaced by IKEv2 and is officially deprecated since several years (RFC 9395). As a first step to removing support for it completely, this makes the configure option disabled by default and warns users about its use.
129 lines
2.7 KiB
Makefile
129 lines
2.7 KiB
Makefile
#!/usr/bin/make
|
|
|
|
PV = $(SWANVERSION)
|
|
PKG = strongswan-$(PV)
|
|
TAR = $(PKG).tar.bz2
|
|
SRC = https://download.strongswan.org/$(TAR)
|
|
|
|
# can be passed to load sources from a directory instead of a tarball
|
|
ifneq ($(origin SRCDIR), undefined)
|
|
DIR = $(SRCDIR)
|
|
BUILDDIR ?= $(SRCDIR)
|
|
endif
|
|
DIR ?= .
|
|
# can be passed if not building in the source directory
|
|
BUILDDIR ?= $(PKG)
|
|
|
|
NUM_CPUS := $(shell getconf _NPROCESSORS_ONLN)
|
|
|
|
CONFIG_OPTS = \
|
|
--enable-silent-rules \
|
|
--sysconfdir=/etc \
|
|
--with-strongswan-conf=/etc/strongswan.conf.testing \
|
|
--with-random-device=/dev/urandom \
|
|
--disable-load-warning \
|
|
--enable-ikev1 \
|
|
--enable-curl \
|
|
--enable-ldap \
|
|
--enable-eap-aka \
|
|
--enable-eap-aka-3gpp2 \
|
|
--enable-eap-sim \
|
|
--enable-eap-sim-file \
|
|
--enable-eap-simaka-sql \
|
|
--enable-eap-md5 \
|
|
--enable-md4 \
|
|
--enable-eap-mschapv2 \
|
|
--enable-eap-identity \
|
|
--enable-eap-radius \
|
|
--enable-eap-dynamic \
|
|
--enable-eap-tls \
|
|
--enable-eap-ttls \
|
|
--enable-eap-peap \
|
|
--enable-eap-tnc \
|
|
--enable-tnc-pdp \
|
|
--enable-tnc-imc \
|
|
--enable-tnc-imv \
|
|
--enable-tnccs-20 \
|
|
--enable-imc-test \
|
|
--enable-imv-test \
|
|
--enable-imc-scanner \
|
|
--enable-imv-scanner \
|
|
--enable-imc-os \
|
|
--enable-imv-os \
|
|
--enable-imc-attestation \
|
|
--enable-imv-attestation \
|
|
--enable-imc-swima \
|
|
--enable-imv-swima \
|
|
--enable-imc-hcd \
|
|
--enable-imv-hcd \
|
|
--enable-sql \
|
|
--enable-sqlite \
|
|
--enable-attr-sql \
|
|
--enable-mediation \
|
|
--enable-botan \
|
|
--enable-kernel-pfkey \
|
|
--enable-integrity-test \
|
|
--enable-leak-detective \
|
|
--enable-load-tester \
|
|
--enable-test-vectors \
|
|
--enable-socket-default \
|
|
--enable-socket-dynamic \
|
|
--enable-dhcp \
|
|
--enable-farp \
|
|
--enable-connmark \
|
|
--enable-forecast \
|
|
--enable-addrblock \
|
|
--enable-ctr \
|
|
--enable-ccm \
|
|
--enable-gcm \
|
|
--enable-hmac \
|
|
--enable-chapoly \
|
|
--enable-ha \
|
|
--enable-whitelist \
|
|
--enable-xauth-generic \
|
|
--enable-xauth-eap \
|
|
--enable-pkcs12 \
|
|
--enable-unity \
|
|
--enable-unbound \
|
|
--enable-ipseckey \
|
|
--enable-dnscert \
|
|
--enable-acert \
|
|
--enable-cmd \
|
|
--enable-libipsec \
|
|
--enable-kernel-libipsec \
|
|
--enable-stroke \
|
|
--enable-tkm \
|
|
--enable-lookip \
|
|
--enable-des \
|
|
--enable-aes \
|
|
--enable-md5 \
|
|
--enable-sha1 \
|
|
--enable-sha2 \
|
|
--enable-sha3 \
|
|
--enable-gmp \
|
|
--enable-curve25519 \
|
|
--enable-systemd \
|
|
--enable-counters \
|
|
--enable-save-keys \
|
|
--enable-python-wheels \
|
|
--enable-wolfssl \
|
|
--enable-ml
|
|
|
|
export ADA_PROJECT_PATH=/usr/local/ada/lib/gnat
|
|
|
|
all: install
|
|
|
|
$(TAR):
|
|
wget $(SRC)
|
|
|
|
$(PKG): $(TAR)
|
|
tar xfj $(TAR)
|
|
echo "$(SWANVERSION)" > /root/shared/.strongswan-version
|
|
|
|
configure: $(BUILDDIR)
|
|
[ -n "$(QUICK_REBUILD)" ] || (cd $(BUILDDIR) && $(DIR)/configure $(CONFIG_OPTS))
|
|
|
|
install: configure
|
|
cd $(BUILDDIR) && make -j install && \
|
|
cd $(DIR)/src/libcharon/plugins/vici/python && python3 setup.py install
|