[strongSwan] updated packages for Ubuntu
Florin Andrei
florin at andrei.myip.org
Wed Oct 28 02:29:43 CET 2015
Made it work with the build script below. Some packages need to be
installed to finish the build; this might be the whole build
prerequisite list but I'm not 100% sure:
apt-get install libgmp3-dev libxml2-dev libtspi-dev libjson-c-dev
libsqlite3-dev network-manager-dev libnm-glib-vpn-dev libnm-dev
libpam-dev
After installing the package on the VPN instance, the file
/etc/tnc_config needs to be created with the content:
IMV "Test" /opt/strongswan/lib/ipsec/imcvs/imv-test.so
IMV "Scanner" /opt/strongswan/lib/ipsec/imcvs/imv-scanner.so
Also, the libtspi1 package needs to be installed after installing the SS
package. I know these steps could be automated from the SS package but I
didn't have time for that.
The build script requires fpm:
https://github.com/jordansissel/fpm
I've tested the resulting package on Ubuntu 14.04 and it seems to work
well.
This is the build script:
#######################################
#!/bin/bash
ver="5.3.3"
iter="1trusty"
epoch="1"
rm -f *.deb
rm -rf strongswan-${ver}
rm -rf fake-root
mkdir fake-root
tar -jxvf strongswan-${ver}.tar.bz2
pushd strongswan-${ver}
./configure --prefix=/opt/strongswan \
--disable-static \
--with-ipsec-script=strongswan \
--with-fips-mode=0 \
--with-tss=trousers \
--enable-nm \
--enable-openssl \
--enable-md4 \
--enable-xauth-eap \
--enable-xauth-pam \
--enable-xauth-noauth \
--enable-eap-md5 \
--enable-eap-gtc \
--enable-eap-tls \
--enable-eap-ttls \
--enable-eap-peap \
--enable-eap-mschapv2 \
--enable-farp \
--enable-dhcp \
--enable-sqlite \
--enable-tnc-ifmap \
--enable-tnc-pdp \
--enable-imc-test \
--enable-imv-test \
--enable-imc-scanner \
--enable-imv-scanner \
--enable-imc-attestation \
--enable-imv-attestation \
--enable-imv-os \
--enable-imc-os \
--enable-imc-swid \
--enable-imv-swid \
--enable-eap-tnc \
--enable-tnccs-20 \
--enable-tnccs-11 \
--enable-tnccs-dynamic \
--enable-tnc-imc \
--enable-tnc-imv \
--enable-eap-radius \
--enable-curl \
--enable-eap-identity \
--enable-cmd \
--enable-acert \
--enable-aikgen \
--enable-vici \
--enable-swanctl \
--enable-kernel-libipsec \
--enable-unity
make
make install DESTDIR=`pwd`/../fake-root
popd
fpm -s dir -t deb -n strongswan -v ${ver} --iteration ${iter} --epoch
${epoch} -C fake-root \
--license GPL --maintainer "Florin Andrei" \
--vendor email at redacted.com --url "https://www.strongswan.org/" \
--description "the OpenSource IPsec-based VPN Solution"
#######################################
--
Florin Andrei
http://florin.myip.org/
More information about the Users
mailing list