[packages/strongswan] Initial update to 6.0.4 (FC style)

Tue Feb 3 14:56:12 CET 2026

commit 84e5d9bef7008f161dc838a23224e5fe774d3896
Author: Arkadiusz Miśkiewicz <arekm at maven.pl>
Date:   Tue Feb 3 14:55:29 2026 +0100

    Initial update to 6.0.4 (FC style)

 strongswan.spec          | 381 +++++++++++++++++++++++++++++++++++++++++------
 tmpfiles-strongswan.conf |   1 +
 2 files changed, 340 insertions(+), 42 deletions(-)
---

diff --git a/strongswan.spec b/strongswan.spec
index 7df4adb..3af9b45 100644
--- a/strongswan.spec
+++ b/strongswan.spec
@@ -1,24 +1,130 @@
+%bcond_without	python3
+%bcond_without	perl
+%bcond_with		tests
 Summary:	IPsec-based VPN Solution for Linux
 Name:		strongswan
-Version:	5.6.3
+Version:	6.0.4
 Release:	0.1
 License:	GPL v2
 Group:		Networking/Daemons
 Source0:	http://download.strongswan.org/%{name}-%{version}.tar.bz2
-# Source0-md5:	a6a28eeb22aa58080a7581771a5b63f9
+# Source0-md5:	f6b78a99e95179b6a65df218d75da7ca
+Source1:	tmpfiles-strongswan.conf
 URL:		http://www.strongswan.org/
 BuildRequires:	autoconf
 BuildRequires:	automake
+BuildRequires:	curl-devel
+BuildRequires:	gettext-devel
 BuildRequires:	gmp-devel >= 4.1.5
+BuildRequires:	iptables-devel
+BuildRequires:	json-c-devel
 BuildRequires:	libcap-devel
+BuildRequires:	libgcrypt-devel
 BuildRequires:	libtool
+BuildRequires:	libxml2-devel
+BuildRequires:	openldap-devel
+BuildRequires:	openssl-devel
+BuildRequires:	pam-devel
 BuildRequires:	pkgconfig
+BuildRequires:	sqlite-devel
+BuildRequires:	systemd-devel
+BuildRequires:	tpm2-tss-devel
+%if %{with python3}
+BuildRequires:	python3-build
+BuildRequires:	python3-daemon
+BuildRequires:	python3-devel
+BuildRequires:	python3-pytest
+BuildRequires:	python3-setuptools
+%endif
+%if %{with perl}
+BuildRequires:	perl-devel
+BuildRequires:	perl-devel
+%endif
+BuildRequires:	NetworkManager-devel
+
 BuildRoot:	%{tmpdir}/%{name}-%{version}-root-%(id -u -n)
 
 %description
 strongSwan is an OpenSource IPsec solution for the Linux operating
 system.
 
+%package libipsec
+Summary:	Strongswan's libipsec backend
+
+%description libipsec
+The kernel-libipsec plugin provides an IPsec backend that works
+entirely in userland, using TUN devices and its own IPsec
+implementation libipsec.
+
+%package charon-nm
+Summary:	NetworkManager plugin for Strongswan
+Requires:	dbus
+
+%description charon-nm
+NetworkManager plugin integrates a subset of Strongswan capabilities
+to NetworkManager.
+
+%package sqlite
+Summary:	SQLite support for strongSwan
+Requires:	strongswan = %{version}-%{release}
+
+%description sqlite
+The sqlite plugin adds an SQLite database backend to strongSwan.
+
+%package tnc-imcvs
+Summary:	Trusted network connect (TNC)'s IMC/IMV functionality
+Requires:	strongswan = %{version}-%{release}
+Requires:	strongswan-sqlite = %{version}-%{release}
+
+%description tnc-imcvs
+This package provides Trusted Network Connect's (TNC) architecture
+support. It includes support for TNC client and server (IF-TNCCS), IMC
+and IMV message exchange (IF-M), interface between IMC/IMV and TNC
+client/server (IF-IMC and IF-IMV). It also includes PTS based IMC/IMV
+for TPM based remote attestation, SWID IMC/IMV, and OS IMC/IMV. It's
+IMC/IMV dynamic libraries modules can be used by any third party TNC
+Client/Server implementation possessing a standard IF-IMC/IMV
+interface. In addition, it implements PT-TLS to support TNC over TLS.
+
+%if %{with python3}
+%package -n python3-vici
+Summary:	Strongswan Versatile IKE Configuration Interface python bindings
+BuildArch:	noarch
+
+%description -n python3-vici
+VICI is an attempt to improve the situation for system integrators by
+providing a stable IPC interface, allowing external tools to query,
+configure and control the IKE daemon.
+
+The Versatile IKE Configuration Interface (VICI) python bindings
+provides module for Strongswan runtime configuration from python
+applications.
+%endif
+
+The Versatile IKE Configuration Interface (VICI) python bindings
+provides module for Strongswan runtime configuration from python
+applications.
+%if %{with perl}
+The Versatile IKE Configuration Interface (VICI) python bindings
+provides module for Strongswan runtime configuration from python
+applications.
+%package -n perl-vici
+Summary:	Strongswan Versatile IKE Configuration Interface perl bindings
+BuildArch:	noarch
+
+%description -n perl-vici
+VICI is an attempt to improve the situation for system integrators by
+providing a stable IPC interface, allowing external tools to query,
+configure and control the IKE daemon.
+
+The Versatile IKE Configuration Interface (VICI) perl bindings
+provides module for Strongswan runtime configuration from perl
+applications.
+%endif
+
+The Versatile IKE Configuration Interface (VICI) perl bindings
+provides module for Strongswan runtime configuration from perl
+applications.
 %prep
 %setup -q
 
@@ -28,20 +134,171 @@ system.
 %{__autoconf}
 %{__automake}
 %configure \
+	--disable-static \
+	--with-ipsec-script=strongswan \
+	--sysconfdir=%{_sysconfdir}/strongswan \
+	--with-ipsecdir=%{_libexecdir}/strongswan \
+	--bindir=%{_libexecdir}/strongswan \
+	--with-ipseclibdir=%{_libdir}/strongswan \
+	--with-piddir=%{_rundir}/strongswan \
+	--with-nm-ca-dir=%{_sysconfdir}/strongswan/ipsec.d/cacerts/ \
+	--enable-bypass-lan \
+	--enable-tss-tss2 \
+	--enable-nm \
+	--enable-systemd \
+	--enable-openssl \
+	--enable-unity \
+	--enable-ctr \
+	--enable-ccm \
+	--enable-gcm \
+	--enable-chapoly \
+	--enable-md4 \
+	--enable-ml \
+	--enable-gcrypt \
+	--enable-xauth-eap \
+	--enable-xauth-pam \
+	--enable-xauth-noauth \
+	--enable-eap-identity \
+	--enable-eap-md5 \
+	--enable-eap-gtc \
+	--enable-eap-tls \
+	--enable-eap-ttls \
+	--enable-eap-peap \
+	--enable-eap-mschapv2 \
+	--enable-eap-tnc \
+	--enable-eap-sim \
+	--enable-eap-sim-file \
+	--enable-eap-aka \
+	--enable-eap-aka-3gpp \
+	--enable-eap-aka-3gpp2 \
+	--enable-eap-dynamic \
+	--enable-eap-radius \
+	--enable-ext-auth \
+	--enable-ipseckey \
+	--enable-pkcs11 \
+	--enable-tpm \
+	--enable-farp \
+	--enable-dhcp \
+	--enable-ha \
+	--enable-led \
+	--enable-sql \
+	--enable-sqlite \
+	--enable-tnc-ifmap \
+	--enable-tnc-pdp \
+	--enable-tnc-imc \
+	--enable-tnc-imv \
+	--enable-tnccs-20 \
+	--enable-tnccs-11 \
+	--enable-tnccs-dynamic \
+	--enable-imc-test \
+	--enable-imv-test \
+	--enable-imc-scanner \
+	--enable-imv-scanner  \
+	--enable-imc-attestation \
+	--enable-imv-attestation \
+	--enable-imv-os \
+	--enable-imc-os \
+	--enable-imc-swima \
+	--enable-imv-swima \
+	--enable-imc-hcd \
+	--enable-imv-hcd \
+	--enable-curl \
+	--enable-cmd \
+	--enable-acert \
+	--enable-vici \
+	--enable-swanctl \
+	--enable-duplicheck \
+	--enable-selinux \
+	--enable-stroke \
+%ifarch x86_64 %{ix86}
+	--enable-aesni \
+%endif
+%if %{with python3}
+	PYTHON=%{__python3} --enable-python-wheels \
+%endif
+%if %{with perl}
+	--enable-perl-cpan \
+%endif
+%if %{with tests}
+	--enable-test-vectors \
+%endif
+	--enable-kernel-libipsec \
 	--with-capabilities=libcap \
-	--disable-static
+	CPPFLAGS="-DSTARTER_ALLOW_NON_ROOT"
+
+# disable certain plugins in the daemon configuration by default
+for p in bypass-lan; do
+	echo -e "\ncharon.plugins.${p}.load := no" >> conf/plugins/${p}.opt
+done
+
+# ensure manual page is regenerated with local configuration
+rm -f src/ipsec/_ipsec.8
+
 %{__make}
 
+%if %{with python}
+sed -e "s,/var/run/charon.vici,%{_rundir}/strongswan/charon.vici," -i src/libcharon/plugins/vici/session.py
+%{__make} -C src/libcharon/plugins/vici/python
+%endif
+
+%if %{with perl}
+olddir=$(pwd)
+cd src/libcharon/plugins/vici/perl/Vici-Session
+%{__perl} Makefile.PL \
+		INSTALLDIRS=vendor
+%{__make}
+cd $olddir
+%endif
+
+%if %{with tests}
+export TESTS_VERBOSITY=1
+# protect against hanging tests
+timeout 600 %{__make} check
+
+%if %{with python3}
+cd src/libcharon/plugins/vici/python
+PYTEST_DISABLE_PLUGIN_AUTOLOAD=1 \
+PYTEST_PLUGINS= \
+%{__python3} -m pytest test
+cd ../../../../..
+%endif
+%endif
+
 %install
 rm -rf $RPM_BUILD_ROOT
 
 %{__make} install \
 	DESTDIR=$RPM_BUILD_ROOT
 
-touch $RPM_BUILD_ROOT%{_sysconfdir}/ipsec.secrets
+%if %{with python3}
+cd src/libcharon/plugins/vici/python
+ln -sf dist build-3
+%py3_install
+cd ../../../../..
+%endif
+
+%if %{with perl}
+%{__make} -C src/libcharon/plugins/vici/perl/Vici-Session install \
+	DESTDIR=$RPM_BUILD_ROOT
+%endif
+
+# prefix man pages
+for i in $RPM_BUILD_ROOT%{_mandir}/*/*; do
+    if echo "$i" | grep -vq '/strongswan[^\/]*$'; then
+        mv "$i" "`echo "$i" | sed -re 's|/([^/]+)$|/strongswan_\1|'`"
+    fi
+done
+
+install -d $RPM_BUILD_ROOT%{_rundir}/strongswan
+install -d $RPM_BUILD_ROOT%{_tmpfilesdir}
+cp -p %{SOURCE1} $RPM_BUILD_ROOT%{_tmpfilesdir}/strongswan.conf
+cp -p %{SOURCE1} $RPM_BUILD_ROOT%{_tmpfilesdir}/strongswan-starter.conf
+
+rm $RPM_BUILD_ROOT%{_libdir}/%{name}/*.so
+rm $RPM_BUILD_ROOT%{_libdir}/%{name}/*.la
+rm $RPM_BUILD_ROOT%{_libdir}/%{name}/plugins/*.la
 
-rm $RPM_BUILD_ROOT%{_libdir}/ipsec/lib{charon,strongswan,vici}.{la,so}
-rm $RPM_BUILD_ROOT%{_libdir}/ipsec/plugins/*.la
+touch $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/ipsec.secrets
 
 %clean
 rm -rf $RPM_BUILD_ROOT
@@ -58,41 +315,81 @@ rm -rf $RPM_BUILD_ROOT
 %files
 %defattr(644,root,root,755)
 %doc AUTHORS ChangeLog NEWS README TODO
-%dir %{_sysconfdir}/ipsec.d
-%dir %{_sysconfdir}/ipsec.d/crls
-%dir %{_sysconfdir}/ipsec.d/reqs
-%dir %{_sysconfdir}/ipsec.d/certs
-%dir %{_sysconfdir}/ipsec.d/acerts
-%dir %{_sysconfdir}/ipsec.d/aacerts
-%dir %{_sysconfdir}/ipsec.d/cacerts
-%dir %{_sysconfdir}/ipsec.d/ocspcerts
-%dir %attr(700,root,root) %{_sysconfdir}/ipsec.d/private
-%dir %{_sysconfdir}/strongswan.d
-%config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/strongswan.d/*.conf
-%dir %{_sysconfdir}/strongswan.d/charon
-%config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/strongswan.d/charon/*.conf
-%attr(600,root,root) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/ipsec.conf
-%attr(600,root,root) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/ipsec.secrets
-%config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/strongswan.conf
-%dir %{_sysconfdir}/swanctl
-%config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/swanctl/swanctl.conf
-%{systemdunitdir}/%{name}.service
-%attr(755,root,root) %{_bindir}/pki
-%dir %{_libexecdir}/ipsec
-%attr(755,root,root) %{_libexecdir}/ipsec/_copyright
-%attr(755,root,root) %{_libexecdir}/ipsec/_updown
-%attr(755,root,root) %{_libexecdir}/ipsec/charon
-%attr(755,root,root) %{_libexecdir}/ipsec/scepclient
-%attr(755,root,root) %{_libexecdir}/ipsec/starter
-%attr(755,root,root) %{_libexecdir}/ipsec/stroke
-%dir %{_libdir}/ipsec
-%attr(755,root,root) %{_libdir}/ipsec/libcharon.so.0*
-%attr(755,root,root) %{_libdir}/ipsec/libstrongswan.so.0*
-%attr(755,root,root) %{_libdir}/ipsec/libvici.so.0*
-%dir %{_libdir}/ipsec/plugins
-%attr(755,root,root) %{_libdir}/ipsec/plugins/libstrongswan-*.so
-%attr(755,root,root) %{_sbindir}/ipsec
+%dir %{_sysconfdir}/strongswan
+%config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/%{name}/%{name}.conf
+%attr(600,root,root) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/%{name}/ipsec.conf
+%attr(600,root,root) %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/%{name}/ipsec.secrets
+%attr(700,root,root) %config(noreplace) %{_sysconfdir}/%{name}/ipsec.d
+%attr(700,root,root) %config(noreplace) %{_sysconfdir}/%{name}/%{name}.d
+%attr(700,root,root) %config(noreplace) %{_sysconfdir}/%{name}/swanctl
+%dir %{_libdir}/strongswan
+%exclude %{_libdir}/strongswan/imcvs
+%dir %{_libdir}/strongswan/plugins
+%dir %{_libexecdir}/strongswan
+%{systemdunitdir}/strongswan.service
+%{systemdunitdir}/strongswan-starter.service
+%attr(755,root,root) %{_sbindir}/charon-cmd
+%attr(755,root,root) %{_sbindir}/charon-systemd
+%attr(755,root,root) %{_sbindir}/strongswan
 %attr(755,root,root) %{_sbindir}/swanctl
-%{_datadir}/%{name}
-%{_mandir}/man[158]/*
+%{_libdir}/strongswan/*.so.*
+%{_libdir}/strongswan/plugins/*.so
+%exclude %{_libdir}/strongswan/libimcv.so.*
+%exclude %{_libdir}/strongswan/libtnccs.so.*
+%exclude %{_libdir}/strongswan/libipsec.so.*
+%exclude %{_libdir}/strongswan/plugins/libstrongswan-sqlite.so
+%exclude %{_libdir}/strongswan/plugins/libstrongswan-*tnc*.so
+%exclude %{_libdir}/strongswan/plugins/libstrongswan-kernel-libipsec.so
+%attr(755,root,root) %{_libexecdir}/strongswan/*
+%exclude %{_libexecdir}/strongswan/attest
+%exclude %{_libexecdir}/strongswan/pt-tls-client
+%exclude %{_libexecdir}/strongswan/charon-nm
+%exclude %dir %{_datadir}/strongswan/swidtag
+%{_mandir}/man?/*.*
+%{_datadir}/strongswan/templates/config
+%{_datadir}/strongswan/templates/database
+%dir %attr(700,root,root) %{_rundir}/strongswan
+%{systemdtmpfilesdir}/strongswan.conf
+%{systemdtmpfilesdir}/strongswan-starter.conf
+
+%files sqlite
+%defattr(644,root,root,755)
+%{_libdir}/strongswan/plugins/libstrongswan-sqlite.so
 
+%files tnc-imcvs
+%defattr(644,root,root,755)
+%attr(755,root,root) %{_sbindir}/sw-collector
+%attr(755,root,root) %{_sbindir}/sec-updater
+%dir %{_libdir}/strongswan/imcvs
+%dir %{_libdir}/strongswan/plugins
+%{_libdir}/strongswan/libimcv.so.*
+%{_libdir}/strongswan/libtnccs.so.*
+%{_libdir}/strongswan/plugins/libstrongswan-*tnc*.so
+%attr(755,root,root) %{_libexecdir}/strongswan/attest
+%attr(755,root,root) %{_libexecdir}/strongswan/pt-tls-client
+%dir %{_datadir}/strongswan/swidtag
+%{_datadir}/strongswan/swidtag/*.swidtag
+
+%files libipsec
+%defattr(644,root,root,755)
+%{_libdir}/strongswan/libipsec.so.*
+%{_libdir}/strongswan/plugins/libstrongswan-kernel-libipsec.so
+
+%files charon-nm
+%defattr(644,root,root,755)
+%{_datadir}/dbus-1/system.d/nm-strongswan-service.conf
+%attr(755,root,root) %{_libexecdir}/strongswan/charon-nm
+
+%if %{with python3}
+%files -n python3-vici
+%defattr(644,root,root,755)
+%doc src/libcharon/plugins/vici/python/README.rst
+%{py3_sitescriptdir}/vici
+%{py3_sitescriptdir}/vici-%{version}*.egg-info
+%endif
+
+%if %{with perl}
+%files -n perl-vici
+%defattr(644,root,root,755)
+%{perl_vendorlib}/Vici
+%endif
diff --git a/tmpfiles-strongswan.conf b/tmpfiles-strongswan.conf
new file mode 100644
index 0000000..e228ac9
--- /dev/null
+++ b/tmpfiles-strongswan.conf
@@ -0,0 +1 @@
+D /run/strongswan 0755 root root -
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/strongswan.git/commitdiff/84e5d9bef7008f161dc838a23224e5fe774d3896

