[pkgsrc/trunk]: pkgsrc/security/ipsec-tools racoon speaks IKE (ISAKMP/Oakley)...

[manu <manu%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/eca3a5ab5929
branches:  trunk
changeset: 483260:eca3a5ab5929
user:      manu <manu%pkgsrc.org@localhost>
date:      Tue Nov 09 22:42:20 2004 +0000

description:
racoon speaks IKE (ISAKMP/Oakley) key management protocol, to
establish IPsec security association with other hosts.

This is based on KAME racoon, with some enhancements such as
NAT-Traversal (needs a kernel patch), hybrid authentication,
ISAKMP mode config, RADIUS support, IKE fragmentation and others.

Ipsec-tools' racoon is able to act as a VPN server for the
Cisco VPN client using hybrid authentication.

diffstat:

 security/ipsec-tools/DESCR    |   9 +++++++++
 security/ipsec-tools/Makefile |  43 +++++++++++++++++++++++++++++++++++++++++++
 security/ipsec-tools/PLIST    |  26 ++++++++++++++++++++++++++
 security/ipsec-tools/distinfo |   4 ++++
 4 files changed, 82 insertions(+), 0 deletions(-)

diffs (98 lines):

diff -r 06af91b7b077 -r eca3a5ab5929 security/ipsec-tools/DESCR
--- /dev/null   Thu Jan 01 00:00:00 1970 +0000
+++ b/security/ipsec-tools/DESCR        Tue Nov 09 22:42:20 2004 +0000
@@ -0,0 +1,9 @@
+racoon speaks IKE (ISAKMP/Oakley) key management protocol, to
+establish IPsec security association with other hosts.
+
+This is based on KAME racoon, with some enhancements such as
+NAT-Traversal (needs a kernel patch), hybrid authentication, 
+ISAKMP mode config, RADIUS support, IKE fragmentation and others.
+
+Ipsec-tools' racoon is able to act as a VPN server for the
+Cisco VPN client using hybrid authentication.
diff -r 06af91b7b077 -r eca3a5ab5929 security/ipsec-tools/Makefile
--- /dev/null   Thu Jan 01 00:00:00 1970 +0000
+++ b/security/ipsec-tools/Makefile     Tue Nov 09 22:42:20 2004 +0000
@@ -0,0 +1,43 @@
+# $NetBSD: Makefile,v 1.1.1.1 2004/11/09 22:42:20 manu Exp $
+#
+
+DISTNAME=              ipsec-tools-0.5.pre20041109
+CATEGORIES=            security
+MASTER_SITES=          ${MASTER_SITE_SOURCEFORGE:=ipsec-tools/}
+EXTRACT_SUFX=          .tar.bz2
+
+MAINTAINER=            manu%NetBSD.org@localhost
+HOMEPAGE=              http://ovh.dl.sourceforge.net/sourceforge/ipsec-tools/
+COMMENT=               Ipsec-tools racoon IKE daemon
+
+USE_BUILDLINK3=                yes
+USE_PKGLOCALEDIR=      yes
+USE_LIBTOOL=           yes
+LIBTOOL_OVERRIDE=      ${WRKSRC}/libtool
+GNU_CONFIGURE=         yes
+
+CONFIGURE_ARGS+=       --with-libradius --enable-natt
+CONFIGURE_ARGS+=       --enable-frag --enable-hybrid
+
+BUILDLINK_DEPMETHOD.libradius-linux?=  build
+
+BUILD_DEPEND+=         libradius-linux>=20040827nb1:../../net/libradius
+
+SAMPLE_DIR=    ${WRKSRC}/src/racoon/samples
+EXAMPLE_DIR=   ${PREFIX}/share/examples/ipsec-tools
+post-install:
+       ${INSTALL_DATA_DIR} ${EXAMPLE_DIR}
+       ${INSTALL_DATA} ${SAMPLE_DIR}/psk.txt ${EXAMPLE_DIR}
+       ${INSTALL_DATA} ${SAMPLE_DIR}/psk.txt.in ${EXAMPLE_DIR}
+       ${INSTALL_DATA} ${SAMPLE_DIR}/psk.txt.sample ${EXAMPLE_DIR}
+       ${INSTALL_DATA} ${SAMPLE_DIR}/racoon.conf ${EXAMPLE_DIR}
+       ${INSTALL_DATA} ${SAMPLE_DIR}/racoon.conf.in ${EXAMPLE_DIR}
+       ${INSTALL_DATA} ${SAMPLE_DIR}/racoon.conf.sample ${EXAMPLE_DIR}
+       ${INSTALL_DATA} ${SAMPLE_DIR}/racoon.conf.sample-cvpn ${EXAMPLE_DIR}
+       ${INSTALL_DATA} ${SAMPLE_DIR}/racoon.conf.sample-gssapi ${EXAMPLE_DIR}
+       ${INSTALL_DATA} ${SAMPLE_DIR}/racoon.conf.sample-inherit ${EXAMPLE_DIR}
+       ${INSTALL_DATA} ${SAMPLE_DIR}/racoon.conf.sample-natt ${EXAMPLE_DIR}
+       ${INSTALL_DATA} ${SAMPLE_DIR}/racoon.conf.sample-plainrsa ${EXAMPLE_DIR}
+
+.include "../../net/libradius/buildlink3.mk" ${EXAMPLE_DIR}
+.include "../../mk/bsd.pkg.mk" ${EXAMPLE_DIR}
diff -r 06af91b7b077 -r eca3a5ab5929 security/ipsec-tools/PLIST
--- /dev/null   Thu Jan 01 00:00:00 1970 +0000
+++ b/security/ipsec-tools/PLIST        Tue Nov 09 22:42:20 2004 +0000
@@ -0,0 +1,26 @@
+@comment $NetBSD: PLIST,v 1.1.1.1 2004/11/09 22:42:20 manu Exp $
+lib/libipsec.la
+include/libipsec/libpfkey.h
+sbin/setkey
+sbin/racoon
+sbin/racoonctl
+sbin/plainrsa-gen
+man/man3/ipsec_set_policy.3
+man/man3/ipsec_strerror.3
+man/man5/racoon.conf.5
+man/man8/racoon.8
+man/man8/setkey.8
+man/man8/plainrsa-gen.8
+share/examples/ipsec-tools/psk.txt
+share/examples/ipsec-tools/psk.txt.in
+share/examples/ipsec-tools/psk.txt.sample
+share/examples/ipsec-tools/racoon.conf
+share/examples/ipsec-tools/racoon.conf.in
+share/examples/ipsec-tools/racoon.conf.sample
+share/examples/ipsec-tools/racoon.conf.sample-cvpn
+share/examples/ipsec-tools/racoon.conf.sample-gssapi
+share/examples/ipsec-tools/racoon.conf.sample-inherit
+share/examples/ipsec-tools/racoon.conf.sample-natt
+share/examples/ipsec-tools/racoon.conf.sample-plainrsa
+@dirrm include/libipsec
+@dirrm share/examples/ipsec-tools
diff -r 06af91b7b077 -r eca3a5ab5929 security/ipsec-tools/distinfo
--- /dev/null   Thu Jan 01 00:00:00 1970 +0000
+++ b/security/ipsec-tools/distinfo     Tue Nov 09 22:42:20 2004 +0000
@@ -0,0 +1,4 @@
+$NetBSD: distinfo,v 1.1.1.1 2004/11/09 22:42:20 manu Exp $
+
+SHA1 (ipsec-tools-0.5.pre20041109.tar.bz2) = 2e91a2b1adea46facdbdfe70dfcc4aca3cc01913
+Size (ipsec-tools-0.5.pre20041109.tar.bz2) = 618629 bytes