[src/trunk]: src/crypto/dist/ipsec-tools Import ipsec-tools-0.6.2. Here is th...

[manu <manu%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/eff75f50c0da
branches:  trunk
changeset: 585036:eff75f50c0da
user:      manu <manu%NetBSD.org@localhost>
date:      Fri Oct 14 13:21:42 2005 +0000

description:
Import ipsec-tools-0.6.2. Here is the ChangeLog since 0.6.1 (most of them
have already been pulled up in NetBSD CVS)
---------------------------------------------

        0.6.2 released

2005-10-14  Yvan Vanhullebus  <vanhu%netasq.com@localhost>

        * src/racoon/ipsec_doi.c: don't allow NULL or empty FQDNs or
          USER_FQDNs (problem reported by Bernhard Suttner).

---------------------------------------------

        0.6.2.beta3 released

2005-09-05   Emmanuel Dreyfus  <manu%netbsd.org@localhost>

        From Andreas Hasenack <ahasenack%terra.com.br@localhost>
        * configure.ac: More build fixes for Linux

---------------------------------------------

        0.6.2.beta2 released

2005-09-04  Emmanuel Dreyfus  <manu%netbsd.org@localhost>

        From Wilfried Weissmann
        * src/libipsec/policy_parse.y src/racoon/{ipsec_doi.c|oakley.c}
          src/racoon/{sockmisc.c|sockmisc.h}: build fixes

---------------------------------------------

        0.6.2.beta1 released

2005-09-03  Emmanuel Dreyfus  <manu%netbsd.org@localhost>

        From Francis Dupont <Francis.Dupont%enst-bretagne.fr@localhost>
        * src/libipsec/pfkey.c src/racoon/pfkey.c: Cope with extensions

2005-08-26  Emmanuel Dreyfus  <manu%netbsd.org@localhost>

        * src/racoon/cfparse.y: handle xauth_login correctly
        * src/racoon/isakmp.c: catch internal error
        * src/raccon/isakmp_agg.c: fix racoon as Xauth client
        * src/raccon/{isakmp_agg.c|isakmp_base.c}: Proposal safety checks
        * src/racoon/evt.c: Fix memory leak when event queue overflows

2005-08-23  Emmanuel Dreyfus  <manu%netbsd.org@localhost>

        * src/racoon/{isakmp_agg.c|isakmp_ident.c|isakmp_base.c}: Correctly
          initialize NAT-T VID to avoid freeing unallocated stuff.

2005-08-21  Emmanuel Dreyfus  <manu%netbsd.org@localhost>

        From Matthias Scheler <matthias.scheler%tadpole.com@localhost>
        * src/racoon/{isakmp_cfg.c|racoon.conf.5}: enable the use of
          ISAKMP mode config without Xauth.

2005-09-16  Yvan Vanhullebus  <vanhu%free.fr@localhost>

        * src/racoon/policy.c: Do not parse all sptree in inssp() if we
          don't use Policies priority.

2005-08-15  Emmanuel Dreyfus  <manu%netbsd.org@localhost>

        From: Thomas Klausner <wiz%netbsd.org@localhost>
        src/setkey/setkey.8: Drop trailing spaces

diffstat:

 crypto/dist/ipsec-tools/NEWS         |  3 +++
 crypto/dist/ipsec-tools/configure.ac |  8 +++++---
 2 files changed, 8 insertions(+), 3 deletions(-)

diffs (44 lines):

diff -r be77de1afd04 -r eff75f50c0da crypto/dist/ipsec-tools/NEWS
--- a/crypto/dist/ipsec-tools/NEWS      Fri Oct 14 12:47:04 2005 +0000
+++ b/crypto/dist/ipsec-tools/NEWS      Fri Oct 14 13:21:42 2005 +0000
@@ -1,5 +1,8 @@
 Version history:
 ----------------
+0.6.2  - 14 October 2005
+       o ISAKMP mode config works without Xauth
+
 0.6.1  - 10 august 2005
        o NAT-T fixes for situations where NAT-T is not used
        o OpenSSL 0.9.8 support
diff -r be77de1afd04 -r eff75f50c0da crypto/dist/ipsec-tools/configure.ac
--- a/crypto/dist/ipsec-tools/configure.ac      Fri Oct 14 12:47:04 2005 +0000
+++ b/crypto/dist/ipsec-tools/configure.ac      Fri Oct 14 13:21:42 2005 +0000
@@ -1,8 +1,8 @@
 dnl -*- mode: m4 -*-
-dnl Id: configure.ac,v 1.47.2.24 2005/08/19 22:46:45 manubsd Exp
+dnl Id: configure.ac,v 1.47.2.29 2005/10/14 09:24:43 manubsd Exp
 
 AC_PREREQ(2.52)
-AC_INIT(ipsec-tools, 0.6.1)
+AC_INIT(ipsec-tools, 0.6.2)
 AC_CONFIG_SRCDIR([configure.ac])
 AM_CONFIG_HEADER(config.h)
 
@@ -294,6 +294,8 @@
        # Check if iconv 2nd argument needs const 
        AC_CHECK_HEADER([iconv.h], [], [AC_MSG_ERROR([iconv.h not found, but needed for GSSAPI support. Aborting.])])
        AC_MSG_CHECKING([if iconv second argument needs const])
+       saved_CFLAGS=$CFLAGS
+       CFLAGS="$CFLAGS -Wall -Werror"
        AC_TRY_COMPILE([
                #include <iconv.h>
                #include <stdio.h>
@@ -308,7 +310,7 @@
        ], [AC_MSG_RESULT(yes)
            AC_DEFINE([HAVE_ICONV_2ND_CONST], [], [Have iconv using const])
        ], [AC_MSG_RESULT(no)])
-
+       CFLAGS=$saved_CFLAGS
 fi
 
 AC_MSG_CHECKING([if --enable-hybrid option is specified])