openswan (1:2.4.5+dfsg-0.2) unstable; urgency=low
* Non-maintainer upload.
* debian/patches/01-ipcomp_hippi.dpatch: Fix net/ipsec/ipcomp.c so it no
longer attempts to copy the "private" field of a struct_skbuff when
CONFIG_HIPPI is enabled; it was removed after 2.6.13, and this broke
compilation with 2.6.16, linux-patch-openswan and CONFIG_HIPPI.
(Closes: #363375)
openswan (1:2.4.5+dfsg-0.1) unstable; urgency=low
* Non-maintainer upload.
* Remove doc/rfc394[78].txt and doc/draft-*.txt from upstream tarball
to get rid of non-DFSG free documentation. (Closes: #365196)
openswan (1:2.4.5-3) unstable; urgency=low
* Renamed kernel-patch-openswan to linux-patch-openswan.
* Removed the remarks in the package descriptions that linux-patch-openswan
and openswan-modules-source will only work with 2.4 series kernels. This
is no longer true.
* Use updated French translation. Thanks to Christian Perrier and sorry for
not giving time to update the translations before the last upload. I felt
that the FTBFS should be corrected quickly.
Closes: #364399: openswan: [INTL:fr] French debconf templates translation
openswan (1:2.4.5-2) unstable; urgency=low
* The NMU patch doesn't seem to have applied to debian/control,
because the dependency was still on libopensc1-dev. Fixed that now
by adding libopensc2-dev.
Closes: #363073: openswan_1:2.4.5-1: FTBFS: Build depends on
libopensc1-dev
* Added the patch to fix alignment issues on Sparc, as upstream acknowledged
it and applied it to their development tree.
Closes: #341630: openswan: Pluto crypto helper gets SIGBUS on SPARC due
to request memory alignment issue
openswan (1:2.4.5-1) unstable; urgency=low
* New upstream release. This release adds support for patching newer kernel
versions. Verified that the patched kernel tree compiles with Debian
kernel sources 2.6.15-8 and 2.6.16-6.
Closes: #361800: kernel-patch-openswan: Fails to patch Debian 2.6.15
kernel
It also adds the patches for an IPSec/L2TP server behind a NAT.
Closes: #307529: More patches for openswan server behind NAT
Closes: #353792: openswan nat-t failure
And additionally there are (according to upstream changelogs) fixes for
running on SMP systems. If the following bug still persists (can not test
myself), then please reopen.
Closes: #343603: kernel-patch-openswan: Starting IPSEC makes system freeze
The patch to fix the snmpd crash is also in this upstream version (just
checked linux/net/ipsec/ipsec_tunnel.c). It was probably in older versions
as well, so this might have been closed earlier. It's not mentioned in
upstream changelog, so I don't know exactly when it has been fixed.
Closes: #318298: kernel-patch-openswan: Kernel Oops - Null Dereference
when using snmpd
The ipsec.conf manual page has been updated to document connaddrfamily.
Closes: #296611: openswan: "man -S 5 ipsec.conf" fails to mention the
parameter "connaddrfamily"
* Acknowledge fixes in last NMU - thanks to Christian.
Closes: #352050: openswan: FTBFS: Package libopensc1-dev has no
installation candidate
Closes: #356716: openswan: Incomplete clean when building
Closes: #316693: openswan_1/2.2.0-10
Closes: #339390: openswan: [INTL:sv] Swedish debconf templates translation
* Enable building of XAUTH support.
* Import override files from /etc/default instead of /etc/sysconfig. This
uses dpatch, so now Build-Depend on it.
Closes: #354965: openswan: /usr/lib/ipsec/_updown uses /etc/sysconfig/,
please change to /etc/default/
* Only ask if an existing certificate/private key pair should be used when
the user chose not to create a new key pair. Also mention, when asking to
create a new key pair, that an existing one can be used alternatively.
Closes: #298250: confusing debconf question about certificate creation
* Move the USE_LDAP, USE_LIBCURL, and HAVE_THREADS options from the
"make install" to the "make programs" call where it belongs.
Closes: #292838: openswan: Dynamic CRL fetching not supported
* Remove /usr/share/doc/openswan/index.html, because it is a duplicate of
/usr/share/doc/openswan/doc/index.html, and only the latter one has links
to existing files.
Closes: #311613: openswan: html documentation links to the wrong place
Closes: #357719: broken links in file:///usr/share/doc/openswan/index.html
Closes: #357698: broken links in file:///usr/share/doc/openswan/index.html
* Add #ifdef to linux/net/ipsec/ipsec_init.c to branch between Debian and
vanilla 2.4 kernels. For Debian kernels with the XFRM (26sec) backport,
a second option is necessary for inet_(add|del)_protocol. This should
allow KLIPS to compile on both Debian and vanilla 2.4 kernels. Verified
that it compiles with Debian 2.4.27-12 and vanilla 2.4.32.
Closes: #340294: openswan-modules-source: fails to build with 2.4.27 on
sarge
Closes: #342844: kernel-patch-openswan: FTBS with kernel-source-2.4.27
2.4.27-11
* Document in README.Debian that KLIPS for 2.4 kernels will not compile with
newer GCC versions and give a hint on how to use older versions with
make-kpkg.
* Kernel 2.6.8 is not properly supported and is horribly outdated by now.
If you really need to use 2.6.8, then please use the native 26sec IPSec
stack. For KLIPS support, use at least 2.6.12, or better 2.6.15.
Closes: #318136: kernel-patch-openswan: Problem applying
kernel-openswan-patch to kernel-source-2.6.8
* Compress the modules source tree with bzip2 instead of gzip and thus
reduce the size of the openswan-modules-source package.
openswan (1:2.4.4-3.1) unstable; urgency=high
* Non-maintainer upload with maintainer's agreement
* Fix FTBFS by replacing the build dependency on libopensc1-dev to
libopensc2-dev. Closes: #352050
* Really clean when building
Closes: #356716
* Correct typos and English errors in templates
Unfuzzy translations
Closes: #316693
* Swedish debconf templates translation added
Closes: #339390
-- Barry deFreese <email address hidden> Mon, 10 Jul 2006 09:55:05 +0100
