The package rpms/strongswan.git has added or updated architecture specific content in its
spec file (ExclusiveArch/ExcludeArch or %ifarch/%ifnarch) in commit(s):
https://src.fedoraproject.org/cgit/rpms/strongswan.git/commit/?id=eec22d1....
Change:
+%ifarch x86_64 %{ix86}
Thanks.
Full change:
============
commit 0265057a6702174a7379585f6992de30483f6279
Author: Paul Wouters <pwouters(a)redhat.com>
Date: Tue Sep 12 11:44:12 2017 -0400
added strongswan-5.6.0-uintptr_t.patch
diff --git a/strongswan-5.6.0-uintptr_t.patch b/strongswan-5.6.0-uintptr_t.patch
new file mode 100644
index 0000000..dbf90aa
--- /dev/null
+++ b/strongswan-5.6.0-uintptr_t.patch
@@ -0,0 +1,12 @@
+diff -Naur strongswan-5.6.0-orig/src/libstrongswan/utils/utils/memory.h
strongswan-5.6.0/src/libstrongswan/utils/utils/memory.h
+--- strongswan-5.6.0-orig/src/libstrongswan/utils/utils/memory.h 2017-08-14
02:48:41.000000000 -0400
++++ strongswan-5.6.0/src/libstrongswan/utils/utils/memory.h 2017-09-12 01:15:29.690527667
-0400
+@@ -14,6 +14,8 @@
+ * for more details.
+ */
+
++#include <stdint.h> /* for uintptr_t */
++
+ /**
+ * @defgroup memory_i memory
+ * @{ @ingroup utils_i
commit eec22d1c44af0cb7fa0fa81c113c85480f1ebf89
Author: Paul Wouters <pwouters(a)redhat.com>
Date: Tue Sep 12 01:26:38 2017 -0400
Fixup for uintptr_t on rawhide gcc.
also disable modules that don't compile on all architectures
diff --git a/strongswan.spec b/strongswan.spec
index 7e7c8f4..248646e 100644
--- a/strongswan.spec
+++ b/strongswan.spec
@@ -8,6 +8,7 @@ Summary: An OpenSource IPsec-based VPN and TNC solution
License: GPLv2+
URL:
http://www.strongswan.org/
Source0:
http://download.strongswan.org/%{name}-%{version}%{?prerelease}.tar.bz2
+Patch1: strongswan-5.6.0-uintptr_t.patch
# only needed for pre-release versions
#BuildRequires: autoconf automake
@@ -25,7 +26,6 @@ BuildRequires: pam-devel
BuildRequires: json-c-devel
BuildRequires: libgcrypt-devel
BuildRequires: systemd-devel
-BuildRequires: gprbuild
BuildRequires: iptables-devel
BuildRequires: NetworkManager-devel
@@ -68,6 +68,7 @@ PT-TLS to support TNC over TLS.
%prep
%setup -q -n %{name}-%{version}%{?prerelease}
+%patch1 -p1
%build
# only for snapshots
@@ -76,6 +77,7 @@ PT-TLS to support TNC over TLS.
# --with-ipsecdir moves internal commands to /usr/libexec/strongswan
# --bindir moves 'pki' command to /usr/libexec/strongswan
# See:
http://wiki.strongswan.org/issues/552
+# too broken to enable: --enable-sha3 --enable-rdrand --enable-connmark
--enable-forecast
%configure --disable-static \
--with-ipsec-script=strongswan \
--sysconfdir=%{_sysconfdir}/strongswan \
@@ -95,9 +97,6 @@ PT-TLS to support TNC over TLS.
--enable-md4 \
--enable-gcrypt \
--enable-newhope \
- --enable-aesni \
- --enable-rdrand \
- --enable-sha3 \
--enable-xauth-eap \
--enable-xauth-pam \
--enable-xauth-noauth \
@@ -152,9 +151,10 @@ PT-TLS to support TNC over TLS.
--enable-aikgen \
--enable-vici \
--enable-swanctl \
- --enable-connmark \
- --enable-forecast \
--enable-duplicheck \
+%ifarch x86_64 %{ix86}
+ --enable-aesni \
+%endif
--enable-kernel-libipsec
make %{?_smp_mflags}
commit c2c5845de7b67df4d7789486b8f87fd295636fdc
Author: Paul Wouters <pwouters(a)redhat.com>
Date: Sat Sep 9 18:59:47 2017 -0400
fixup exclude
diff --git a/strongswan.spec b/strongswan.spec
index c90ec9c..7e7c8f4 100644
--- a/strongswan.spec
+++ b/strongswan.spec
@@ -218,6 +218,7 @@ done
%exclude %{_libexecdir}/strongswan/attest
%exclude %{_libexecdir}/strongswan/pacman
%exclude %{_libexecdir}/strongswan/pt-tls-client
+%exclude %{_libexecdir}/strongswan/charon-nm
%exclude %dir %{_datadir}/strongswan/swidtag
%{_mandir}/man?/*.gz
%{_datadir}/strongswan/templates/config/
@@ -247,7 +248,7 @@ done
%files charon-nm
%doc COPYING
-%{_libexecdir}/%{name}/charon-nm
+%{_libexecdir}/strongswan/charon-nm
%changelog
* Sat Sep 09 2017 Paul Wouters <pwouters(a)redhat.com> - 5.6.0-1
commit 7e55bd65466fa7cb4b7183008f142fe823e898f1
Author: Paul Wouters <pwouters(a)redhat.com>
Date: Sat Sep 9 18:46:20 2017 -0400
* Sat Sep 09 2017 Paul Wouters <pwouters(a)redhat.com> - 5.6.0-1
- Updated to 5.6.0
- Fixup configure arguments, enabled a bunch of new features
- Added new BuildRequires:
- Fixup Obsolete/Conflicts, use license macro
- Don't require autoconf/autotools for non-snapshots
- Remove macro overuse, remove fedora/rhel checks and sysvinit support
- Make listings/grouping of all plugins/libs to reduce file listing
diff --git a/.gitignore b/.gitignore
index 9e46242..a55974b 100644
--- a/.gitignore
+++ b/.gitignore
@@ -37,3 +37,4 @@
/strongswan-5.5.0.tar.bz2
/strongswan-5.5.2.tar.bz2
/strongswan-5.5.3.tar.bz2
+/strongswan-5.6.0.tar.bz2
diff --git a/sources b/sources
index b3bf29b..e25aa4e 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (strongswan-5.5.3.tar.bz2) =
0b0b25d2102c98cda54300dc8c3c3a49a55e64f7c695dda65a24f2194f19bce0b7aab9e4f7486c243b552f9d1a94867d6a8782ee504aad1c9973809706d599ac
+SHA512 (strongswan-5.6.0.tar.bz2) =
9362069a01c3642e62864d88fdb409a3c7514bf7c92cbe36e552c6a80915119cf5bb91c39592aab2d15b562684a0628a764e4fa7636d3b5fd2ebaf165c0ce649
diff --git a/strongswan.spec b/strongswan.spec
index 9c663e3..c90ec9c 100644
--- a/strongswan.spec
+++ b/strongswan.spec
@@ -1,48 +1,19 @@
%global _hardened_build 1
-# When packaging pre-release snapshots:
-# 1) Please use 0.x in the release to maintain the correct package version
-# order.
-# 2) Please use the following define (with a percent sign and the appropriate
-# prerelease tag):
#%%define prerelease dr1
Name: strongswan
-Release: 3%{?dist}
-Version: 5.5.3
+Release: 1%{?dist}
+Version: 5.6.0
Summary: An OpenSource IPsec-based VPN and TNC solution
-Group: System Environment/Daemons
License: GPLv2+
URL:
http://www.strongswan.org/
Source0:
http://download.strongswan.org/%{name}-%{version}%{?prerelease}.tar.bz2
-# Initscript for epel6
-Source1: %{name}.sysvinit
-# Use RTLD_GLOBAL when loading plugins and link them to libstrongswan
-#
-# The patch hasn't been accepted upstream because of insufficient
-# information from the author. This situation needs to be fixed or
-# the patch needs to be removed to avoid diverging from upstream
-# permanently.
-#
-#
http://wiki.strongswan.org/issues/538
-#
-# Removing the patch from the build as I repeatedly requested that it should be
-# upstreamed. No comment has been added to the upstream bug report. Nothing
-# has been done towards the goal of upstreaming the patch.
-#
-# See also:
-#
-# *
https://bugzilla.redhat.com/show_bug.cgi?id=1087437
-# *
http://fedoraproject.org/wiki/Packaging:Guidelines#All_patches_should_hav...
-# *
https://fedoraproject.org/wiki/Staying_close_to_upstream_projects
-#
-# The patches violated the packaging guidelines from the beginning so I took
-# the initiative to merge them and submit them upstream. But I couldn't work
-# with the upstream developers on the fix as I didn't have enough information
-# about the use cases. Please cooperate with usptream and get the patch
-# accepted. There's nothing Fedora specific in the patch.
-#
-#Patch1: strongswan-5.1.1-plugins.patch
-BuildRequires: gmp-devel autoconf automake
+
+# only needed for pre-release versions
+#BuildRequires: autoconf automake
+
+BuildRequires: systemd-devel
+BuildRequires: gmp-devel
BuildRequires: libcurl-devel
BuildRequires: openldap-devel
BuildRequires: openssl-devel
@@ -54,20 +25,14 @@ BuildRequires: pam-devel
BuildRequires: json-c-devel
BuildRequires: libgcrypt-devel
BuildRequires: systemd-devel
-%if 0%{?fedora} >= 19 || 0%{?rhel} >= 7
+BuildRequires: gprbuild
+BuildRequires: iptables-devel
+
BuildRequires: NetworkManager-devel
BuildRequires: NetworkManager-glib-devel
-Obsoletes: %{name}-NetworkManager < 0:5.0.4-5
-BuildRequires: systemd, systemd-devel
Requires(post): systemd
Requires(preun): systemd
Requires(postun): systemd
-%else
-Obsoletes: %{name}-NetworkManager < 0:5.0.0-3.git20120619
-Requires(post): chkconfig
-Requires(preun): chkconfig
-Requires(preun): initscripts
-%endif
%description
The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key
@@ -76,23 +41,20 @@ Linux kernel.
%package libipsec
Summary: Strongswan's libipsec backend
-Group: System Environment/Daemons
%description libipsec
The kernel-libipsec plugin provides an IPsec backend that works entirely
in userland, using TUN devices and its own IPsec implementation libipsec.
-%if 0%{?fedora} >= 19 || 0%{?rhel} >= 7
%package charon-nm
Summary: NetworkManager plugin for Strongswan
-Group: System Environment/Daemons
+Obsoletes: %{name}-NetworkManager < 0:5.0.4-5
+Conflicts: %{name}-NetworkManger < 0:5.0.4-5
%description charon-nm
NetworkManager plugin integrates a subset of Strongswan capabilities
to NetworkManager.
-%endif
%package tnc-imcvs
Summary: Trusted network connect (TNC)'s IMC/IMV functionality
-Group: Applications/System
Requires: %{name} = %{version}
%description tnc-imcvs
This package provides Trusted Network Connect's (TNC) architecture support.
@@ -107,46 +69,69 @@ PT-TLS to support TNC over TLS.
%prep
%setup -q -n %{name}-%{version}%{?prerelease}
-echo "For migration from 4.6 to 5.0 see
http://wiki.strongswan.org/projects/strongswan/wiki/CharonPlutoIKEv1" >
README.Fedora
-
%build
-autoreconf
+# only for snapshots
+#autoreconf
+
# --with-ipsecdir moves internal commands to /usr/libexec/strongswan
# --bindir moves 'pki' command to /usr/libexec/strongswan
# See:
http://wiki.strongswan.org/issues/552
%configure --disable-static \
- --with-ipsec-script=%{name} \
- --sysconfdir=%{_sysconfdir}/%{name} \
- --with-ipsecdir=%{_libexecdir}/%{name} \
- --bindir=%{_libexecdir}/%{name} \
- --with-ipseclibdir=%{_libdir}/%{name} \
+ --with-ipsec-script=strongswan \
+ --sysconfdir=%{_sysconfdir}/strongswan \
+ --with-ipsecdir=%{_libexecdir}/strongswan \
+ --bindir=%{_libexecdir}/strongswan \
+ --with-ipseclibdir=%{_libdir}/strongswan \
--with-fips-mode=2 \
- --with-tss=trousers \
-%if 0%{?fedora} >= 19 || 0%{?rhel} >= 7
+ --enable-tss-trousers \
--enable-nm \
--enable-systemd \
-%endif
--enable-openssl \
--enable-unity \
--enable-ctr \
--enable-ccm \
--enable-gcm \
+ --enable-chapoly \
--enable-md4 \
--enable-gcrypt \
+ --enable-newhope \
+ --enable-aesni \
+ --enable-rdrand \
+ --enable-sha3 \
--enable-xauth-eap \
--enable-xauth-pam \
--enable-xauth-noauth \
+ --enable-eap-identity \
--enable-eap-md5 \
--enable-eap-gtc \
--enable-eap-tls \
--enable-eap-ttls \
--enable-eap-peap \
--enable-eap-mschapv2 \
+ --enable-eap-tnc \
+ --enable-eap-sim \
+ --enable-eap-sim-file \
+ --enable-eap-aka \
+ --enable-eap-aka-3gpp \
+ --enable-eap-aka-3gpp2 \
+ --enable-eap-dynamic \
+ --enable-eap-radius \
+ --enable-ext-auth \
+ --enable-ipseckey \
+ --enable-pkcs11 \
+ --enable-tpm \
--enable-farp \
--enable-dhcp \
+ --enable-ha \
+ --enable-led \
--enable-sqlite \
--enable-tnc-ifmap \
--enable-tnc-pdp \
+ --enable-tnc-imc \
+ --enable-tnc-imv \
+ --enable-tnccs-20 \
+ --enable-tnccs-11 \
+ --enable-tnccs-dynamic \
--enable-imc-test \
--enable-imv-test \
--enable-imc-scanner \
@@ -157,20 +142,19 @@ autoreconf
--enable-imc-os \
--enable-imc-swid \
--enable-imv-swid \
- --enable-eap-tnc \
- --enable-tnccs-20 \
- --enable-tnccs-11 \
- --enable-tnccs-dynamic \
- --enable-tnc-imc \
- --enable-tnc-imv \
- --enable-eap-radius \
+ --enable-imc-swima \
+ --enable-imv-swima \
+ --enable-imc-hcd \
+ --enable-imv-hcd \
--enable-curl \
- --enable-eap-identity \
--enable-cmd \
--enable-acert \
--enable-aikgen \
--enable-vici \
--enable-swanctl \
+ --enable-connmark \
+ --enable-forecast \
+ --enable-duplicheck \
--enable-kernel-libipsec
make %{?_smp_mflags}
@@ -179,211 +163,102 @@ make %{?_smp_mflags}
make install DESTDIR=%{buildroot}
# prefix man pages
for i in %{buildroot}%{_mandir}/*/*; do
- if echo "$i" | grep -vq '/%{name}[^\/]*$'; then
- mv "$i" "`echo "$i" | sed -re
's|/([^/]+)$|/%{name}_\1|'`"
+ if echo "$i" | grep -vq '/strongswan[^\/]*$'; then
+ mv "$i" "`echo "$i" | sed -re
's|/([^/]+)$|/strongswan_\1|'`"
fi
done
-# delete unwanted library files
-rm %{buildroot}%{_libdir}/%{name}/*.so
find %{buildroot} -type f -name '*.la' -delete
+# delete unwanted library files - no consumers, so no -devel package
+rm %{buildroot}%{_libdir}/strongswan/*.so
# fix config permissions
chmod 644 %{buildroot}%{_sysconfdir}/%{name}/%{name}.conf
-# protect configuration from ordinary user's eyes
-chmod 700 %{buildroot}%{_sysconfdir}/%{name}
+
# Create ipsec.d directory tree.
install -d -m 700 %{buildroot}%{_sysconfdir}/%{name}/ipsec.d
for i in aacerts acerts certs cacerts crls ocspcerts private reqs; do
install -d -m 700 %{buildroot}%{_sysconfdir}/%{name}/ipsec.d/${i}
done
-%if 0%{?fedora} >= 19 || 0%{?rhel} >= 7
-%else
-install -D -m 755 %{SOURCE1} %{buildroot}/%{_initddir}/%{name}
-%endif
-
%post
-/sbin/ldconfig
-%if 0%{?fedora} >= 19 || 0%{?rhel} >= 7
%systemd_post %{name}.service
-%else
-/sbin/chkconfig --add %{name}
-%endif
%preun
-%if 0%{?fedora} >= 19 || 0%{?rhel} >= 7
%systemd_preun %{name}.service
-%else
-if [ $1 -eq 0 ] ; then
- # Package removal, not upgrade
- /sbin/service %{name} stop >/dev/null 2>&1
- /sbin/chkconfig --del %{name}
-fi
-%endif
%postun
-/sbin/ldconfig
-%if 0%{?fedora} >= 19 || 0%{?rhel} >= 7
%systemd_postun_with_restart %{name}.service
-%else
-%endif
%files
-%doc README README.Fedora COPYING NEWS TODO
-%config(noreplace) %{_sysconfdir}/%{name}
-%if 0%{?fedora} >= 19 || 0%{?rhel} >= 7
-%{_unitdir}/%{name}.service
-%{_unitdir}/%{name}-swanctl.service
-%{_sbindir}/charon-systemd
-%else
-%{_initddir}/%{name}
-%endif
-%dir %{_libdir}/%{name}
-%{_libdir}/%{name}/libcharon.so.0
-%{_libdir}/%{name}/libcharon.so.0.0.0
-%{_libdir}/%{name}/libtls.so.0
-%{_libdir}/%{name}/libtls.so.0.0.0
-%{_libdir}/%{name}/libpttls.so.0
-%{_libdir}/%{name}/libpttls.so.0.0.0
-%{_libdir}/%{name}/lib%{name}.so.0
-%{_libdir}/%{name}/lib%{name}.so.0.0.0
-%{_libdir}/%{name}/libvici.so.0
-%{_libdir}/%{name}/libvici.so.0.0.0
-%{_libdir}/%{name}/libtpmtss.so.0
-%{_libdir}/%{name}/libtpmtss.so.0.0.0
-%dir %{_libdir}/%{name}/plugins
-%{_libdir}/%{name}/plugins/lib%{name}-aes.so
-%{_libdir}/%{name}/plugins/lib%{name}-ctr.so
-%{_libdir}/%{name}/plugins/lib%{name}-unity.so
-%{_libdir}/%{name}/plugins/lib%{name}-ccm.so
-%{_libdir}/%{name}/plugins/lib%{name}-gcm.so
-%{_libdir}/%{name}/plugins/lib%{name}-gcrypt.so
-%{_libdir}/%{name}/plugins/lib%{name}-attr.so
-%{_libdir}/%{name}/plugins/lib%{name}-cmac.so
-%{_libdir}/%{name}/plugins/lib%{name}-constraints.so
-%{_libdir}/%{name}/plugins/lib%{name}-des.so
-%{_libdir}/%{name}/plugins/lib%{name}-dnskey.so
-%{_libdir}/%{name}/plugins/lib%{name}-fips-prf.so
-%{_libdir}/%{name}/plugins/lib%{name}-gmp.so
-%{_libdir}/%{name}/plugins/lib%{name}-hmac.so
-%{_libdir}/%{name}/plugins/lib%{name}-kernel-netlink.so
-%{_libdir}/%{name}/plugins/lib%{name}-md5.so
-%{_libdir}/%{name}/plugins/lib%{name}-nonce.so
-%{_libdir}/%{name}/plugins/lib%{name}-openssl.so
-%{_libdir}/%{name}/plugins/lib%{name}-pem.so
-%{_libdir}/%{name}/plugins/lib%{name}-pgp.so
-%{_libdir}/%{name}/plugins/lib%{name}-pkcs1.so
-%{_libdir}/%{name}/plugins/lib%{name}-pkcs8.so
-%{_libdir}/%{name}/plugins/lib%{name}-pkcs12.so
-%{_libdir}/%{name}/plugins/lib%{name}-rc2.so
-%{_libdir}/%{name}/plugins/lib%{name}-sshkey.so
-%{_libdir}/%{name}/plugins/lib%{name}-pubkey.so
-%{_libdir}/%{name}/plugins/lib%{name}-random.so
-%{_libdir}/%{name}/plugins/lib%{name}-resolve.so
-%{_libdir}/%{name}/plugins/lib%{name}-revocation.so
-%{_libdir}/%{name}/plugins/lib%{name}-sha1.so
-%{_libdir}/%{name}/plugins/lib%{name}-sha2.so
-%{_libdir}/%{name}/plugins/lib%{name}-socket-default.so
-%{_libdir}/%{name}/plugins/lib%{name}-stroke.so
-%{_libdir}/%{name}/plugins/lib%{name}-updown.so
-%{_libdir}/%{name}/plugins/lib%{name}-x509.so
-%{_libdir}/%{name}/plugins/lib%{name}-xauth-generic.so
-%{_libdir}/%{name}/plugins/lib%{name}-xauth-eap.so
-%{_libdir}/%{name}/plugins/lib%{name}-xauth-pam.so
-%{_libdir}/%{name}/plugins/lib%{name}-xauth-noauth.so
-%{_libdir}/%{name}/plugins/lib%{name}-xcbc.so
-%{_libdir}/%{name}/plugins/lib%{name}-md4.so
-%{_libdir}/%{name}/plugins/lib%{name}-eap-md5.so
-%{_libdir}/%{name}/plugins/lib%{name}-eap-gtc.so
-%{_libdir}/%{name}/plugins/lib%{name}-eap-tls.so
-%{_libdir}/%{name}/plugins/lib%{name}-eap-ttls.so
-%{_libdir}/%{name}/plugins/lib%{name}-eap-peap.so
-%{_libdir}/%{name}/plugins/lib%{name}-eap-mschapv2.so
-%{_libdir}/%{name}/plugins/lib%{name}-farp.so
-%{_libdir}/%{name}/plugins/lib%{name}-dhcp.so
-%{_libdir}/%{name}/plugins/lib%{name}-curl.so
-%{_libdir}/%{name}/plugins/lib%{name}-eap-identity.so
-%{_libdir}/%{name}/plugins/lib%{name}-acert.so
-%{_libdir}/%{name}/plugins/lib%{name}-vici.so
-%{_libdir}/%{name}/plugins/lib%{name}-curve25519.so
-%dir %{_libexecdir}/%{name}
-%{_libexecdir}/%{name}/_copyright
-%{_libexecdir}/%{name}/_updown
-%{_libexecdir}/%{name}/charon
-%{_libexecdir}/%{name}/scepclient
-%{_libexecdir}/%{name}/starter
-%{_libexecdir}/%{name}/stroke
-%{_libexecdir}/%{name}/_imv_policy
-%{_libexecdir}/%{name}/imv_policy_manager
-%{_libexecdir}/%{name}/pki
-%{_libexecdir}/%{name}/aikgen
+%doc README NEWS TODO ChangeLog
+%license COPYING
+%dir %attr(0700,root,root) %{_sysconfdir}/strongswan
+%config(noreplace) %{_sysconfdir}/strongswan/*
+%dir %{_libdir}/strongswan
+%exclude %{_libdir}/strongswan/imcvs
+%dir %{_libdir}/strongswan/plugins
+%dir %{_libexecdir}/strongswan
+%{_unitdir}/strongswan.service
+%{_unitdir}/strongswan-swanctl.service
%{_sbindir}/charon-cmd
-%{_sbindir}/%{name}
+%{_sbindir}/charon-systemd
+%{_sbindir}/strongswan
%{_sbindir}/swanctl
-%{_mandir}/man1/%{name}_pki*.1.gz
-%{_mandir}/man5/%{name}.conf.5.gz
-%{_mandir}/man5/%{name}_ipsec.conf.5.gz
-%{_mandir}/man5/%{name}_ipsec.secrets.5.gz
-%{_mandir}/man5/%{name}_swanctl.conf.5.gz
-%{_mandir}/man8/%{name}.8.gz
-%{_mandir}/man8/%{name}_scepclient.8.gz
-%{_mandir}/man8/%{name}_charon-cmd.8.gz
-%{_mandir}/man8/%{name}_swanctl.8.gz
-%{_datadir}/%{name}/templates/config/
-%{_datadir}/%{name}/templates/database/
+%{_libdir}/strongswan/*.so.*
+%exclude %{_libdir}/strongswan/libimcv.so.*
+%exclude %{_libdir}/strongswan/libtnccs.so.*
+%exclude %{_libdir}/strongswan/libradius.so.*
+%exclude %{_libdir}/strongswan/libipsec.so.*
+%{_libdir}/strongswan/plugins/*.so
+%exclude %{_libdir}/strongswan/plugins/libstrongswan-pkcs7.so
+%exclude %{_libdir}/strongswan/plugins/libstrongswan-sqlite.so
+%exclude %{_libdir}/strongswan/plugins/libstrongswan-*tnc*.so
+%exclude %{_libdir}/strongswan/plugins/libstrongswan-eap-radius.so
+%exclude %{_libdir}/strongswan/plugins/libstrongswan-kernel-libipsec.so
+%{_libexecdir}/strongswan/*
+%exclude %{_libexecdir}/strongswan/attest
+%exclude %{_libexecdir}/strongswan/pacman
+%exclude %{_libexecdir}/strongswan/pt-tls-client
+%exclude %dir %{_datadir}/strongswan/swidtag
+%{_mandir}/man?/*.gz
+%{_datadir}/strongswan/templates/config/
+%{_datadir}/strongswan/templates/database/
%files tnc-imcvs
-%dir %{_libdir}/%{name}
-%{_libdir}/%{name}/libimcv.so.0
-%{_libdir}/%{name}/libimcv.so.0.0.0
-%{_libdir}/%{name}/libtnccs.so.0
-%{_libdir}/%{name}/libtnccs.so.0.0.0
-%{_libdir}/%{name}/libradius.so.0
-%{_libdir}/%{name}/libradius.so.0.0.0
-%dir %{_libdir}/%{name}/imcvs
-%{_libdir}/%{name}/imcvs/imc-attestation.so
-%{_libdir}/%{name}/imcvs/imc-scanner.so
-%{_libdir}/%{name}/imcvs/imc-test.so
-%{_libdir}/%{name}/imcvs/imc-os.so
-%{_libdir}/%{name}/imcvs/imc-swid.so
-%{_libdir}/%{name}/imcvs/imv-attestation.so
-%{_libdir}/%{name}/imcvs/imv-scanner.so
-%{_libdir}/%{name}/imcvs/imv-test.so
-%{_libdir}/%{name}/imcvs/imv-os.so
-%{_libdir}/%{name}/imcvs/imv-swid.so
-%dir %{_libdir}/%{name}/plugins
-%{_libdir}/%{name}/plugins/lib%{name}-pkcs7.so
-%{_libdir}/%{name}/plugins/lib%{name}-sqlite.so
-%{_libdir}/%{name}/plugins/lib%{name}-eap-tnc.so
-%{_libdir}/%{name}/plugins/lib%{name}-tnc-imc.so
-%{_libdir}/%{name}/plugins/lib%{name}-tnc-imv.so
-%{_libdir}/%{name}/plugins/lib%{name}-tnc-tnccs.so
-%{_libdir}/%{name}/plugins/lib%{name}-tnccs-20.so
-%{_libdir}/%{name}/plugins/lib%{name}-tnccs-11.so
-%{_libdir}/%{name}/plugins/lib%{name}-tnccs-dynamic.so
-%{_libdir}/%{name}/plugins/lib%{name}-eap-radius.so
-%{_libdir}/%{name}/plugins/lib%{name}-tnc-ifmap.so
-%{_libdir}/%{name}/plugins/lib%{name}-tnc-pdp.so
-%dir %{_libexecdir}/%{name}
-%{_libexecdir}/%{name}/attest
-%{_libexecdir}/%{name}/pacman
-%{_libexecdir}/%{name}/pt-tls-client
-#swid files
-%{_libexecdir}/%{name}/*.swidtag
-%dir %{_datadir}/regid.2004-03.org.%{name}
-%{_datadir}/regid.2004-03.org.%{name}/*.swidtag
+%{_sbindir}/sw-collector
+%dir %{_libdir}/strongswan
+%dir %{_libdir}/strongswan/imcvs
+%dir %{_libdir}/strongswan/plugins
+%{_libdir}/strongswan/libimcv.so.*
+%{_libdir}/strongswan/libtnccs.so.*
+%{_libdir}/strongswan/libradius.so.*
+%{_libdir}/strongswan/plugins/libstrongswan-pkcs7.so
+%{_libdir}/strongswan/plugins/libstrongswan-sqlite.so
+%{_libdir}/strongswan/plugins/libstrongswan-*tnc*.so
+%{_libdir}/strongswan/plugins/libstrongswan-eap-radius.so
+%{_libexecdir}/strongswan/attest
+%{_libexecdir}/strongswan/pacman
+%{_libexecdir}/strongswan/pt-tls-client
+%dir %{_datadir}/strongswan/swidtag
+%{_datadir}/strongswan/swidtag/*.swidtag
%files libipsec
-%{_libdir}/%{name}/libipsec.so.0
-%{_libdir}/%{name}/libipsec.so.0.0.0
-%{_libdir}/%{name}/plugins/libstrongswan-kernel-libipsec.so
+%{_libdir}/strongswan/libipsec.so.*
+%{_libdir}/strongswan/plugins/libstrongswan-kernel-libipsec.so
-%if 0%{?fedora} >= 19 || 0%{?rhel} >= 7
%files charon-nm
%doc COPYING
%{_libexecdir}/%{name}/charon-nm
-%endif
%changelog
+* Sat Sep 09 2017 Paul Wouters <pwouters(a)redhat.com> - 5.6.0-1
+- Updated to 5.6.0
+- Fixup configure arguments, enabled a bunch of new features
+- Added new BuildRequires:
+- Fixup Obsolete/Conflicts, use license macro
+- Don't require autoconf/autotools for non-snapshots
+- Remove macro overuse, remove fedora/rhel checks and sysvinit support
+- Make listings/grouping of all plugins/libs to reduce file listing
+
* Thu Aug 03 2017 Fedora Release Engineering <releng(a)fedoraproject.org> - 5.5.3-3
- Rebuilt for
https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild