blob: 404a8f7d7ce1d0852a34ffacadb01457964c6220 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
|
require 'formula'
class Strongswan < Formula
homepage 'http://www.strongswan.org'
url 'http://download.strongswan.org/strongswan-5.1.3.tar.bz2'
sha1 '6f8898308999b8fc293812ea5812a12c9ddbedc7'
bottle do
sha1 "7a63c925dde5195c98e3e63dc3fb6eb963eac106" => :mavericks
sha1 "f4e35b174358d712e8fab4bee12a7a864860b05c" => :mountain_lion
sha1 "a6006954a5d396d2822212bec774f7a4b863e19f" => :lion
end
option 'with-curl', 'Build with libcurl based fetcher'
option 'with-suite-b', 'Build with Suite B support (does not use the IPsec implementation provided by the kernel)'
depends_on 'openssl' if build.with? "suite-b" or MacOS.version <= :leopard
depends_on 'curl' => :optional
def install
args = %W[
--disable-dependency-tracking
--prefix=#{prefix}
--sbindir=#{bin}
--sysconfdir=#{etc}
--disable-defaults
--enable-charon
--enable-cmd
--enable-constraints
--enable-eap-identity
--enable-eap-md5
--enable-eap-gtc
--enable-eap-mschapv2
--enable-ikev1
--enable-ikev2
--enable-kernel-pfroute
--enable-nonce
--enable-openssl
--enable-osx-attr
--enable-pem
--enable-pgp
--enable-pkcs1
--enable-pkcs8
--enable-pubkey
--enable-revocation
--enable-socket-default
--enable-sshkey
--enable-stroke
--enable-tools
--enable-updown
--enable-unity
--enable-xauth-generic
]
args << "--enable-curl" if build.with? 'curl'
args << "--enable-kernel-pfkey" if build.without? 'suite-b'
args << "--enable-kernel-libipsec" if build.with? 'suite-b'
# problem with weak reference, will be fixed in the next release
inreplace "src/libstrongswan/utils/test.c" do |s|
s.gsub! /__attribute__.+$/, "{}"
s.gsub! /!testable_functions_create/, "TRUE"
end
system "./configure", *args
system "make", "install"
end
def caveats
msg = <<-EOS.undent
strongSwan's configuration files are placed in:
#{etc}
You will have to run both 'ipsec' and 'charon-cmd' with 'sudo'.
EOS
if build.with? 'suite-b'
msg += <<-EOS.undent
If you previously ran strongSwan without Suite B support it might be
required to execute 'sudo sysctl -w net.inet.ipsec.esp_port=0' in order
to receive packets.
EOS
end
return msg
end
end
|
