[ubuntu/cosmic-proposed] strongswan 5.6.2-2ubuntu1 (Accepted)

Christian Ehrhardt christian.ehrhardt at canonical.com
Tue Jun 5 06:44:13 UTC 2018


strongswan (5.6.2-2ubuntu1) cosmic; urgency=medium

  * Merge with Debian unstable, closes LP: #1773814 and LP: #1772705.
    Remaining changes:
    + Clean up d/strongswan-starter.postinst: section about runlevel changes
    + Clean up d/strongswan-starter.postinst: Removed entire section on
      opportunistic encryption disabling - this was never in strongSwan and
      won't be see upstream issue #2160.
    + d/rules: Removed patching ipsec.conf on build (not using the
      debconf-managed config.)
    + d/ipsec.secrets.proto: Removed ipsec.secrets.inc reference (was
      used for debconf-managed include of private key).
    + Mass enablement of extra plugins and features to allow a user to use
      strongswan for a variety of extra use cases without having to rebuild.
      - d/control: Add required additional build-deps
      - d/control: Mention addtionally enabled plugins
      - d/rules: Enable features at configure stage
      - d/libbstrongswan-extra-plugins.install: Add plugins (so, lib, conf)
      - d/libstrongswan.install: Add plugins (so, conf)
    + d/strongswan-starter.install: Install pool feature, which is useful since
      we have attr-sql plugin enabled as well using it.
    + Add plugin kernel-libipsec to allow the use of strongswan in containers
      via this userspace implementation (please do note that this is still
      considered experimental by upstream).
      - d/libcharon-extra-plugins.install: Add kernel-libipsec components
      - d/control: List kernel-libipsec plugin at extra plugins description
      - d/p/dont-load-kernel-libipsec-plugin-by-default.patch: As
        upstream recommends to not load kernel-libipsec by default.
    + Relocate tnc plugin
     - debian/libcharon-extra-plugins.install: Drop tnc from extra plugins
     - Add new subpackage for TNC in d/strongswan-tnc-* and d/control
    + d/libstrongswan.install: Reorder conf and .so alphabetically
    + d/libstrongswan.install: Add kernel-netlink configuration files
    + Complete the disabling of libfast; This was partially accepted in Debian,
        it is no more packaging medcli and medsrv, but still builds and
        mentions it.
      - d/rules: Add --disable-fast to avoid build time and dependencies
      - d/control: Remove medcli, medsrv from package description
    + d/control: Mention mgf1 plugin which is in libstrongswan now
    + Add now built (since 5.5.1) libraries libtpmtss and nttfft to
      libstrongswan-extra-plugins (no deps from default plugins).
    + d/control, d/libcharon-{extras,standard}-plugins.install: Move charon
      plugins for the most common use cases from extra-plugins into a new
      standard-plugins package. This will allow those use cases without pulling
      in too much more plugins (a bit like the tnc package). Recommend that
      package from strongswan-libcharon.
  * Dropped Changes (no more needed after 18.04)
    + Add rm_conffile for /etc/init.d/ipsec (transition from precies had
      missed that, droppable after 18.04)
    + d/control: bump breaks/replaces from libstrongswan-extra-plugins to
      libstrongswan as we dropped relocating ccm and test-vectors.
      (droppable >18.04).
    + d/control: add breaks/replace from libstrongswan to
      libstrongswan-extra-plugins for the move of mgf1 to libstrongswan.
      (droppable >18.04).
    + d/control: bump breaks/replaces for the move of the updown plugin
      (Missed Changelog entry on last merge)
    + d/control: fix dependencies of strongswan-libcharon due to the move
      the updown plugin (droppable >18.04).
  * Added Changes:
    + d/usr.sbin.charon-systemd: allow to contact mysql for sql and
      attr-sql plugins (LP: #1766240)
    + d/usr.sbin.charon-systemd: allow systemd notifications (LP: #1765652)

strongswan (5.6.2-2) unstable; urgency=medium

  * charon-nm: Fix building list of DNS/MDNS servers with libnm
  * d/control: drop b-d on n-m-dev and make libnm-dev linux-any
    (closes: #895434)
  * d/compat bumped to 10
  * d/rules: drop parallel and autoreconf from dh, done with compat 10

Date: Tue, 29 May 2018 08:21:42 +0200
Changed-By: Christian Ehrhardt <christian.ehrhardt at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/strongswan/5.6.2-2ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 29 May 2018 08:21:42 +0200
Source: strongswan
Binary: strongswan libstrongswan libstrongswan-standard-plugins libstrongswan-extra-plugins libcharon-standard-plugins libcharon-extra-plugins strongswan-starter strongswan-libcharon strongswan-charon strongswan-nm strongswan-tnc-ifmap strongswan-tnc-base strongswan-tnc-client strongswan-tnc-server strongswan-tnc-pdp charon-cmd strongswan-pki strongswan-scepclient strongswan-swanctl charon-systemd
Architecture: source
Version: 5.6.2-2ubuntu1
Distribution: cosmic
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Christian Ehrhardt <christian.ehrhardt at canonical.com>
Description:
 charon-cmd - standalone IPsec client
 charon-systemd - strongSwan IPsec client, systemd support
 libcharon-extra-plugins - strongSwan charon library (extra plugins)
 libcharon-standard-plugins - strongSwan charon library (standard plugins)
 libstrongswan - strongSwan utility and crypto library
 libstrongswan-extra-plugins - strongSwan utility and crypto library (extra plugins)
 libstrongswan-standard-plugins - strongSwan utility and crypto library (standard plugins)
 strongswan - IPsec VPN solution metapackage
 strongswan-charon - strongSwan Internet Key Exchange daemon
 strongswan-libcharon - strongSwan charon library
 strongswan-nm - strongSwan plugin to interact with NetworkManager
 strongswan-pki - strongSwan IPsec client, pki command
 strongswan-scepclient - strongSwan IPsec client, SCEP client
 strongswan-starter - strongSwan daemon starter and configuration file parser
 strongswan-swanctl - strongSwan IPsec client, swanctl command
 strongswan-tnc-base - strongSwan Trusted Network Connect's (TNC) - base files
 strongswan-tnc-client - strongSwan Trusted Network Connect's (TNC) - client files
 strongswan-tnc-ifmap - strongSwan plugin for Trusted Network Connect's (TNC) IF-MAP clie
 strongswan-tnc-pdp - strongSwan plugin for Trusted Network Connect's (TNC) PDP
 strongswan-tnc-server - strongSwan Trusted Network Connect's (TNC) - server files
Closes: 895434
Launchpad-Bugs-Fixed: 1765652 1766240 1772705 1773814
Changes:
 strongswan (5.6.2-2ubuntu1) cosmic; urgency=medium
 .
   * Merge with Debian unstable, closes LP: #1773814 and LP: #1772705.
     Remaining changes:
     + Clean up d/strongswan-starter.postinst: section about runlevel changes
     + Clean up d/strongswan-starter.postinst: Removed entire section on
       opportunistic encryption disabling - this was never in strongSwan and
       won't be see upstream issue #2160.
     + d/rules: Removed patching ipsec.conf on build (not using the
       debconf-managed config.)
     + d/ipsec.secrets.proto: Removed ipsec.secrets.inc reference (was
       used for debconf-managed include of private key).
     + Mass enablement of extra plugins and features to allow a user to use
       strongswan for a variety of extra use cases without having to rebuild.
       - d/control: Add required additional build-deps
       - d/control: Mention addtionally enabled plugins
       - d/rules: Enable features at configure stage
       - d/libbstrongswan-extra-plugins.install: Add plugins (so, lib, conf)
       - d/libstrongswan.install: Add plugins (so, conf)
     + d/strongswan-starter.install: Install pool feature, which is useful since
       we have attr-sql plugin enabled as well using it.
     + Add plugin kernel-libipsec to allow the use of strongswan in containers
       via this userspace implementation (please do note that this is still
       considered experimental by upstream).
       - d/libcharon-extra-plugins.install: Add kernel-libipsec components
       - d/control: List kernel-libipsec plugin at extra plugins description
       - d/p/dont-load-kernel-libipsec-plugin-by-default.patch: As
         upstream recommends to not load kernel-libipsec by default.
     + Relocate tnc plugin
      - debian/libcharon-extra-plugins.install: Drop tnc from extra plugins
      - Add new subpackage for TNC in d/strongswan-tnc-* and d/control
     + d/libstrongswan.install: Reorder conf and .so alphabetically
     + d/libstrongswan.install: Add kernel-netlink configuration files
     + Complete the disabling of libfast; This was partially accepted in Debian,
         it is no more packaging medcli and medsrv, but still builds and
         mentions it.
       - d/rules: Add --disable-fast to avoid build time and dependencies
       - d/control: Remove medcli, medsrv from package description
     + d/control: Mention mgf1 plugin which is in libstrongswan now
     + Add now built (since 5.5.1) libraries libtpmtss and nttfft to
       libstrongswan-extra-plugins (no deps from default plugins).
     + d/control, d/libcharon-{extras,standard}-plugins.install: Move charon
       plugins for the most common use cases from extra-plugins into a new
       standard-plugins package. This will allow those use cases without pulling
       in too much more plugins (a bit like the tnc package). Recommend that
       package from strongswan-libcharon.
   * Dropped Changes (no more needed after 18.04)
     + Add rm_conffile for /etc/init.d/ipsec (transition from precies had
       missed that, droppable after 18.04)
     + d/control: bump breaks/replaces from libstrongswan-extra-plugins to
       libstrongswan as we dropped relocating ccm and test-vectors.
       (droppable >18.04).
     + d/control: add breaks/replace from libstrongswan to
       libstrongswan-extra-plugins for the move of mgf1 to libstrongswan.
       (droppable >18.04).
     + d/control: bump breaks/replaces for the move of the updown plugin
       (Missed Changelog entry on last merge)
     + d/control: fix dependencies of strongswan-libcharon due to the move
       the updown plugin (droppable >18.04).
   * Added Changes:
     + d/usr.sbin.charon-systemd: allow to contact mysql for sql and
       attr-sql plugins (LP: #1766240)
     + d/usr.sbin.charon-systemd: allow systemd notifications (LP: #1765652)
 .
 strongswan (5.6.2-2) unstable; urgency=medium
 .
   * charon-nm: Fix building list of DNS/MDNS servers with libnm
   * d/control: drop b-d on n-m-dev and make libnm-dev linux-any
     (closes: #895434)
   * d/compat bumped to 10
   * d/rules: drop parallel and autoreconf from dh, done with compat 10
Checksums-Sha1:
 6d9072405db71b503fd353be9fab9d811bd64299 3923 strongswan_5.6.2-2ubuntu1.dsc
 34f8888acc4019e15e43a53f0f4356664ded8b66 4977859 strongswan_5.6.2.orig.tar.bz2
 df8f627375f7ca39b1d2dbe12fd0190427c50727 136704 strongswan_5.6.2-2ubuntu1.debian.tar.xz
 a7bb52f52da85d99e54f39e99b7261e7e65df5d5 10411 strongswan_5.6.2-2ubuntu1_source.buildinfo
Checksums-Sha256:
 4d6a13eb1aaf1eaa0512107ba9eaafea892da19caedfca52da41293f43e85f6f 3923 strongswan_5.6.2-2ubuntu1.dsc
 e0a60a30ebf3c534c223559e1686497a21ded709a5d605c5123c2f52bcc22e92 4977859 strongswan_5.6.2.orig.tar.bz2
 7a141709aa79b8614fcc10881713cf791afc25768c56f1a4c0ecdef2c11c2885 136704 strongswan_5.6.2-2ubuntu1.debian.tar.xz
 452bfe72daef20603b7ed390e35ea1df5e60e738ff8b08024498705e88184640 10411 strongswan_5.6.2-2ubuntu1_source.buildinfo
Files:
 a376cd04649079470d257d29248acd8d 3923 net optional strongswan_5.6.2-2ubuntu1.dsc
 46aa3aa18fbc4bd528f9a0345ce79913 4977859 net optional strongswan_5.6.2.orig.tar.bz2
 08ab140d38c14a0ec8cfd1091de8a0e5 136704 net optional strongswan_5.6.2-2ubuntu1.debian.tar.xz
 ec85ba69590640e966d8a92db80eaa74 10411 net optional strongswan_5.6.2-2ubuntu1_source.buildinfo
Original-Maintainer: strongSwan Maintainers <pkg-swan-devel at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----
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=iwoE
-----END PGP SIGNATURE-----


More information about the Cosmic-changes mailing list