Accepted freeswan 1.99-3 (i386 source all)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Sun, 16 Feb 2003 21:17:08 +0100
Source: freeswan
Binary: kernel-patch-freeswan kernel-patch-freeswan-ext freeswan
Architecture: source i386 all
Version: 1.99-3
Distribution: unstable
Urgency: low
Maintainer: Rene Mayrhofer <rmayr@debian.org>
Changed-By: Rene Mayrhofer <rene@mayrhofer.eu.org>
Description:
freeswan - IPSEC utilities for FreeSWan
kernel-patch-freeswan - IPSEC kernel support for FreeSwan
kernel-patch-freeswan-ext - IPSEC kernel support for FreeSwan + modular extensions
Closes: 115737 127236 133752 134650 135068 139024 139857 141059 143311 143362 148364 151064 167508 167730 168673 171491 173682 179756
Changes:
freeswan (1.99-3) unstable; urgency=low
.
This is the "maintainer isn't dead and is sometimes even reading bug
reports" release. Besides introducing a few new, hopefully helpful patches,
it fixes quite some bug reports (and yes, even some of the long-standing
ones).
* Updated the X.509 patch, which should now include a pretty stable version
of the protocol and port selector.
* Updated the NAT traversal patch and made it apply (i.e. resolve conflicts
with the updated X.509 patch).
* Added the single-DES patch to allow selection of single-DES as "cipher".
[*ducks* Please don't kill me for that. I know that it's inherently
insecure and thus I don't give any hint in any README file that this
is available. But some may need it for interoperability with broken
IPSec routers.]
However, this patch is currently not applied, only contained in the source
package. It does not apply cleanly with the other patches and I have to
figure out if it works if I manually apply it (I also do this for other
patches, but the other ones seem to have no problems other than
syntactical ones). If anybody wants to play with it, just download the
source, rename the .disabled file in debian/pre-build-patches/ to .diff
and recompile.
* Added the %any %any shared secrets patch. If anybody needs road warrior
support with shared secrets, this will enable it (and should do not harm
otherwise).
Please note that the last patch only affects pluto, not the kernel code
Thus it should not be able to break your system in any way, just make
pluto a bit more flexible.
This patch is also currently not applied, for the same reason as the
single-DES patch isn't.
* Removed that bogus comment at the end of ipsec.secrets when
inserting a private key reference.
* Moved the example configurations from ext-patches to crypto-ext-patches.
* Finally deal with the start order with NFS: let the user choose if
/usr is mounted via NFS or not (and start as early as possible by
default, i.e. directly after the network has been set up).
While on the way, also let the user choose if it should start after
PCMCIA.
Closes: #134650: freeswan: starts too late on NIS/NFS clients
Closes: #143362: Freeswan init script should start after pcmcia
Closes: #151064: freeswan: FreeSWan starts too early when using local DNS
lookups
* Change the logcheck ignore patterns to match current syslog messages.
Closes: #168673: Change templates for logcheck
* Insert the contents of the plain RSA key instead of the temporary
filename into ipsec.secrets .....
Closes: #167730: freeswan: Do not generate ipsec.secret
Closes: #167508: freeswan: plain keypairs do not go into /etc/ipsec.secrets
correctly
* Also check for the existance of the automatically generated X.509
certificate and key files before overwriting them.
Closes: #171491: freeswan: x509 certificate recreated upon upgrade
* Use empty strings for empty fields in the debconf questions instead of
dots.
Closes: #143311: freeswan: empty x509 settings should not require dots
* Changed the example for the X.509 state field (ST) in the debconf template.
Closes: #148364: freeswan: bogus ST in X.509 DN example
* I didn't hear anything back from the bug reporter and don't have any
access to a Sparc machine. Thus, I am now closing this bug, which should
have gone away with the new upstream version.
Closes: #173682: kernel-patch-freeswan: freeswan compilation and
ioctl() error on sparc64
* Ok, I finally removed gawk completely (i.e. --purge) from my system
and tried freeswan. As I could not notice any problems and Angus Lees
also reported that it worked successfully, I am now closing this bug.
I know that the upstream docs say that gawk is needed, but I can't see
a reason for this at the moment. If the bug persists, then please send
me the full error messages (bug reporter did not respond to Angus Lees's
request to post the error message to the BTS).
Closes: #179756: Freeswan: Gawk (again) is missing from dependencies
.
* Finally acknowledging these bugs that have been fixed in previous NMUs.
Closes: #133752: kernel-patch-freeswan: unpatch/freeswan remove empty
files
Closes: #139024: freeswan: wrong logcheck rule filters ALL "unusual"
syslog messages
Closes: #141059: kernel-patch-freeswan: link error with freeswan 1.64
and 2.4.18 kernel
Closes: #127236: freeswan: FTBFS with gcc 3.0 (hppe/unstable)
Closes: #135068: [Bugs] FreeS/WAN on hppa
Closes: #139857: Undeclared dependency on gawk
Closes: #115737: freeswan: bashism in /usr/lib/ipsec/_plutorun
Files:
922dfd4e3964dc9311b8a48a5aee2dec 687 net optional freeswan_1.99-3.dsc
b37126ab12f080af53419dd3e12338c0 460443 net optional freeswan_1.99-3.diff.gz
2a6f147d8efbab21f2b98d5ed6099f94 620616 net optional kernel-patch-freeswan_1.99-3_all.deb
5675b04fd2ad845597c786427e8de708 832208 net optional kernel-patch-freeswan-ext_1.99-3_all.deb
c1ad91d2a0e5c5d8c57426d98a250886 1806686 net optional freeswan_1.99-3_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iEYEARECAAYFAj5ZTB4ACgkQq7SPDcPCS95SMgCg7syrRUJwW6OYUPLFrS5BDDjy
eTsAoJ/EeeS08QchkgjaEm/zevLfpc5k
=F9Gb
-----END PGP SIGNATURE-----
Accepted:
freeswan_1.99-3.diff.gz
to pool/main/f/freeswan/freeswan_1.99-3.diff.gz
freeswan_1.99-3.dsc
to pool/main/f/freeswan/freeswan_1.99-3.dsc
freeswan_1.99-3_i386.deb
to pool/main/f/freeswan/freeswan_1.99-3_i386.deb
kernel-patch-freeswan-ext_1.99-3_all.deb
to pool/main/f/freeswan/kernel-patch-freeswan-ext_1.99-3_all.deb
kernel-patch-freeswan_1.99-3_all.deb
to pool/main/f/freeswan/kernel-patch-freeswan_1.99-3_all.deb
--
To UNSUBSCRIBE, email to debian-devel-changes-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org