Accepted freeswan 2.01-3 (i386 source all)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Mon, 6 Oct 2003 14:57:23 +0200
Source: freeswan
Binary: kernel-patch-freeswan freeswan-modules-source freeswan
Architecture: source i386 all
Version: 2.01-3
Distribution: unstable
Urgency: high
Maintainer: Rene Mayrhofer <rmayr@debian.org>
Changed-By: Rene Mayrhofer <rmayr@debian.org>
Description:
freeswan - IPSEC utilities for FreeSWan
freeswan-modules-source - IPSEC kernel modules source for FreeSWan
kernel-patch-freeswan - IPSEC kernel support for FreeSWan
Closes: 212669
Changes:
freeswan (2.01-3) unstable; urgency=high
.
Urgency is high because of the wrong permissions. Besides that, this is the
first 2.x package which has both freeswan-modules-source and
kernel-patch-freeswan working.
* Whoa, "beautifying" debian/rules in the last upload left dh_fixperms after
changing the permissions of /etc/ipsec.* and thus left /etc/ipsec.* with
wrong permissions ! /etc/ipsec.secrets was world-readable on a fresh
installation of freeswan 2.01-2, fixed now.
* Make NAT Traversal work again - it was a lot of patching work so I
sent my diff to Mathieu Lafon for integration in his next NAT
Traversal patch package.
* Added a "Source: " line to the freeswan-modules-source control file,
which should make the package build again on unstable boxes.
* freeswan-modules-source and kernel-patch-freeswan now depend on
coreutils | fileutils, so that backporting to woody is simpler
(in fact, it only needs to be recompiled on a woody box).
* "Fixed" the clean target of debian/rules so that dpkg-buildpackage is now
idempotent.
* freeswan-modules-source now uses the rootcmd properly (some code snippets
have been taken from alsa-driver, as suggested by the bug report).
Closes: #212669: freeswan-modules-source: build process doesn't use
rootcmd correctly
* Changed the AES patch so that it at least applies cleanly to a vanilla
2.4.22 kernel source tree. It won't work with the Debian kernels due to
the 2.5.x IPSec backport. Sorry folks, but I simply don't know what to do
about this. There are patches to make it work with the Debian package, but
applying them will break compatibility with vanilla kernels. For now, I
will stick to vanilla kernels and hopefully get support for the kernel
IPSec backport running soon.
* The freeswan-modules-source package now also compiles the crypto extension
modules correctly. However, NAT Traversal will not work with the
freeswan-modules-source package because it needs a patch to the kernel
UDP code.
* Get the automatic RSA key insertion into /etc/ipsec.secrets in postinst
working again.
* Create the X.509 certificate in /etc/ipsec.d/certs instead of /etc/ipsec.d.
The new X.509 patch expects it that way.
* Removed the debconf warning about this being an experimental package. I no
longer consider it as experimental since it has proven itself on my
machines.
Files:
98fceda38791630917c0a772808e1b94 672 net optional freeswan_2.01-3.dsc
8b427d70d8796eab57f63c338f851f8c 620696 net optional freeswan_2.01-3.diff.gz
be9eeadad9a60f1560f9028858faad63 859218 net optional freeswan-modules-source_2.01-3_all.deb
c4c4857a12e76084901487a161c8db56 773396 net optional kernel-patch-freeswan_2.01-3_all.deb
cf5b89773f5bc375ee5bbe000a078afc 2100506 net optional freeswan_2.01-3_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)
iEYEARECAAYFAj+EHWEACgkQq7SPDcPCS97BDwCfRnPyegX7gzzcqSbwTJgVM3y5
yNEAoMjBKC5hVY567+pk0AEAk8A4geo1
=xAQc
-----END PGP SIGNATURE-----
Accepted:
freeswan-modules-source_2.01-3_all.deb
to pool/main/f/freeswan/freeswan-modules-source_2.01-3_all.deb
freeswan_2.01-3.diff.gz
to pool/main/f/freeswan/freeswan_2.01-3.diff.gz
freeswan_2.01-3.dsc
to pool/main/f/freeswan/freeswan_2.01-3.dsc
freeswan_2.01-3_i386.deb
to pool/main/f/freeswan/freeswan_2.01-3_i386.deb
kernel-patch-freeswan_2.01-3_all.deb
to pool/main/f/freeswan/kernel-patch-freeswan_2.01-3_all.deb
--
To UNSUBSCRIBE, email to debian-devel-changes-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org