From bf39596278e00fa35d34496dbc2047c7bea291ea Mon Sep 17 00:00:00 2001 From: Ankur Tyagi Date: Tue, 13 Oct 2026 17:39:58 +1300 Subject: [PATCH] strongwan: upgrade 6.0.7 -> 6.1.0 - Remove PACKAGECONFIG entries for soup, tnc-ifmap, tnccs-11, tnccs-dynamic - Include xauth-generic in default PACKAGECONFIG. This preserves default plugin as upstream disabled IKEv1 by default. root@qemux86-64:~# swanctl --stats uptime: 38 seconds, since Oct 13 03:27:29 2026 worker threads: 16 total, 11 idle, working: 4/0/1/0 job queues: 0/0/0/0 jobs scheduled: 0 IKE_SAs: 0 total, 0 half-open mallinfo: sbrk 1503232, mmap 0, used 552176, free 951056 loaded plugins: charon-systemd random nonce x509 revocation constraints pubkey pkcs1 pkcs7 pgp dnskey sshkey pem openssl pkcs8 xcbc cmac kdf drbg curl sqlite attr kernel-netlink resolve socket-default vici updown xauth-generic Changelog: https://github.com/strongswan/strongswan/releases/tag/6.1.0 Signed-off-by: Ankur Tyagi Signed-off-by: Khem Raj --- .../{strongswan_6.0.7.bb => strongswan_6.1.0.bb} | 10 +++------- 1 file changed, 3 insertions(+), 7 deletions(-) rename meta-networking/recipes-support/strongswan/{strongswan_6.0.7.bb => strongswan_6.1.0.bb} (94%) diff --git a/meta-networking/recipes-support/strongswan/strongswan_6.0.7.bb b/meta-networking/recipes-support/strongswan/strongswan_6.1.0.bb similarity index 94% rename from meta-networking/recipes-support/strongswan/strongswan_6.0.7.bb rename to meta-networking/recipes-support/strongswan/strongswan_6.1.0.bb index 117c148865..f6dac33c0f 100644 --- a/meta-networking/recipes-support/strongswan/strongswan_6.0.7.bb +++ b/meta-networking/recipes-support/strongswan/strongswan_6.1.0.bb @@ -10,7 +10,7 @@ DEPENDS:append = "${@bb.utils.contains('DISTRO_FEATURES', 'tpm2', ' tpm2-tss', SRC_URI = "https://download.strongswan.org/strongswan-${PV}.tar.bz2" -SRC_URI[sha256sum] = "e518e34e159514f4c6ba80d1f926cb151e0dd4e3a1d94213171234b8b9ae6f55" +SRC_URI[sha256sum] = "fe6c97481298767213cfc2e9a1da29fdd8018d481ff4cb9cf0283099654f20d4" UPSTREAM_CHECK_REGEX = "strongswan-(?P\d+(\.\d+)+)\.tar" @@ -21,7 +21,7 @@ EXTRA_OECONF = " \ EXTRA_OECONF += "${@bb.utils.contains('DISTRO_FEATURES', 'systemd', '--with-systemdsystemunitdir=${systemd_unitdir}/system/', '--without-systemdsystemunitdir', d)}" -PACKAGECONFIG ?= "curl openssl sqlite3 swanctl \ +PACKAGECONFIG ?= "curl openssl sqlite3 swanctl xauth-generic \ ${@bb.utils.contains('DISTRO_FEATURES', 'systemd', 'systemd-charon', 'charon', d)} \ ${@bb.utils.contains('DISTRO_FEATURES', 'tpm2', 'tpm2', '', d)} \ ${@bb.utils.contains('DISTRO_FEATURES', 'ima', 'tnc-imc imc-hcd imc-os imc-scanner imc-attestation', '', d)} \ @@ -48,10 +48,10 @@ PACKAGECONFIG[pkcs12] = "--enable-pkcs12,--disable-pkcs12,,${PN}-plugin-pkcs12" PACKAGECONFIG[rc2] = "--enable-rc2,--disable-rc2,,${PN}-plugin-rc2" PACKAGECONFIG[sha1] = "--enable-sha1,--disable-sha1,,${PN}-plugin-sha1" PACKAGECONFIG[sha2] = "--enable-sha2,--disable-sha2,,${PN}-plugin-sha2" -PACKAGECONFIG[soup] = "--enable-soup,--disable-soup,libsoup,${PN}-plugin-soup" PACKAGECONFIG[sqlite3] = "--enable-sqlite,--disable-sqlite,sqlite3,${PN}-plugin-sqlite" PACKAGECONFIG[stroke] = "--enable-stroke,--disable-stroke,,${PN}-plugin-stroke" PACKAGECONFIG[swanctl] = "--enable-swanctl,--disable-swanctl,,libgcc" +PACKAGECONFIG[xauth-generic] = "--enable-xauth-generic,--disable-xauth-generic,,${PN}-plugin-xauth-generic" PACKAGECONFIG[curve25519] = "--enable-curve25519,--disable-curve25519,, ${PN}-plugin-curve25519" # requires swanctl @@ -80,12 +80,9 @@ PACKAGECONFIG[imv-attestation] = "--enable-imv-attestation,--disable-imv-attesta PACKAGECONFIG[imv-swima] = "--enable-imv-swima, --disable-imv-swima, json-c," PACKAGECONFIG[imv-hcd] = "--enable-imv-hcd, --disable-imv-hcd,," -PACKAGECONFIG[tnc-ifmap] = "--enable-tnc-ifmap,--disable-tnc-ifmap, libxml2, ${PN}-plugin-tnc-ifmap" PACKAGECONFIG[tnc-pdp] = "--enable-tnc-pdp,--disable-tnc-pdp,, ${PN}-plugin-tnc-pdp" -PACKAGECONFIG[tnccs-11] = "--enable-tnccs-11,--disable-tnccs-11,libxml2, ${PN}-plugin-tnccs-11" PACKAGECONFIG[tnccs-20] = "--enable-tnccs-20,--disable-tnccs-20,, ${PN}-plugin-tnccs-20" -PACKAGECONFIG[tnccs-dynamic] = "--enable-tnccs-dynamic,--disable-tnccs-dynamic,,${PN}-plugin-tnccs-dynamic" inherit autotools systemd pkgconfig @@ -174,7 +171,6 @@ RDEPENDS:${PN} += "\ ${PN}-plugin-updown \ ${PN}-plugin-vici \ ${PN}-plugin-x509 \ - ${PN}-plugin-xauth-generic \ ${PN}-plugin-xcbc \ "