-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Mon, 6 Oct 2003 14:57:23 +0200 Source: freeswan Binary: kernel-patch-freeswan freeswan-modules-source freeswan Architecture: source i386 all Version: 2.01-3 Distribution: unstable Urgency: high Maintainer: Rene Mayrhofer <rmayr@debian.org> Changed-By: Rene Mayrhofer <rmayr@debian.org> Description: freeswan - IPSEC utilities for FreeSWan freeswan-modules-source - IPSEC kernel modules source for FreeSWan kernel-patch-freeswan - IPSEC kernel support for FreeSWan Closes: 212669 Changes: freeswan (2.01-3) unstable; urgency=high . Urgency is high because of the wrong permissions. Besides that, this is the first 2.x package which has both freeswan-modules-source and kernel-patch-freeswan working. * Whoa, "beautifying" debian/rules in the last upload left dh_fixperms after changing the permissions of /etc/ipsec.* and thus left /etc/ipsec.* with wrong permissions ! /etc/ipsec.secrets was world-readable on a fresh installation of freeswan 2.01-2, fixed now. * Make NAT Traversal work again - it was a lot of patching work so I sent my diff to Mathieu Lafon for integration in his next NAT Traversal patch package. * Added a "Source: " line to the freeswan-modules-source control file, which should make the package build again on unstable boxes. * freeswan-modules-source and kernel-patch-freeswan now depend on coreutils | fileutils, so that backporting to woody is simpler (in fact, it only needs to be recompiled on a woody box). * "Fixed" the clean target of debian/rules so that dpkg-buildpackage is now idempotent. * freeswan-modules-source now uses the rootcmd properly (some code snippets have been taken from alsa-driver, as suggested by the bug report). Closes: #212669: freeswan-modules-source: build process doesn't use rootcmd correctly * Changed the AES patch so that it at least applies cleanly to a vanilla 2.4.22 kernel source tree. It won't work with the Debian kernels due to the 2.5.x IPSec backport. Sorry folks, but I simply don't know what to do about this. There are patches to make it work with the Debian package, but applying them will break compatibility with vanilla kernels. For now, I will stick to vanilla kernels and hopefully get support for the kernel IPSec backport running soon. * The freeswan-modules-source package now also compiles the crypto extension modules correctly. However, NAT Traversal will not work with the freeswan-modules-source package because it needs a patch to the kernel UDP code. * Get the automatic RSA key insertion into /etc/ipsec.secrets in postinst working again. * Create the X.509 certificate in /etc/ipsec.d/certs instead of /etc/ipsec.d. The new X.509 patch expects it that way. * Removed the debconf warning about this being an experimental package. I no longer consider it as experimental since it has proven itself on my machines. Files: 98fceda38791630917c0a772808e1b94 672 net optional freeswan_2.01-3.dsc 8b427d70d8796eab57f63c338f851f8c 620696 net optional freeswan_2.01-3.diff.gz be9eeadad9a60f1560f9028858faad63 859218 net optional freeswan-modules-source_2.01-3_all.deb c4c4857a12e76084901487a161c8db56 773396 net optional kernel-patch-freeswan_2.01-3_all.deb cf5b89773f5bc375ee5bbe000a078afc 2100506 net optional freeswan_2.01-3_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3 (GNU/Linux) iEYEARECAAYFAj+EHWEACgkQq7SPDcPCS97BDwCfRnPyegX7gzzcqSbwTJgVM3y5 yNEAoMjBKC5hVY567+pk0AEAk8A4geo1 =xAQc -----END PGP SIGNATURE----- Accepted: freeswan-modules-source_2.01-3_all.deb to pool/main/f/freeswan/freeswan-modules-source_2.01-3_all.deb freeswan_2.01-3.diff.gz to pool/main/f/freeswan/freeswan_2.01-3.diff.gz freeswan_2.01-3.dsc to pool/main/f/freeswan/freeswan_2.01-3.dsc freeswan_2.01-3_i386.deb to pool/main/f/freeswan/freeswan_2.01-3_i386.deb kernel-patch-freeswan_2.01-3_all.deb to pool/main/f/freeswan/kernel-patch-freeswan_2.01-3_all.deb -- To UNSUBSCRIBE, email to debian-devel-changes-request@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org