debian/0000775000000000000000000000000012300437272007170 5ustar debian/copyright0000664000000000000000000002101712255412766011136 0ustar Format: http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ Upstream-Name: ike Upstream-Contact: Matthew Grooms Source: https://www.shrew.net/download/ike Files: * Copyright: 2006-2013 Shrew Soft Inc. Comment: The archive was repacked using get-orig-source : the RFCs files in the /doc directory are deleted because they do not follow the Debian Free Software Guidelines (section 3). License: Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: 1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. 2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. 3. Redistributions in any form must be accompanied by information on how to obtain complete source code for the software and any accompanying software that uses the software. The source code must either be included in the distribution or be available for no more than the cost of distribution plus a nominal fee, and must be freely redistributable under reasonable conditions. For an executable file, complete source code means the source code for all modules it contains. It does not include source code for modules or files that typically accompany the major components of the operating system on which the executable file runs. . THIS SOFTWARE IS PROVIDED BY SHREW SOFT INC ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT, ARE DISCLAIMED. IN NO EVENT SHALL SHREW SOFT INC BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. . Legal notice (as shown on upstream website): . This software uses the OpenSSL Toolkit ( http://www.openssl.org ) to provide strong cryptography. For this reason, please read the following legal notices. . BY DOWNLOADING THE SHREW SOFT VPN CLIENT, YOU ARE OBTAINING SOFTWARE THAT IMPLEMENTS STRONG CRYPTOGRAPHIC FUNCTIONALITY WHICH MAY BE CONTROLLED AND/OR REGULATED BY LAWS IN YOUR COUNTRY. YOU HEREBY CLAIM TO UNDERSTAND YOUR LEGAL OBLIGATION IN THIS REGARD AND ASSUME RESPONSIBILITY FOR THE VIOLATION OF ANY LAWS THAT GOVERN THE IMPORT/EXPORT AND/OR USE OF THE SOFTWARE IN YOUR COUNTRY. . The second disclaimer is text which is present on the OpenSSL download page. . OpenSSL Disclaimer . This software package uses strong cryptography, so even if it is created, maintained and distributed from liberal countries in Europe (where it is legal to do this), it falls under certain export/import and/or use restrictions in some other parts of the world. . PLEASE REMEMBER THAT EXPORT/IMPORT AND/OR USE OF STRONG CRYPTOGRAPHY SOFTWARE, PROVIDING CRYPTOGRAPHY HOOKS OR EVEN JUST COMMUNICATING TECHNICAL DETAILS ABOUT CRYPTOGRAPHY SOFTWARE IS ILLEGAL IN SOME PARTS OF THE WORLD. SO, WHEN YOU IMPORT THIS PACKAGE TO YOUR COUNTRY, RE-DISTRIBUTE IT FROM THERE OR EVEN JUST EMAIL TECHNICAL SUGGESTIONS OR EVEN SOURCE PATCHES TO THE AUTHOR OR OTHER PEOPLE YOU ARE STRONGLY ADVISED TO PAY CLOSE ATTENTION TO ANY EXPORT/IMPORT AND/OR USE LAWS WHICH APPLY TO YOU. THE AUTHORS OF OPENSSL ARE NOT LIABLE FOR ANY VIOLATIONS YOU MAKE HERE. SO BE CAREFUL, IT IS YOUR RESPONSIBILITY. Files: source/compat/tun_ioctls.h Copyright: 2004, 2005, 2006, 2007, 2008, 2009 Mattias Nissler License: BSD-3-clause Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: . 1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. 2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. 3. The name of the author may not be used to endorse or promote products derived from this software without specific prior written permission. . THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. Files: source/libidb/base64* Copyright: 1996 by Internet Software Consortium Portions 1995 by International Business Machines, Inc. License: ISC and IBM-DNS License: ISC Permission to use, copy, modify, and distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright notice and this permission notice appear in all copies. . THE SOFTWARE IS PROVIDED "AS IS" AND INTERNET SOFTWARE CONSORTIUM DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL INTERNET SOFTWARE CONSORTIUM BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. License: IBM-DNS International Business Machines, Inc. (hereinafter called IBM) grants permission under its copyrights to use, copy, modify, and distribute this Software with or without fee, provided that the above copyright notice and all paragraphs of this notice appear in all copies, and that the name of IBM not be used in connection with the marketing of any product incorporating the Software or modifications thereof, without specific, written prior permission. . To the extent it has a right to do so, IBM grants an immunity from suit under its patents, if any, for the use, sale or manufacture of products to the extent that such products are used for performing Domain Name System dynamic updates in TCP/IP networks by means of the Software. No immunity is granted for any product per se or for any other function of any product. . THE SOFTWARE IS PROVIDED "AS IS", AND IBM DISCLAIMS ALL WARRANTIES, INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL IBM BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE, EVEN IF IBM IS APPRISED OF THE POSSIBILITY OF SUCH DAMAGES. Files: debian/* Copyright: 2008 Nicolas Deschildre 2008, 2009, 2010 Philipp Matthias Hahn 2013 Christian Hofstaedtler License: GPL-3 This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. . This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. . You should have received a copy of the GNU General Public License along with this package; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA . On Debian systems, the full text of the GNU General Public License version 3 can be found in the file `/usr/share/common-licenses/GPL-3'. debian/ike-qtgui.lintian-overrides0000664000000000000000000000006112230403115014433 0ustar ike-qtgui: possible-gpl-code-linked-with-openssl debian/ike-qtgui.install0000664000000000000000000000016412230403115012447 0ustar debian/ike.desktop usr/share/applications/ usr/bin/qikea usr/bin/qikec source/qikea/png/ikea.png usr/share/pixmaps/ debian/ike.manpages0000664000000000000000000000016412230403114011444 0ustar debian/tmp/usr/share/man/man1/ikec.1 debian/tmp/usr/share/man/man5/iked.conf.5 debian/tmp/usr/share/man/man8/iked.8 debian/changelog0000664000000000000000000000761212300437205011044 0ustar ike (2.2.1+dfsg-2ubuntu1) trusty; urgency=low * Add missing lib to link, resolving FTBFS. -- Daniel T Chen Mon, 17 Feb 2014 11:53:12 -0500 ike (2.2.1+dfsg-2) unstable; urgency=medium * ike: Replace squeeze version of ike-qtgui (Closes: #734462) * Bump Standards-Version to 3.9.5 (no changes) -- Christian Hofstaedtler Tue, 07 Jan 2014 15:22:27 +0100 ike (2.2.1+dfsg-1) unstable; urgency=low * New maintainer, reintroduce to unstable. * New upstream version. * GUI uses Qt4 * New ikec command line tool * Conflict with ike-server meta-package, drop associated README.Debian * drop wrapper scripts and replace them with RPATH * Enable hardening flags * Switch to debhelper 9 * Switch to source format 3.0 (quilt) * Bump Standards-Version to 3.9.4 * Add Keywords to desktop file * Fix Error in German description * Expand Recommends -- Christian Hofstaedtler Sat, 21 Dec 2013 23:33:59 +0100 ike (2.1.5+dfsg-2) unstable; urgency=medium * Fix "CVE-2010-3361: insecure library loading" caused by LD_LIBRARY_PATH=: in debian/wrappers/iked (Closes: #598292) * Fix "CVE-2010-3361: insecure library loading" caused by LD_LIBRARY_PATH=: in debian/wrappers/ike[ac] (Closes: #598293) -- Philipp Matthias Hahn Fri, 08 Oct 2010 14:57:57 +0200 ike (2.1.5+dfsg-1) unstable; urgency=low * New upstream version. * debian/rules: update download-location. -- Philipp Matthias Hahn Sun, 06 Dec 2009 09:09:25 +0100 ike (2.1.4+dfsg-4) unstable; urgency=low * debian/watch: Chaneg to new location http://www.shrew.net/download/ike/ike-(.*)-release.tgz -- Philipp Matthias Hahn Tue, 06 Oct 2009 10:46:53 +0200 ike (2.1.4+dfsg-3) unstable; urgency=low * Fix incorrect init.d dependencies and runlevel in script/iked. (Closes: #545893) Thanks to Petter Reinholdtsen. * debian/ike.{pre,post}{inst,rm}: Fix "package installation fails" by ignoring errors during start on install. (Closes: #486656) * debian/control: - Standards-Version: 3.8.3: no changes required. - ike: Add reference to other IKEv1 daemons. * debian/rules: drop deprecated call of dh_desktop. -- Philipp Matthias Hahn Tue, 06 Oct 2009 10:29:12 +0200 ike (2.1.4+dfsg-2) unstable; urgency=low * Fix circular dependency with iked.h & conf.token.hpp. (Closes: #521951) * debian/control: Standards-Version: 3.8.1 - Fix script/iked to not start iked.real multiple times. -- Philipp Matthias Hahn Tue, 07 Apr 2009 23:50:32 +0200 ike (2.1.4+dfsg-1) unstable; urgency=low * New upstream version. * debian/watch: Fix download location. -- Philipp Matthias Hahn Thu, 13 Nov 2008 19:50:14 +0100 ike (2.1.3+dfsg-1) unstable; urgency=low * New upstream version. (Closes: #500139) - bug in check of remote IPv4 address (Closes: #500027) * debian/rules: - "dh_makeshlibs -n" because libraries are not public - Remove ${misc:Depends} from Depends-lines - add source/ikea/conflict.h, source/iked/etkey to FILESTOCLEAN * debian/wrapper/* - Do exec instead of forking * debian/control: - Bump Standards-Version to 3.8.0: no changes required - Adopt package on Nicolas request. Thanks for previous maintenance. * debian/{control,copyright,init.d,rules} - Strip trailing white spaces: s/\s\+$// * source/iked/iked.{8,conf.5} - Remove path-prefix /usr/local * Use script/iked instead of debian/ike.init -- Philipp Matthias Hahn Wed, 22 Oct 2008 23:42:59 +0200 ike (2.1.0+dfsg-1) unstable; urgency=low * New upstream version. -- Nicolas Deschildre Wed, 28 May 2008 00:07:17 +0200 ike (2.0.3+dfsg-1) unstable; urgency=low * Initial release (Closes: #482589) -- Nicolas Deschildre Tue, 27 May 2008 19:45:32 +0200 debian/ike.postrm0000664000000000000000000000016412230364521011205 0ustar #!/bin/sh # See /usr/share/debhelper/dh_make/debian/postrm.ex set -e ike_error() { echo $? } #DEBHELPER# exit 0 debian/ike.postinst0000664000000000000000000000016312230364521011543 0ustar #!/bin/sh # See /usr/share/debhelper/dh_make/debian/postinst.ex set -e ike_error() { true } #DEBHELPER# exit 0 debian/ike.install0000664000000000000000000000007512230403115011321 0ustar etc/iked.conf usr/sbin/iked usr/bin/ikec usr/lib/*/ike/*.so* debian/ike.init0000775000000000000000000000703312230403115010622 0ustar #! /bin/sh ### BEGIN INIT INFO # Provides: ike # Required-Start: $remote_fs $syslog # Required-Stop: $remote_fs $syslog # Default-Start: 2 3 4 5 # Default-Stop: 0 1 6 # Short-Description: Shrew Soft IKE Daemon # Description: Manage the Shrew Soft IKE Daemon ### END INIT INFO PATH=/sbin:/usr/sbin:/bin:/usr/bin DESC="Shrew Soft IKE Daemon" NAME=iked PIDFILE=/var/run/$NAME.pid DAEMON=/usr/sbin/$NAME DAEMON_ARGS="-p $PIDFILE" SCRIPTNAME=/etc/init.d/ike test -x $DAEMON || exit 0 . /lib/init/vars.sh . /lib/lsb/init-functions do_start() { # Return # 0 if daemon has been started # 1 if daemon was already running # 2 if daemon could not be started start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON --test > /dev/null \ || return 1 start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON -- \ $DAEMON_ARGS \ || return 2 # Add code here, if necessary, that waits for the process to be ready # to handle requests from services started subsequently which depend # on this one. As a last resort, sleep for some time. } # # Function that stops the daemon/service # do_stop() { # Return # 0 if daemon has been stopped # 1 if daemon was already stopped # 2 if daemon could not be stopped # other if a failure occurred start-stop-daemon --stop --quiet --retry=TERM/30/KILL/5 --pidfile $PIDFILE --name $NAME RETVAL="$?" [ "$RETVAL" = 2 ] && return 2 # Wait for children to finish too if this is a daemon that forks # and if the daemon is only ever run from this initscript. # If the above conditions are not satisfied then add some other code # that waits for the process to drop all resources that could be # needed by services started subsequently. A last resort is to # sleep for some time. start-stop-daemon --stop --quiet --oknodo --retry=0/30/KILL/5 --exec $DAEMON [ "$?" = 2 ] && return 2 # Many daemons don't delete their pidfiles when they exit. rm -f $PIDFILE return "$RETVAL" } case "$1" in start) [ "$VERBOSE" != no ] && log_daemon_msg "Starting $DESC" "$NAME" do_start case "$?" in 0|1) [ "$VERBOSE" != no ] && log_end_msg 0 ;; 2) [ "$VERBOSE" != no ] && log_end_msg 1 ;; esac ;; stop) [ "$VERBOSE" != no ] && log_daemon_msg "Stopping $DESC" "$NAME" do_stop case "$?" in 0|1) [ "$VERBOSE" != no ] && log_end_msg 0 ;; 2) [ "$VERBOSE" != no ] && log_end_msg 1 ;; esac ;; status) status_of_proc "$DAEMON" "$NAME" && exit 0 || exit $? ;; restart|force-reload) # # If the "reload" option is implemented then remove the # 'force-reload' alias # log_daemon_msg "Restarting $DESC" "$NAME" do_stop case "$?" in 0|1) do_start case "$?" in 0) log_end_msg 0 ;; 1) log_end_msg 1 ;; # Old process is still running *) log_end_msg 1 ;; # Failed to start esac ;; *) # Failed to stop log_end_msg 1 ;; esac ;; *) echo "Usage: $SCRIPTNAME {start|stop|status|restart|force-reload}" >&2 exit 3 ;; esac : debian/ike.prerm0000664000000000000000000000016312230364521011005 0ustar #!/bin/sh # See /usr/share/debhelper/dh_make/debian/prerm.ex set -e ike_error() { echo $? } #DEBHELPER# exit 0 debian/ike-qtgui.manpages0000664000000000000000000000011412230403114012566 0ustar debian/tmp/usr/share/man/man1/qikea.1 debian/tmp/usr/share/man/man1/qikec.1 debian/ike.desktop0000664000000000000000000000111512230404222011320 0ustar [Desktop Entry] Name=Shrew Soft VPN Access Manager Name[en_CA]=Shrew Soft VPN Access Manager Name[de]=Shrew Soft VPN Zugangsverwaltung Comment=Application to manage remote site configurations Comment[en_CA]=Application to manage remote site configurations Comment[de]=Anwendung zum Verwalten der VPN-Konfigurationen Exec=/usr/bin/qikea Icon=ikea Terminal=false Type=Application Categories=Network # TRANSLATORS: Search terms to find this application. Do NOT translate or localize the semicolons! The list MUST also end with a semicolon! Keywords=vpn;remote;access;ras;company;network;ike; debian/ike.docs0000664000000000000000000000001312230364521010602 0ustar README.TXT debian/patches/0000775000000000000000000000000012300437165010620 5ustar debian/patches/spelling0000664000000000000000000001067212231321702012356 0ustar diff --git a/source/iked/ike.exch.config.cpp b/source/iked/ike.exch.config.cpp index a9390e7..dbe95dd 100644 --- a/source/iked/ike.exch.config.cpp +++ b/source/iked/ike.exch.config.cpp @@ -2462,12 +2462,12 @@ long _IKED::config_xconf_get( IDB_CFG * cfg, long & getbits, long getmask, VENDO { if( attr->basic ) log.txt( LLOG_DEBUG, - "ii : - Unkown BASIC %u = %u\n", + "ii : - Unknown BASIC %u = %u\n", attr->atype, attr->bdata ); else log.txt( LLOG_DEBUG, - "ii : - Unkown VARIABLE %u = %u bytes\n", + "ii : - Unknown VARIABLE %u = %u bytes\n", attr->atype, attr->vdata.size() ); } diff --git a/source/iked/ike.names.cpp b/source/iked/ike.names.cpp index 9632a21..20bf167 100644 --- a/source/iked/ike.names.cpp +++ b/source/iked/ike.names.cpp @@ -277,9 +277,9 @@ const char * _IKED::find_name( long type, long id ) static const char * pload13 = "vendor"; static const char * pload14 = "attribute"; static const char * pload15 = "nat discovery draft"; - static const char * pload16 = "nat original adress draft"; + static const char * pload16 = "nat original address draft"; static const char * pload17 = "nat discovery rfc"; - static const char * pload18 = "nat original adress rfc"; + static const char * pload18 = "nat original address rfc"; static const char * pload19 = "fragment"; switch( id ) diff --git a/source/iked/ike.xconf.cpp b/source/iked/ike.xconf.cpp index 0a0b8d6..179483a 100644 --- a/source/iked/ike.xconf.cpp +++ b/source/iked/ike.xconf.cpp @@ -177,7 +177,7 @@ bool _IKED_XCONF::pool4_get( in_addr & addr ) iked.text_addr( txtaddr, addr ); iked.log.txt( LLOG_DEBUG, - "ii : address %s aquired from %s pool\n", + "ii : address %s acquired from %s pool\n", txtaddr, name() ); diff --git a/source/iked/iked.conf.5 b/source/iked/iked.conf.5 index eec50fb..1817ccd 100644 --- a/source/iked/iked.conf.5 +++ b/source/iked/iked.conf.5 @@ -60,12 +60,12 @@ are enclosed using the .Ql \&{ and .Ql \&} -charachters. Statements begin with a keyword optionally followed by +characters. Statements begin with a keyword optionally followed by a parameter list and are terminated with the .Ql \&; -charachter. Lines that begin with the +character. Lines that begin with the .Ql \&# -charachter are treated as comments. +character are treated as comments. .Pp .Lp This document denotes keywords using @@ -76,14 +76,14 @@ font. Optional parameters are enclosed using the .Ql \&[ and .Ql \&] -charachters. Multiple keywords that may be valid for a single parameter are +characters. Multiple keywords that may be valid for a single parameter are enclosed using the .Ql \&( and .Ql \&) -charachters and separated using the +characters and separated using the .Ql \&| -charachter. +character. .Pp The defined parameter types are as follows ... .Pp @@ -91,11 +91,11 @@ The defined parameter types are as follows ... .It Ar number A decimal number .It Ar label -A string comprised of alphanumeric charachters +A string comprised of alphanumeric characters .It Ar quoted A quoted string enclosed in .Ql \&" -charachters +characters .It Ar address An IP address expressed as x.x.x.x .It Ar network @@ -267,7 +267,7 @@ is specified, the daemon will initiate contact and allow the peer to initiate contact. .It Ic exchange (main | aggressive) ; Specifies the exchange type to be used for phase1 negotiations with a peer. -The default value for this paramater is +The default value for this parameter is .Ic main . .It Ic natt_mode (disable | enable | force [ draft | rfc ] ) ; Specifies the NAT Traversal mode to be used for phase1 negotiations with a @@ -343,7 +343,7 @@ Specifies either the .Ic local identity to be sent to a peer or the .Ic remote -identity to be compared with the value recieved from a peer during phase1 +identity to be compared with the value received from a peer during phase1 negotiations. The valid identity .Ar types are as follows ... @@ -459,7 +459,7 @@ is used, the daemon will generate appropriate IPsec policies and pass all defined networks during the Configuration Exchange if requested. A peer would use this configuration information to selectively tunnel all traffic destined for any one of these networks. If -.Ic exlcude +.Ic exclude is used, the daemon will generate appropriate discard policies and pass all .Ic netgroup defined networks during the Configuration Exchange if requested. A peer would debian/patches/out-of-tree0000664000000000000000000000316712230403540012710 0ustar From: Christian Hofstaedtler Origin: Debian Subject: Fix building out of tree diff --git a/source/iked/CMakeLists.txt b/source/iked/CMakeLists.txt index 2e41586..0834257 100644 --- a/source/iked/CMakeLists.txt +++ b/source/iked/CMakeLists.txt @@ -111,7 +111,7 @@ add_custom_target( ConfParser echo "Creating Conf Parser" ) add_custom_command( SOURCE conf.token.ll COMMAND ${PATH_BIN_FLEX} - ARGS -d -oconf.token.cpp conf.token.ll + ARGS -d -oconf.token.cpp ${CMAKE_CURRENT_SOURCE_DIR}/conf.token.ll TARGET ConfParser OUTPUTS conf.token.cpp ) @@ -120,7 +120,7 @@ add_custom_command( add_custom_command( SOURCE conf.parse.yy COMMAND ${PATH_BIN_BISON} - ARGS -oconf.parse.cpp conf.parse.yy + ARGS -oconf.parse.cpp ${CMAKE_CURRENT_SOURCE_DIR}/conf.parse.yy TARGET ConfParser OUTPUTS conf.parse.cpp conf.parse.hpp location.hh position.hh stack.hh ) diff --git a/source/qikea/CMakeLists.txt b/source/qikea/CMakeLists.txt index 98682e2..efa4ee3 100644 --- a/source/qikea/CMakeLists.txt +++ b/source/qikea/CMakeLists.txt @@ -14,6 +14,7 @@ include_directories( ${IKE_SOURCE_DIR}/source/libidb ${IKE_SOURCE_DIR}/source/libith ${IKE_SOURCE_DIR}/source/liblog + ${CMAKE_CURRENT_BINARY_DIR} ${QT_INCLUDES} ) link_directories( diff --git a/source/qikec/CMakeLists.txt b/source/qikec/CMakeLists.txt index 4a6f1b4..cdf5f1f 100644 --- a/source/qikec/CMakeLists.txt +++ b/source/qikec/CMakeLists.txt @@ -16,6 +16,7 @@ include_directories( ${IKE_SOURCE_DIR}/source/libith ${IKE_SOURCE_DIR}/source/liblog ${IKE_SOURCE_DIR}/source/libip + ${CMAKE_CURRENT_BINARY_DIR} ${QT_INCLUDES} ) link_directories( debian/patches/paths0000664000000000000000000000153312230403673011663 0ustar Subject: Remove path-prefix /usr/local Origin: Debian From: Philipp Matthias Hahn diff --git a/source/iked/iked.8 b/source/iked/iked.8 index d6a5757..a3521f9 100644 --- a/source/iked/iked.8 +++ b/source/iked/iked.8 @@ -81,7 +81,7 @@ Run the program as a foreground application. The command exits with 0 on success, and non-zero on errors. .Sh FILES The default configuration file is -.Pa /usr/local/etc/iked.conf +.Pa /etc/iked.conf .Sh SEE ALSO .Xr ikea 1 , .Xr ikec 1 , diff --git a/source/iked/iked.conf.5 b/source/iked/iked.conf.5 index eec50fb..4d9b096 100644 --- a/source/iked/iked.conf.5 +++ b/source/iked/iked.conf.5 @@ -666,7 +666,7 @@ xconf_local nbns4 10.1.1.1; dns_suffix "foo.com"; dns_list "foo.com" "bar.com"; - banner "/usr/local/etc/iked.motd"; + banner "/etc/iked.motd"; pfs_group 2; } debian/patches/series0000664000000000000000000000005012300436707012031 0ustar paths out-of-tree spelling underlinkage debian/patches/underlinkage0000664000000000000000000000060612300437165013215 0ustar Index: ike-2.2.1+dfsg/source/libith/CMakeLists.txt =================================================================== --- ike-2.2.1+dfsg.orig/source/libith/CMakeLists.txt 2013-10-18 22:12:09.000000000 -0400 +++ ike-2.2.1+dfsg/source/libith/CMakeLists.txt 2014-02-17 11:53:07.064741056 -0500 @@ -20,6 +20,7 @@ target_link_libraries( ss_ith + pthread rt ) endif( PATH_LIB_RT ) debian/ike-qtgui.docs0000664000000000000000000000001312230364521011731 0ustar README.TXT debian/watch0000664000000000000000000000027212230364521010220 0ustar # See uscan(1) for format # Compulsory line, this is a version 3 file version=3 opts=dversionmangle=s/\+dfsg$// \ http://www.shrew.net/download/ike /download/ike/ike-(.*)-release.tgz debian/ike.dirs0000664000000000000000000000001312230403115010604 0ustar etc/init.d debian/control0000664000000000000000000000343112300436665010601 0ustar Source: ike Section: net Priority: extra Maintainer: Ubuntu Developers XSBC-Original-Maintainer: Christian Hofstaedtler Build-Depends: debhelper (>= 9), flex, bison (>= 2.3), libqt4-dev, libssl-dev (>= 0.9), cmake (>= 2.4), dpkg-dev (>= 1.16.1.1), libedit-dev Standards-Version: 3.9.5 Homepage: http://www.shrew.net/ Package: ike Architecture: any Pre-Depends: ${misc:Pre-Depends} Depends: ${shlibs:Depends}, ${misc:Depends} Recommends: ike-qtgui, ipsec-tools Provides: ike-server Conflicts: ike-server Replaces: ike-qtgui (<= 2.2) Breaks: ike-qtgui (<= 2.2) Description: Shrew Soft VPN client - Daemon and libraries The Shrew Soft VPN client is a free IPsec VPN Client for FreeBSD, NetBSD, Linux and Windows operating systems. This product can be used to communicate with Open Source VPN servers (e.g. ipsec-tools) as well as some commercial VPN servers. . This package provides a IKEv1 (ipsec key exchange) daemon and libraries used to maintain a IPSec VPN connection. It provides similar functionality as racoon, OpenSwan, FreeSwan, StrongSwan, IsaKmpD but is more user-interactive. . Note: You should install the ike-qtgui package to have a graphical user interface to configure and use VPN connections. Package: ike-qtgui Architecture: any Depends: ${shlibs:Depends}, ${misc:Depends} Recommends: ike (>= ${binary:Version}) Description: Shrew Soft VPN client - Connection manager The Shrew Soft VPN Client is a free IPsec VPN Client for FreeBSD, NetBSD, Linux and Windows operating systems. This product can be used to communicate with Open Source VPN servers (e.g. ipsec-tools) as well as some commercial VPN servers. . This package provides the connection manager program, which allows one to create, manage and use VPN connections. debian/source/0000775000000000000000000000000012230403114010456 5ustar debian/source/format0000664000000000000000000000001412230403114011664 0ustar 3.0 (quilt) debian/ike.lintian-overrides0000664000000000000000000000005312230374523013317 0ustar ike: possible-gpl-code-linked-with-openssl debian/compat0000664000000000000000000000000212230403115010355 0ustar 9 debian/rules0000775000000000000000000000271112230403115010240 0ustar #!/usr/bin/make -f export DEB_BUILD_MAINT_OPTIONS = hardening=+all DPKG_EXPORT_BUILDFLAGS = 1 include /usr/share/dpkg/buildflags.mk DEB_HOST_GNU_TYPE := $(shell dpkg-architecture -qDEB_HOST_GNU_TYPE) # Files to delete from the source archive to be in accordance with the Debian free software guidelines DFSG_FILESTOCLEAN = ike/docs/* VERSION:=$(shell dpkg-parsechangelog | grep '^Version' | sed 's/Version: //' | sed -e 's/+[^+]*$$//') URL = http://www.shrew.net/download/ike/ike-$(VERSION)-release.tgz get-orig-source: wget -O ike.tar.gz "$(URL)" tar zxvf ike.tar.gz $(RM) $(DFSG_FILESTOCLEAN) mkdir tmp mv ike tmp/ike-$(VERSION)+dfsg cd tmp && tar cvf ike_$(VERSION)+dfsg.orig.tar ike-$(VERSION)+dfsg cd tmp && gzip -9 ike_$(VERSION)+dfsg.orig.tar mv tmp/ike_$(VERSION)+dfsg.orig.tar.gz . $(RM) -R tmp $(RM) ike.tar.gz %: dh $@ --parallel override_dh_auto_configure: dh_auto_configure -- -DQTGUI=YES -DNATT=YES -DCMAKE_INSTALL_PREFIX:PATH=/usr -DETCDIR:PATH=/etc -DMANDIR:PATH=/usr/share/man -DLIBDIR=/usr/lib/$(DEB_HOST_GNU_TYPE)/ike -DCMAKE_INSTALL_RPATH:UNINITIALIZED=/usr/lib/$(DEB_HOST_GNU_TYPE)/ike -DDEBUG=YES override_dh_auto_install: dh_auto_install mv debian/tmp/etc/iked.conf.sample debian/tmp/etc/iked.conf override_dh_installchangelogs: dh_installchangelogs TODO.TXT override_dh_installinit: dh_installinit -p ike --error-handler=ike_error override_dh_makeshlibs: dh_makeshlibs -n override_dh_shlibdeps: dh_shlibdeps -l/usr/lib/ike debian/ike-qtgui.dirs0000664000000000000000000000010712230403115011737 0ustar usr/bin usr/share/man/man1/ usr/share/applications/ usr/share/pixmaps/