pyrox.dev
strongswan: 5.5.3 -> 5.6.0
See: https://wiki.strongswan.org/versions/66
fixes #28485
authored by Bas van Dijk and committed by Jörg Thalheim 70aa1e36 ad7439fb
+3
-7
pkgs/tools/networking/strongswan/default.nix
+3
-7
pkgs/tools/networking/strongswan/default.nix
···
1
-
{ stdenv, fetchurl, fetchpatch, gmp, pkgconfig, python, autoreconfHook
1
+
{ stdenv, fetchurl, gmp, pkgconfig, python, autoreconfHook
2
2
, curl, trousers, sqlite, iptables, libxml2, openresolv
3
3
, ldns, unbound, pcsclite, openssl, systemd, pam
4
4
, enableTNC ? false }:
5
5
6
6
stdenv.mkDerivation rec {
7
7
name = "strongswan-${version}";
8
-
version = "5.5.3";
8
+
version = "5.6.0";
9
9
10
10
src = fetchurl {
11
11
url = "http://download.strongswan.org/${name}.tar.bz2";
12
-
sha256 = "1m7qq0l5pwj1wy0f7h2b7msb1d98rx78z6xg27g0hiqpk6qm9sn5";
12
+
sha256 = "04vvha2zgsg1cq05cnn6sf7a4hq9ndnsfxpw1drm5v9l4vcw0kd1";
13
13
};
14
14
15
15
dontPatchELF = true;
···
21
21
++ stdenv.lib.optionals stdenv.isLinux [ systemd.dev pam ];
22
22
23
23
patches = [
24
-
(fetchpatch {
25
-
url = "https://download.strongswan.org/security/CVE-2017-11185/strongswan-4.4.0-5.5.3_gmp_mpz_export.patch";
26
-
sha256 = "1vqf077dq71wai7ma3bpzv55i76b48gp2cf6507chgy4wj04gi73";
27
-
})
28
24
./ext_auth-path.patch
29
25
./firewall_defaults.patch
30
26
./updown-path.patch