diff --git a/security/strongswan/Makefile b/security/strongswan/Makefile index e1ca503716ff..32d8925fc022 100644 --- a/security/strongswan/Makefile +++ b/security/strongswan/Makefile @@ -1,181 +1,181 @@ PORTNAME= strongswan -DISTVERSION= 6.0.4 +DISTVERSION= 6.0.5 CATEGORIES= security net-vpn MASTER_SITES= https://download.strongswan.org/ \ https://download2.strongswan.org/ MAINTAINER= strongswan@nanoteq.com COMMENT= Open Source IKEv2 IPsec-based VPN solution WWW= https://www.strongswan.org LICENSE= GPLv2 LICENSE_FILE= ${WRKSRC}/LICENSE USES= cpe libtool:keepla pkgconfig ssl tar:bzip2 USE_LDCONFIG= ${PREFIX}/lib/ipsec USE_RC_SUBR= strongswan GNU_CONFIGURE= yes CONFIGURE_ARGS= --sysconfdir=${PREFIX}/etc \ --disable-gmp \ --disable-kernel-netlink \ --disable-scripts \ --enable-addrblock \ --enable-blowfish \ --enable-cmd \ --enable-eap-identity \ --enable-eap-md5 \ --enable-eap-mschapv2 \ --enable-eap-peap \ --enable-eap-tls \ --enable-eap-ttls \ --enable-kernel-pfkey \ --enable-kernel-pfroute \ --enable-md4 \ --enable-openssl \ --enable-whitelist \ --with-group=wheel \ --with-lib-prefix=${PREFIX} INSTALL_TARGET= install-strip TEST_TARGET= check OPTIONS_DEFINE= CTR CURL DHCP EAPAKA3GPP2 EAPDYNAMIC EAPRADIUS \ - EAPSIMFILE FARP GCM IKEV1 IPSECKEY KDF \ + EAPSIMFILE FARP FIPS_PRF GCM IKEV1 IPSECKEY KDF \ KERNELLIBIPSEC LDAP LOADTESTER MEDIATION ML MYSQL \ PKCS11 PKI PYTHON SMP SQLITE STROKE SWANCTL \ TESTVECTOR TPM TSS2 UNBOUND UNITY VICI XAUTH OPTIONS_DEFINE_i386= VIA OPTIONS_DEFAULT= BUILTIN CURL GCM IKEV1 KDF PKI SWANCTL VICI OPTIONS_SINGLE= PRINTF_HOOKS OPTIONS_SINGLE_PRINTF_HOOKS= BUILTIN LIBC VSTR OPTIONS_SUB= yes # Description of options BUILTIN_DESC= Use builtin printf hooks CTR_DESC= Enable CTR cipher mode wrapper plugin CURL_DESC= Enable CURL to fetch CRL/OCSP DHCP_DESC= Enable DHCP based attribute provider plugin EAPAKA3GPP2_DESC= Enable EAP AKA with 3gpp2 backend EAPDYNAMIC_DESC= Enable EAP dynamic proxy module EAPRADIUS_DESC= Enable EAP Radius proxy authentication EAPSIMFILE_DESC= Enable EAP SIM with file backend FARP_DESC= Enable farp plugin +FIPS_PRF_DESC= Enable FIPS PRF software implementation plugin GCM_DESC= Enable GCM AEAD wrapper crypto plugin IKEV1_DESC= Enable IKEv1 support IPSECKEY_DESC= Enable authentication with IPSECKEY resource records with DNSSEC KDF_DESC= Enable KDF (prf+) implementation plugin KERNELLIBIPSEC_DESC= Enable IPSec userland backend LIBC_DESC= Use libc printf hooks LOADTESTER_DESC= Enable load testing plugin MEDIATION_DESC= Enable IKEv2 Mediation Extension ML_DESC= Enable Module-Lattice-based crypto plugin PKCS11_DESC= Enable PKCS11 token support PKI_DESC= Enable PKI tools PYTHON_DESC= Python VICI protocol plugin SMP_DESC= Enable XML-based management protocol (DEPRECATED) STROKE_DESC= Enable stroke management protcol (DEPRECATED) SWANCTL_DESC= Install swanctl (requires VICI) TESTVECTOR_DESC= Enable crypto test vectors TPM_DESC= Enable TPM plugin TSS2_DESC= Enable TPM 2.0 TSS2 library UNBOUND_DESC= Enable DNSSEC-enabled resolver UNITY_DESC= Enable Cisco Unity extension plugin VIA_DESC= Enable VIA Padlock support VICI_DESC= Enable VICI management protocol VSTR_DESC= Use devel/vstr printf hooks XAUTH_DESC= Enable XAuth password verification # Extra options BUILTIN_CONFIGURE_ON= --with-printf-hooks=builtin CTR_CONFIGURE_ON= --enable-ctr CURL_LIB_DEPENDS= libcurl.so:ftp/curl CURL_CONFIGURE_ON= --enable-curl DHCP_CONFIGURE_ON= --enable-dhcp EAPAKA3GPP2_LIB_DEPENDS= libgmp.so:math/gmp EAPAKA3GPP2_CONFIGURE_ON= --enable-eap-aka \ --enable-eap-aka-3gpp2 EAPDYNAMIC_CONFIGURE_ON= --enable-eap-dynamic EAPRADIUS_CONFIGURE_ON= --enable-eap-radius EAPSIMFILE_CONFIGURE_ON= --enable-eap-sim \ --enable-eap-sim-file FARP_CONFIGURE_ON= --enable-farp +FIPS_PRF_CONFIGURE_ON= --enable-fips-prf GCM_CONFIGURE_ON= --enable-gcm IKEV1_CONFIGURE_OFF= --disable-ikev1 IPSECKEY_CONFIGURE_ON= --enable-ipseckey KDF_CONFIGURE_ON= --enable-kdf KERNELLIBIPSEC_CONFIGURE_ON= --enable-kernel-libipsec LDAP_USES= ldap LDAP_CONFIGURE_ON= --enable-ldap LIBC_CONFIGURE_ON= --with-printf-hooks=glibc LOADTESTER_CONFIGURE_ON= --enable-load-tester MEDIATION_CONFIGURE_ON= --enable-mediation ML_CONFIGURE_ON= --enable-ml MYSQL_LIB_DEPENDS= libunwind.so:devel/libunwind MYSQL_USES= mysql MYSQL_CONFIGURE_ON= --enable-mysql PKCS11_CONFIGURE_ON= --enable-pkcs11 PKI_CONFIGURE_OFF= --disable-pki PYTHON_IMPLIES= VICI PYTHON_RUN_DEPENDS= ${PYTHON_PKGNAMEPREFIX}vici>0:security/py-vici@${PY_FLAVOR} PYTHON_USES= python SMP_LIB_DEPENDS= libxml2.so:textproc/libxml2 SMP_CONFIGURE_ON= --enable-smp SQLITE_LIB_DEPENDS= libsqlite3.so:databases/sqlite3 SQLITE_CONFIGURE_ON= --enable-sqlite STROKE_CONFIGURE_ON= --enable-stroke SWANCTL_IMPLIES= VICI SWANCTL_CONFIGURE_ON= --enable-swanctl TESTVECTOR_CONFIGURE_ON= --enable-test-vectors TPM_CONFIGURE_ON= --enable-tpm TSS2_LIB_DEPENDS= libtss2-sys.so:security/tpm2-tss TSS2_CONFIGURE_ON= --enable-tss-tss2 UNBOUND_LIB_DEPENDS= libldns.so:dns/ldns \ libunbound.so:dns/unbound UNBOUND_CONFIGURE_ON= --enable-unbound UNITY_CONFIGURE_ON= --enable-unity VIA_CONFIGURE_ON= --enable-padlock VICI_CONFIGURE_ON= --enable-vici VICI_SUB_LIST= INTERFACE="vici" VICI_SUB_LIST_OFF= INTERFACE="stroke" VSTR_LIB_DEPENDS= libvstr.so:devel/vstr VSTR_CONFIGURE_ON= --with-printf-hooks=vstr XAUTH_CONFIGURE_ON= --enable-xauth-eap \ --enable-xauth-generic \ --enable-xauth-pam .include .if ${PORT_OPTIONS:MEAPSIMFILE} || ${PORT_OPTIONS:MEAPAKA3GPP2} PLIST_SUB+= SIMAKA="" .else PLIST_SUB+= SIMAKA="@comment " .endif .if ${PORT_OPTIONS:MMYSQL} || ${PORT_OPTIONS:MSQLITE} CONFIGURE_ARGS+= --enable-attr-sql \ --enable-sql PLIST_SUB+= SQL="" .else PLIST_SUB+= SQL="@comment " .endif .if ${PORT_OPTIONS:MIKEV1} || ${PORT_OPTIONS:MXAUTH} PLIST_SUB+= XAUTHGEN="" .else PLIST_SUB+= XAUTHGEN="@comment " .endif # Hack to disable VIA in plist of unsupported architectures .if ! ${OPTIONS_DEFINE:MVIA} PLIST_SUB+= VIA="@comment " .else .endif -post-install: -.if ${PORT_OPTIONS:MVICI} +post-install-VICI-on: ${INSTALL_DATA} ${WRKSRC}/src/libcharon/plugins/vici/libvici.h \ ${STAGEDIR}${PREFIX}/include -.endif .include diff --git a/security/strongswan/distinfo b/security/strongswan/distinfo index 2ca2f09706ae..a104380e2297 100644 --- a/security/strongswan/distinfo +++ b/security/strongswan/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1770718903 -SHA256 (strongswan-6.0.4.tar.bz2) = 79576bb61b9a406cea9eb73d0c565cc6254a6b6d2e7198f44758d2d7c61a7aec -SIZE (strongswan-6.0.4.tar.bz2) = 4915290 +TIMESTAMP = 1775505500 +SHA256 (strongswan-6.0.5.tar.bz2) = 437460893655d6cfbc2def79d2da548cb5175b865520c507201ab2ec2e7895d9 +SIZE (strongswan-6.0.5.tar.bz2) = 4925249 diff --git a/security/strongswan/files/patch-conf_Makefile.in b/security/strongswan/files/patch-conf_Makefile.in index 0f9f1851c691..53d4283d3e94 100644 --- a/security/strongswan/files/patch-conf_Makefile.in +++ b/security/strongswan/files/patch-conf_Makefile.in @@ -1,21 +1,33 @@ ---- conf/Makefile.in.orig 2024-03-19 10:57:29 UTC +--- conf/Makefile.in.orig 2026-03-23 12:42:09 UTC +++ conf/Makefile.in -@@ -917,15 +917,15 @@ install-data-local: $(plugins_install_src) - test -e "$(DESTDIR)${strongswanconfdir}" || $(INSTALL) -d "$(DESTDIR)$(strongswanconfdir)" || true - test -e "$(DESTDIR)${strongswanddir}" || $(INSTALL) -d "$(DESTDIR)$(strongswanddir)" || true - test -e "$(DESTDIR)${charonconfdir}" || $(INSTALL) -d "$(DESTDIR)$(charonconfdir)" || true +@@ -931,25 +931,25 @@ install-data-local: $(plugins_install_src) + test -e "$(DESTDIR)${charonconfdir}" || test -z "${charon_install_src}" || $(INSTALL) -d "$(DESTDIR)$(charonconfdir)" || true + test -e "$(DESTDIR)${cmdconfdir}" || test -z "${cmd_install_src}" || $(INSTALL) -d "$(DESTDIR)$(cmdconfdir)" || true + test -e "$(DESTDIR)${nmconfdir}" || test -z "${nm_install_src}" || $(INSTALL) -d "$(DESTDIR)$(nmconfdir)" || true - test -e "$(DESTDIR)$(strongswan_conf)" || $(INSTALL) -m 644 $(srcdir)/strongswan.conf $(DESTDIR)$(strongswan_conf) || true + test -e "$(DESTDIR)$(strongswan_conf)" || $(INSTALL) -m 644 $(srcdir)/strongswan.conf $(DESTDIR)$(strongswan_conf).sample || true for f in $(options_install_src); do \ name=`basename $$f`; \ - test -f "$(DESTDIR)$(strongswanddir)/$$name" || $(INSTALL) -m 644 "$(srcdir)/$$f" "$(DESTDIR)$(strongswanddir)/$$name" || true; \ + test -f "$(DESTDIR)$(strongswanddir)/$$name" || $(INSTALL) -m 644 "$(srcdir)/$$f" "$(DESTDIR)$(strongswanddir)/$${name}.sample" || true; \ done - for f in $(plugins_install_src); do \ + for f in $(charon_install_src); do \ name=`basename $$f`; \ if test -f "$$f"; then dir=; else dir="$(srcdir)/"; fi; \ - test -f "$(DESTDIR)$(charonconfdir)/$$name" || $(INSTALL) -m 644 "$$dir$$f" "$(DESTDIR)$(charonconfdir)/$$name" || true; \ + test -f "$(DESTDIR)$(charonconfdir)/$$name" || $(INSTALL) -m 644 "$$dir$$f" "$(DESTDIR)$(charonconfdir)/$${name}.sample" || true; \ done + for f in $(cmd_install_src); do \ + name=`basename $$f`; \ + if test -f "$$f"; then dir=; else dir="$(srcdir)/"; fi; \ +- test -f "$(DESTDIR)$(cmdconfdir)/$$name" || $(INSTALL) -m 644 "$$dir$$f" "$(DESTDIR)$(cmdconfdir)/$$name" || true; \ ++ test -f "$(DESTDIR)$(cmdconfdir)/$$name" || $(INSTALL) -m 644 "$$dir$$f" "$(DESTDIR)$(cmdconfdir)/$${name}.sample" || true; \ + done + for f in $(nm_install_src); do \ + name=`basename $$f`; \ + if test -f "$$f"; then dir=; else dir="$(srcdir)/"; fi; \ +- test -f "$(DESTDIR)$(nmconfdir)/$$name" || $(INSTALL) -m 644 "$$dir$$f" "$(DESTDIR)$(nmconfdir)/$$name" || true; \ ++ test -f "$(DESTDIR)$(nmconfdir)/$$name" || $(INSTALL) -m 644 "$$dir$$f" "$(DESTDIR)$(nmconfdir)/$${name}.sample" || true; \ + done # Tell versions [3.59,3.63) of GNU make to not export all variables. diff --git a/security/strongswan/files/patch-src_libcharon_plugins_smp_smp.c b/security/strongswan/files/patch-src_libcharon_plugins_smp_smp.c index c2dd9fcd8388..0c57dc92e0cc 100644 --- a/security/strongswan/files/patch-src_libcharon_plugins_smp_smp.c +++ b/security/strongswan/files/patch-src_libcharon_plugins_smp_smp.c @@ -1,23 +1,23 @@ ---- src/libcharon/plugins/smp/smp.c.orig 2024-03-19 10:25:55 UTC +--- src/libcharon/plugins/smp/smp.c.orig 2025-11-07 19:05:36 UTC +++ src/libcharon/plugins/smp/smp.c -@@ -745,7 +745,7 @@ plugin_t *smp_plugin_create() +@@ -743,7 +743,7 @@ PLUGIN_DEFINE(smp) */ - plugin_t *smp_plugin_create() + PLUGIN_DEFINE(smp) { - struct sockaddr_un unix_addr = { AF_UNIX, IPSEC_PIDDIR "/charon.xml"}; + struct sockaddr_un unix_addr; private_smp_t *this; mode_t old; -@@ -773,6 +773,11 @@ plugin_t *smp_plugin_create() +@@ -771,6 +771,11 @@ PLUGIN_DEFINE(smp) free(this); return NULL; } + + strlcpy(unix_addr.sun_path, IPSEC_PIDDIR "/charon.xml", + sizeof(unix_addr.sun_path)); + unix_addr.sun_len = sizeof(unix_addr); + unix_addr.sun_family = PF_LOCAL; unlink(unix_addr.sun_path); old = umask(S_IRWXO); diff --git a/security/strongswan/files/patch-src_libstrongswan_plugins_openssl_openssl__plugin.c b/security/strongswan/files/patch-src_libstrongswan_plugins_openssl_openssl__plugin.c index 07ff587133e4..94eecf68c2a2 100644 --- a/security/strongswan/files/patch-src_libstrongswan_plugins_openssl_openssl__plugin.c +++ b/security/strongswan/files/patch-src_libstrongswan_plugins_openssl_openssl__plugin.c @@ -1,11 +1,11 @@ ---- src/libstrongswan/plugins/openssl/openssl_plugin.c.orig 2024-02-21 15:54:00 UTC +--- src/libstrongswan/plugins/openssl/openssl_plugin.c.orig 2025-11-07 19:05:36 UTC +++ src/libstrongswan/plugins/openssl/openssl_plugin.c -@@ -814,7 +814,7 @@ plugin_t *openssl_plugin_create() +@@ -808,7 +808,7 @@ PLUGIN_DEFINE(openssl) }, ); -#if OPENSSL_VERSION_NUMBER >= 0x10100000L +#if OPENSSL_VERSION_NUMBER >= 0x10100000L && !defined(LIBRESSL_VERSION_NUMBER) /* note that we can't call OPENSSL_cleanup() when the plugin is destroyed * as we couldn't initialize the library again afterwards */ OPENSSL_init_crypto(OPENSSL_INIT_LOAD_CONFIG | diff --git a/security/strongswan/files/patch-src_swanctl_Makefile.in b/security/strongswan/files/patch-src_swanctl_Makefile.in index 2e6eaecbf6de..811962dc6b46 100644 --- a/security/strongswan/files/patch-src_swanctl_Makefile.in +++ b/security/strongswan/files/patch-src_swanctl_Makefile.in @@ -1,11 +1,11 @@ ---- src/swanctl/Makefile.in.orig 2024-03-19 10:57:37 UTC +--- src/swanctl/Makefile.in.orig 2026-03-23 12:42:13 UTC +++ src/swanctl/Makefile.in @@ -1151,7 +1151,7 @@ install-data-local: swanctl.conf - test -e "$(DESTDIR)$(swanctldir)/bliss" || $(INSTALL) -d -m 750 "$(DESTDIR)$(swanctldir)/bliss" || true + test -e "$(DESTDIR)$(swanctldir)/ecdsa" || $(INSTALL) -d -m 750 "$(DESTDIR)$(swanctldir)/ecdsa" || true test -e "$(DESTDIR)$(swanctldir)/pkcs8" || $(INSTALL) -d -m 750 "$(DESTDIR)$(swanctldir)/pkcs8" || true test -e "$(DESTDIR)$(swanctldir)/pkcs12" || $(INSTALL) -d -m 750 "$(DESTDIR)$(swanctldir)/pkcs12" || true - test -e "$(DESTDIR)$(swanctldir)/swanctl.conf" || $(INSTALL) -m 640 $(srcdir)/swanctl.conf $(DESTDIR)$(swanctldir)/swanctl.conf || true + test -e "$(DESTDIR)$(swanctldir)/swanctl.conf" || $(INSTALL) -m 640 $(srcdir)/swanctl.conf $(DESTDIR)$(swanctldir)/swanctl.conf.sample || true # Tell versions [3.59,3.63) of GNU make to not export all variables. # Otherwise a system limit (for SysV at least) may be exceeded. diff --git a/security/strongswan/pkg-plist b/security/strongswan/pkg-plist index d7b01dc2bc80..d7cb7ca22130 100644 --- a/security/strongswan/pkg-plist +++ b/security/strongswan/pkg-plist @@ -1,390 +1,434 @@ %%PKI%%bin/pki %%TPM%%bin/tpm_extendpcr @sample %%ETCDIR%%.conf.sample +@sample %%ETCDIR%%.d/charon-cmd.conf.sample +@sample %%ETCDIR%%.d/charon-cmd/blowfish.conf.sample +@sample %%ETCDIR%%.d/charon-cmd/cmac.conf.sample +@sample %%ETCDIR%%.d/charon-cmd/constraints.conf.sample +%%CTR%%@sample %%ETCDIR%%.d/charon-cmd/ctr.conf.sample +%%CURL%%@sample %%ETCDIR%%.d/charon-cmd/curl.conf.sample +@sample %%ETCDIR%%.d/charon-cmd/drbg.conf.sample +@sample %%ETCDIR%%.d/charon-cmd/eap-identity.conf.sample +@sample %%ETCDIR%%.d/charon-cmd/eap-md5.conf.sample +@sample %%ETCDIR%%.d/charon-cmd/eap-mschapv2.conf.sample +@sample %%ETCDIR%%.d/charon-cmd/eap-peap.conf.sample +@sample %%ETCDIR%%.d/charon-cmd/eap-tls.conf.sample +@sample %%ETCDIR%%.d/charon-cmd/eap-ttls.conf.sample +%%FIPS_PRF%%@sample %%ETCDIR%%.d/charon-cmd/fips-prf.conf.sample +%%GCM%%@sample %%ETCDIR%%.d/charon-cmd/gcm.conf.sample +%%EAPAKA3GPP2%%@sample %%ETCDIR%%.d/charon-cmd/gmp.conf.sample +@sample %%ETCDIR%%.d/charon-cmd/kdf.conf.sample +%%KERNELLIBIPSEC%%@sample %%ETCDIR%%.d/charon-cmd/kernel-libipsec.conf.sample +@sample %%ETCDIR%%.d/charon-cmd/kernel-pfkey.conf.sample +@sample %%ETCDIR%%.d/charon-cmd/kernel-pfroute.conf.sample +%%LDAP%%@sample %%ETCDIR%%.d/charon-cmd/ldap.conf.sample +@sample %%ETCDIR%%.d/charon-cmd/md4.conf.sample +%%EAPAKA3GPP2%%@sample %%ETCDIR%%.d/charon-cmd/mgf1.conf.sample +%%ML%%@sample %%ETCDIR%%.d/charon-cmd/ml.conf.sample +@sample %%ETCDIR%%.d/charon-cmd/nonce.conf.sample +@sample %%ETCDIR%%.d/charon-cmd/openssl.conf.sample +@sample %%ETCDIR%%.d/charon-cmd/pem.conf.sample +@sample %%ETCDIR%%.d/charon-cmd/pkcs1.conf.sample +%%PKCS11%%@sample %%ETCDIR%%.d/charon-cmd/pkcs11.conf.sample +@sample %%ETCDIR%%.d/charon-cmd/pkcs7.conf.sample +@sample %%ETCDIR%%.d/charon-cmd/pkcs8.conf.sample +@sample %%ETCDIR%%.d/charon-cmd/pubkey.conf.sample +@sample %%ETCDIR%%.d/charon-cmd/random.conf.sample +@sample %%ETCDIR%%.d/charon-cmd/resolve.conf.sample +@sample %%ETCDIR%%.d/charon-cmd/revocation.conf.sample +@sample %%ETCDIR%%.d/charon-cmd/socket-default.conf.sample +@sample %%ETCDIR%%.d/charon-cmd/sshkey.conf.sample +%%TPM%%@sample %%ETCDIR%%.d/charon-cmd/tpm.conf.sample +@sample %%ETCDIR%%.d/charon-cmd/x509.conf.sample +%%XAUTH%%@sample %%ETCDIR%%.d/charon-cmd/xauth-generic.conf.sample +@sample %%ETCDIR%%.d/charon-cmd/xcbc.conf.sample @sample %%ETCDIR%%.d/charon-logging.conf.sample @sample %%ETCDIR%%.d/charon.conf.sample @sample %%ETCDIR%%.d/charon/addrblock.conf.sample %%SQL%%@sample %%ETCDIR%%.d/charon/attr-sql.conf.sample @sample %%ETCDIR%%.d/charon/attr.conf.sample @sample %%ETCDIR%%.d/charon/blowfish.conf.sample @sample %%ETCDIR%%.d/charon/cmac.conf.sample @sample %%ETCDIR%%.d/charon/constraints.conf.sample @sample %%ETCDIR%%.d/charon/counters.conf.sample %%CTR%%@sample %%ETCDIR%%.d/charon/ctr.conf.sample %%CURL%%@sample %%ETCDIR%%.d/charon/curl.conf.sample %%DHCP%%%%ETCDIR%%.d/charon/dhcp.conf.sample @sample %%ETCDIR%%.d/charon/dnskey.conf.sample @sample %%ETCDIR%%.d/charon/drbg.conf.sample %%STROKE%%@sample %%ETCDIR%%.d/starter.conf.sample %%EAPAKA3GPP2%%@sample %%ETCDIR%%.d/charon/eap-aka-3gpp2.conf.sample %%EAPAKA3GPP2%%@sample %%ETCDIR%%.d/charon/eap-aka.conf.sample %%EAPDYNAMIC%%@sample %%ETCDIR%%.d/charon/eap-dynamic.conf.sample @sample %%ETCDIR%%.d/charon/eap-identity.conf.sample @sample %%ETCDIR%%.d/charon/eap-md5.conf.sample @sample %%ETCDIR%%.d/charon/eap-mschapv2.conf.sample @sample %%ETCDIR%%.d/charon/eap-peap.conf.sample %%EAPRADIUS%%@sample %%ETCDIR%%.d/charon/eap-radius.conf.sample %%EAPSIMFILE%%@sample %%ETCDIR%%.d/charon/eap-sim-file.conf.sample %%EAPSIMFILE%%@sample %%ETCDIR%%.d/charon/eap-sim.conf.sample @sample %%ETCDIR%%.d/charon/eap-tls.conf.sample @sample %%ETCDIR%%.d/charon/eap-ttls.conf.sample %%FARP%%@sample %%ETCDIR%%.d/charon/farp.conf.sample +%%FIPS_PRF%%@sample %%ETCDIR%%.d/charon/fips-prf.conf.sample %%GCM%%@sample %%ETCDIR%%.d/charon/gcm.conf.sample %%EAPAKA3GPP2%%@sample %%ETCDIR%%.d/charon/gmp.conf.sample %%IPSECKEY%%@sample %%ETCDIR%%.d/charon/ipseckey.conf.sample %%KDF%%@sample %%ETCDIR%%.d/charon/kdf.conf.sample %%KERNELLIBIPSEC%%@sample %%ETCDIR%%.d/charon/kernel-libipsec.conf.sample @sample %%ETCDIR%%.d/charon/kernel-pfkey.conf.sample @sample %%ETCDIR%%.d/charon/kernel-pfroute.conf.sample %%LDAP%%@sample %%ETCDIR%%.d/charon/ldap.conf.sample %%LOADTESTER%%@sample %%ETCDIR%%.d/charon/load-tester.conf.sample @sample %%ETCDIR%%.d/charon/md4.conf.sample %%EAPAKA3GPP2%%@sample %%ETCDIR%%.d/charon/mgf1.conf.sample %%ML%%@sample %%ETCDIR%%.d/charon/ml.conf.sample %%MYSQL%%@sample %%ETCDIR%%.d/charon/mysql.conf.sample @sample %%ETCDIR%%.d/charon/nonce.conf.sample @sample %%ETCDIR%%.d/charon/openssl.conf.sample %%VIA%%@sample %%ETCDIR%%.d/charon/padlock.conf.sample @sample %%ETCDIR%%.d/charon/pem.conf.sample @sample %%ETCDIR%%.d/charon/pgp.conf.sample @sample %%ETCDIR%%.d/charon/pkcs1.conf.sample %%PKCS11%%@sample %%ETCDIR%%.d/charon/pkcs11.conf.sample @sample %%ETCDIR%%.d/charon/pkcs7.conf.sample @sample %%ETCDIR%%.d/charon/pkcs8.conf.sample @sample %%ETCDIR%%.d/charon/pubkey.conf.sample @sample %%ETCDIR%%.d/charon/random.conf.sample @sample %%ETCDIR%%.d/charon/resolve.conf.sample @sample %%ETCDIR%%.d/charon/revocation.conf.sample %%SMP%%@sample %%ETCDIR%%.d/charon/smp.conf.sample @sample %%ETCDIR%%.d/charon/socket-default.conf.sample %%SQL%%@sample %%ETCDIR%%.d/charon/sql.conf.sample %%STROKE%%@sample %%ETCDIR%%.d/charon/stroke.conf.sample %%SQLITE%%@sample %%ETCDIR%%.d/charon/sqlite.conf.sample @sample %%ETCDIR%%.d/charon/sshkey.conf.sample %%TESTVECTOR%%@sample %%ETCDIR%%.d/charon/test-vectors.conf.sample %%TPM%%@sample %%ETCDIR%%.d/charon/tpm.conf.sample %%UNBOUND%%@sample %%ETCDIR%%.d/charon/unbound.conf.sample %%UNITY%%@sample %%ETCDIR%%.d/charon/unity.conf.sample @sample %%ETCDIR%%.d/charon/updown.conf.sample %%VICI%%@sample %%ETCDIR%%.d/charon/vici.conf.sample @sample %%ETCDIR%%.d/charon/whitelist.conf.sample @sample %%ETCDIR%%.d/charon/x509.conf.sample %%XAUTH%%@sample %%ETCDIR%%.d/charon/xauth-eap.conf.sample %%XAUTHGEN%%@sample %%ETCDIR%%.d/charon/xauth-generic.conf.sample %%XAUTH%%@sample %%ETCDIR%%.d/charon/xauth-pam.conf.sample @sample %%ETCDIR%%.d/charon/xcbc.conf.sample @sample %%ETCDIR%%.d/iptfs.conf.sample %%PKI%%@sample %%ETCDIR%%.d/pki.conf.sample %%SQL%%@sample %%ETCDIR%%.d/pool.conf.sample %%SWANCTL%%@sample %%ETCDIR%%.d/swanctl.conf.sample %%STROKE%%@sample etc/ipsec.conf.sample %%STROKE%%@sample etc/ipsec.secrets.sample %%SWANCTL%%@sample etc/swanctl/swanctl.conf.sample %%VICI%%include/libvici.h lib/ipsec/libcharon.la lib/ipsec/libcharon.so lib/ipsec/libcharon.so.0 lib/ipsec/libcharon.so.0.0.0 %%KERNELLIBIPSEC%%lib/ipsec/libipsec.la %%KERNELLIBIPSEC%%lib/ipsec/libipsec.so %%KERNELLIBIPSEC%%lib/ipsec/libipsec.so.0 %%KERNELLIBIPSEC%%lib/ipsec/libipsec.so.0.0.0 %%EAPRADIUS%%lib/ipsec/libradius.la %%EAPRADIUS%%lib/ipsec/libradius.so %%EAPRADIUS%%lib/ipsec/libradius.so.0 %%EAPRADIUS%%lib/ipsec/libradius.so.0.0.0 %%SIMAKA%%lib/ipsec/libsimaka.la %%SIMAKA%%lib/ipsec/libsimaka.so %%SIMAKA%%lib/ipsec/libsimaka.so.0 %%SIMAKA%%lib/ipsec/libsimaka.so.0.0.0 lib/ipsec/libstrongswan.la lib/ipsec/libstrongswan.so lib/ipsec/libstrongswan.so.0 lib/ipsec/libstrongswan.so.0.0.0 lib/ipsec/libtls.la lib/ipsec/libtls.so lib/ipsec/libtls.so.0 lib/ipsec/libtls.so.0.0.0 %%TPM%%lib/ipsec/libtpmtss.la %%TPM%%lib/ipsec/libtpmtss.so %%TPM%%lib/ipsec/libtpmtss.so.0 %%TPM%%lib/ipsec/libtpmtss.so.0.0.0 %%VICI%%lib/ipsec/libvici.la %%VICI%%lib/ipsec/libvici.so %%VICI%%lib/ipsec/libvici.so.0 %%VICI%%lib/ipsec/libvici.so.0.0.0 lib/ipsec/plugins/libstrongswan-addrblock.la lib/ipsec/plugins/libstrongswan-addrblock.so %%SQL%%lib/ipsec/plugins/libstrongswan-attr-sql.la %%SQL%%lib/ipsec/plugins/libstrongswan-attr-sql.so lib/ipsec/plugins/libstrongswan-attr.la lib/ipsec/plugins/libstrongswan-attr.so lib/ipsec/plugins/libstrongswan-blowfish.la lib/ipsec/plugins/libstrongswan-blowfish.so lib/ipsec/plugins/libstrongswan-cmac.la lib/ipsec/plugins/libstrongswan-cmac.so lib/ipsec/plugins/libstrongswan-constraints.la lib/ipsec/plugins/libstrongswan-constraints.so lib/ipsec/plugins/libstrongswan-counters.la lib/ipsec/plugins/libstrongswan-counters.so %%CTR%%lib/ipsec/plugins/libstrongswan-ctr.la %%CTR%%lib/ipsec/plugins/libstrongswan-ctr.so %%CURL%%lib/ipsec/plugins/libstrongswan-curl.la %%CURL%%lib/ipsec/plugins/libstrongswan-curl.so %%DHCP%%lib/ipsec/plugins/libstrongswan-dhcp.la %%DHCP%%lib/ipsec/plugins/libstrongswan-dhcp.so lib/ipsec/plugins/libstrongswan-dnskey.la lib/ipsec/plugins/libstrongswan-dnskey.so lib/ipsec/plugins/libstrongswan-drbg.la lib/ipsec/plugins/libstrongswan-drbg.so %%EAPAKA3GPP2%%lib/ipsec/plugins/libstrongswan-eap-aka-3gpp2.la %%EAPAKA3GPP2%%lib/ipsec/plugins/libstrongswan-eap-aka-3gpp2.so %%EAPAKA3GPP2%%lib/ipsec/plugins/libstrongswan-eap-aka.la %%EAPAKA3GPP2%%lib/ipsec/plugins/libstrongswan-eap-aka.so %%EAPDYNAMIC%%lib/ipsec/plugins/libstrongswan-eap-dynamic.la %%EAPDYNAMIC%%lib/ipsec/plugins/libstrongswan-eap-dynamic.so lib/ipsec/plugins/libstrongswan-eap-identity.la lib/ipsec/plugins/libstrongswan-eap-identity.so lib/ipsec/plugins/libstrongswan-eap-md5.la lib/ipsec/plugins/libstrongswan-eap-md5.so -%%ML%%lib/ipsec/plugins/libstrongswan-ml.la -%%ML%%lib/ipsec/plugins/libstrongswan-ml.so -%%ML%%lib/ipsec/plugins/libstrongswan-ml.so.0 -%%ML%%lib/ipsec/plugins/libstrongswan-ml.so.0.0.0 +%%FIPS_PRF%%lib/ipsec/plugins/libstrongswan-fips-prf.la +%%FIPS_PRF%%lib/ipsec/plugins/libstrongswan-fips-prf.so lib/ipsec/plugins/libstrongswan-eap-mschapv2.la lib/ipsec/plugins/libstrongswan-eap-mschapv2.so lib/ipsec/plugins/libstrongswan-eap-peap.la lib/ipsec/plugins/libstrongswan-eap-peap.so %%EAPRADIUS%%lib/ipsec/plugins/libstrongswan-eap-radius.la %%EAPRADIUS%%lib/ipsec/plugins/libstrongswan-eap-radius.so %%EAPSIMFILE%%lib/ipsec/plugins/libstrongswan-eap-sim-file.la %%EAPSIMFILE%%lib/ipsec/plugins/libstrongswan-eap-sim-file.so %%EAPSIMFILE%%lib/ipsec/plugins/libstrongswan-eap-sim.la %%EAPSIMFILE%%lib/ipsec/plugins/libstrongswan-eap-sim.so lib/ipsec/plugins/libstrongswan-eap-tls.la lib/ipsec/plugins/libstrongswan-eap-tls.so lib/ipsec/plugins/libstrongswan-eap-ttls.la lib/ipsec/plugins/libstrongswan-eap-ttls.so %%FARP%%lib/ipsec/plugins/libstrongswan-farp.la %%FARP%%lib/ipsec/plugins/libstrongswan-farp.so %%GCM%%lib/ipsec/plugins/libstrongswan-gcm.la %%GCM%%lib/ipsec/plugins/libstrongswan-gcm.so %%EAPAKA3GPP2%%lib/ipsec/plugins/libstrongswan-gmp.la %%EAPAKA3GPP2%%lib/ipsec/plugins/libstrongswan-gmp.so %%IPSECKEY%%lib/ipsec/plugins/libstrongswan-ipseckey.la %%IPSECKEY%%lib/ipsec/plugins/libstrongswan-ipseckey.so %%KDF%%lib/ipsec/plugins/libstrongswan-kdf.la %%KDF%%lib/ipsec/plugins/libstrongswan-kdf.so %%KERNELLIBIPSEC%%lib/ipsec/plugins/libstrongswan-kernel-libipsec.la %%KERNELLIBIPSEC%%lib/ipsec/plugins/libstrongswan-kernel-libipsec.so lib/ipsec/plugins/libstrongswan-kernel-pfkey.la lib/ipsec/plugins/libstrongswan-kernel-pfkey.so lib/ipsec/plugins/libstrongswan-kernel-pfroute.la lib/ipsec/plugins/libstrongswan-kernel-pfroute.so %%LDAP%%lib/ipsec/plugins/libstrongswan-ldap.la %%LDAP%%lib/ipsec/plugins/libstrongswan-ldap.so %%LOADTESTER%%lib/ipsec/plugins/libstrongswan-load-tester.la %%LOADTESTER%%lib/ipsec/plugins/libstrongswan-load-tester.so lib/ipsec/plugins/libstrongswan-md4.la lib/ipsec/plugins/libstrongswan-md4.so %%EAPAKA3GPP2%%lib/ipsec/plugins/libstrongswan-mgf1.la %%EAPAKA3GPP2%%lib/ipsec/plugins/libstrongswan-mgf1.so +%%ML%%lib/ipsec/plugins/libstrongswan-ml.la +%%ML%%lib/ipsec/plugins/libstrongswan-ml.so %%MYSQL%%lib/ipsec/plugins/libstrongswan-mysql.la %%MYSQL%%lib/ipsec/plugins/libstrongswan-mysql.so lib/ipsec/plugins/libstrongswan-nonce.la lib/ipsec/plugins/libstrongswan-nonce.so lib/ipsec/plugins/libstrongswan-openssl.la lib/ipsec/plugins/libstrongswan-openssl.so %%VIA%%lib/ipsec/plugins/libstrongswan-padlock.la %%VIA%%lib/ipsec/plugins/libstrongswan-padlock.so lib/ipsec/plugins/libstrongswan-pem.la lib/ipsec/plugins/libstrongswan-pem.so lib/ipsec/plugins/libstrongswan-pgp.la lib/ipsec/plugins/libstrongswan-pgp.so lib/ipsec/plugins/libstrongswan-pkcs1.la lib/ipsec/plugins/libstrongswan-pkcs1.so %%PKCS11%%lib/ipsec/plugins/libstrongswan-pkcs11.la %%PKCS11%%lib/ipsec/plugins/libstrongswan-pkcs11.so lib/ipsec/plugins/libstrongswan-pkcs7.la lib/ipsec/plugins/libstrongswan-pkcs7.so lib/ipsec/plugins/libstrongswan-pkcs8.la lib/ipsec/plugins/libstrongswan-pkcs8.so lib/ipsec/plugins/libstrongswan-pubkey.la lib/ipsec/plugins/libstrongswan-pubkey.so lib/ipsec/plugins/libstrongswan-random.la lib/ipsec/plugins/libstrongswan-random.so lib/ipsec/plugins/libstrongswan-resolve.la lib/ipsec/plugins/libstrongswan-resolve.so lib/ipsec/plugins/libstrongswan-revocation.la lib/ipsec/plugins/libstrongswan-revocation.so %%SMP%%lib/ipsec/plugins/libstrongswan-smp.la %%SMP%%lib/ipsec/plugins/libstrongswan-smp.so lib/ipsec/plugins/libstrongswan-socket-default.la lib/ipsec/plugins/libstrongswan-socket-default.so %%SQL%%lib/ipsec/plugins/libstrongswan-sql.la %%SQL%%lib/ipsec/plugins/libstrongswan-sql.so %%SQLITE%%lib/ipsec/plugins/libstrongswan-sqlite.la %%SQLITE%%lib/ipsec/plugins/libstrongswan-sqlite.so lib/ipsec/plugins/libstrongswan-sshkey.la lib/ipsec/plugins/libstrongswan-sshkey.so %%STROKE%%lib/ipsec/plugins/libstrongswan-stroke.la %%STROKE%%lib/ipsec/plugins/libstrongswan-stroke.so %%TESTVECTOR%%lib/ipsec/plugins/libstrongswan-test-vectors.la %%TESTVECTOR%%lib/ipsec/plugins/libstrongswan-test-vectors.so %%TPM%%lib/ipsec/plugins/libstrongswan-tpm.la %%TPM%%lib/ipsec/plugins/libstrongswan-tpm.so %%UNBOUND%%lib/ipsec/plugins/libstrongswan-unbound.la %%UNBOUND%%lib/ipsec/plugins/libstrongswan-unbound.so %%UNITY%%lib/ipsec/plugins/libstrongswan-unity.la %%UNITY%%lib/ipsec/plugins/libstrongswan-unity.so lib/ipsec/plugins/libstrongswan-updown.la lib/ipsec/plugins/libstrongswan-updown.so %%VICI%%lib/ipsec/plugins/libstrongswan-vici.la %%VICI%%lib/ipsec/plugins/libstrongswan-vici.so lib/ipsec/plugins/libstrongswan-whitelist.la lib/ipsec/plugins/libstrongswan-whitelist.so lib/ipsec/plugins/libstrongswan-x509.la lib/ipsec/plugins/libstrongswan-x509.so %%XAUTH%%lib/ipsec/plugins/libstrongswan-xauth-eap.la %%XAUTH%%lib/ipsec/plugins/libstrongswan-xauth-eap.so %%IKEV1%%lib/ipsec/plugins/libstrongswan-xauth-generic.la %%IKEV1%%lib/ipsec/plugins/libstrongswan-xauth-generic.so %%XAUTH%%lib/ipsec/plugins/libstrongswan-xauth-pam.la %%XAUTH%%lib/ipsec/plugins/libstrongswan-xauth-pam.so lib/ipsec/plugins/libstrongswan-xcbc.la lib/ipsec/plugins/libstrongswan-xcbc.so libexec/ipsec/_updown libexec/ipsec/charon %%STROKE%%libexec/ipsec/starter %%STROKE%%libexec/ipsec/stroke %%LOADTESTER%%libexec/ipsec/load-tester %%SQL%%libexec/ipsec/pool libexec/ipsec/whitelist %%PKI%%share/man/man1/pki---acert.1.gz %%PKI%%share/man/man1/pki---dn.1.gz %%PKI%%share/man/man1/pki---est.1.gz %%PKI%%share/man/man1/pki---estca.1.gz %%PKI%%share/man/man1/pki---gen.1.gz %%PKI%%share/man/man1/pki---issue.1.gz %%PKI%%share/man/man1/pki---keyid.1.gz %%PKI%%share/man/man1/pki---ocsp.1.gz %%PKI%%share/man/man1/pki---pkcs7.1.gz %%PKI%%share/man/man1/pki---print.1.gz %%PKI%%share/man/man1/pki---pub.1.gz %%PKI%%share/man/man1/pki---req.1.gz %%PKI%%share/man/man1/pki---scep.1.gz %%PKI%%share/man/man1/pki---scepca.1.gz %%PKI%%share/man/man1/pki---self.1.gz %%PKI%%share/man/man1/pki---signcrl.1.gz %%PKI%%share/man/man1/pki---verify.1.gz %%PKI%%share/man/man1/pki.1.gz %%STROKE%%share/man/man5/ipsec.conf.5.gz %%STROKE%%share/man/man5/ipsec.secrets.5.gz %%STROKE%%share/man/man8/ipsec.8.gz share/man/man5/strongswan.conf.5.gz %%SWANCTL%%share/man/man5/swanctl.conf.5.gz share/man/man8/charon-cmd.8.gz %%SWANCTL%%share/man/man8/swanctl.8.gz sbin/charon-cmd %%STROKE%%sbin/ipsec %%SWANCTL%%sbin/swanctl %%DATADIR%%/templates/config/plugins/addrblock.conf %%SQL%%%%DATADIR%%/templates/config/plugins/attr-sql.conf %%DATADIR%%/templates/config/plugins/attr.conf %%DATADIR%%/templates/config/plugins/blowfish.conf %%DATADIR%%/templates/config/plugins/cmac.conf %%DATADIR%%/templates/config/plugins/constraints.conf %%DATADIR%%/templates/config/plugins/counters.conf %%CTR%%%%DATADIR%%/templates/config/plugins/ctr.conf %%CURL%%%%DATADIR%%/templates/config/plugins/curl.conf %%DHCP%%%%DATADIR%%/templates/config/plugins/dhcp.conf %%DATADIR%%/templates/config/plugins/dnskey.conf %%DATADIR%%/templates/config/plugins/drbg.conf %%EAPAKA3GPP2%%%%DATADIR%%/templates/config/plugins/eap-aka-3gpp2.conf %%EAPAKA3GPP2%%%%DATADIR%%/templates/config/plugins/eap-aka.conf %%EAPDYNAMIC%%%%DATADIR%%/templates/config/plugins/eap-dynamic.conf %%DATADIR%%/templates/config/plugins/eap-identity.conf %%DATADIR%%/templates/config/plugins/eap-md5.conf %%DATADIR%%/templates/config/plugins/eap-mschapv2.conf %%DATADIR%%/templates/config/plugins/eap-peap.conf %%EAPRADIUS%%%%DATADIR%%/templates/config/plugins/eap-radius.conf %%EAPSIMFILE%%%%DATADIR%%/templates/config/plugins/eap-sim-file.conf %%EAPSIMFILE%%%%DATADIR%%/templates/config/plugins/eap-sim.conf %%DATADIR%%/templates/config/plugins/eap-tls.conf %%DATADIR%%/templates/config/plugins/eap-ttls.conf %%FARP%%%%DATADIR%%/templates/config/plugins/farp.conf +%%FIPS_PRF%%%%DATADIR%%/templates/config/plugins/fips-prf.conf %%GCM%%%%DATADIR%%/templates/config/plugins/gcm.conf %%EAPAKA3GPP2%%%%DATADIR%%/templates/config/plugins/gmp.conf %%IPSECKEY%%%%DATADIR%%/templates/config/plugins/ipseckey.conf %%KDF%%%%DATADIR%%/templates/config/plugins/kdf.conf %%KERNELLIBIPSEC%%%%DATADIR%%/templates/config/plugins/kernel-libipsec.conf %%DATADIR%%/templates/config/plugins/kernel-pfkey.conf %%DATADIR%%/templates/config/plugins/kernel-pfroute.conf %%LDAP%%%%DATADIR%%/templates/config/plugins/ldap.conf %%LOADTESTER%%%%DATADIR%%/templates/config/plugins/load-tester.conf %%DATADIR%%/templates/config/plugins/md4.conf %%EAPAKA3GPP2%%%%DATADIR%%/templates/config/plugins/mgf1.conf %%ML%%%%DATADIR%%/templates/config/plugins/ml.conf %%MYSQL%%%%DATADIR%%/templates/config/plugins/mysql.conf %%DATADIR%%/templates/config/plugins/nonce.conf %%DATADIR%%/templates/config/plugins/openssl.conf %%VIA%%%%DATADIR%%/templates/config/plugins/padlock.conf %%DATADIR%%/templates/config/plugins/pem.conf %%DATADIR%%/templates/config/plugins/pgp.conf %%DATADIR%%/templates/config/plugins/pkcs1.conf %%PKCS11%%%%DATADIR%%/templates/config/plugins/pkcs11.conf %%DATADIR%%/templates/config/plugins/pkcs7.conf %%DATADIR%%/templates/config/plugins/pkcs8.conf %%DATADIR%%/templates/config/plugins/pubkey.conf %%DATADIR%%/templates/config/plugins/random.conf %%DATADIR%%/templates/config/plugins/resolve.conf %%DATADIR%%/templates/config/plugins/revocation.conf %%SMP%%%%DATADIR%%/templates/config/plugins/smp.conf %%DATADIR%%/templates/config/plugins/socket-default.conf %%SQL%%%%DATADIR%%/templates/config/plugins/sql.conf %%SQLITE%%%%DATADIR%%/templates/config/plugins/sqlite.conf %%DATADIR%%/templates/config/plugins/sshkey.conf %%STROKE%%%%DATADIR%%/templates/config/plugins/stroke.conf %%STROKE%%%%DATADIR%%/templates/config/strongswan.d/starter.conf %%TESTVECTOR%%%%DATADIR%%/templates/config/plugins/test-vectors.conf %%TPM%%%%DATADIR%%/templates/config/plugins/tpm.conf %%UNBOUND%%%%DATADIR%%/templates/config/plugins/unbound.conf %%UNITY%%%%DATADIR%%/templates/config/plugins/unity.conf %%DATADIR%%/templates/config/plugins/updown.conf %%VICI%%%%DATADIR%%/templates/config/plugins/vici.conf %%DATADIR%%/templates/config/plugins/whitelist.conf %%DATADIR%%/templates/config/plugins/x509.conf %%XAUTH%%%%DATADIR%%/templates/config/plugins/xauth-eap.conf %%XAUTHGEN%%%%DATADIR%%/templates/config/plugins/xauth-generic.conf %%XAUTH%%%%DATADIR%%/templates/config/plugins/xauth-pam.conf %%DATADIR%%/templates/config/plugins/xcbc.conf %%DATADIR%%/templates/config/strongswan.conf +%%DATADIR%%/templates/config/strongswan.d/charon-cmd.conf %%DATADIR%%/templates/config/strongswan.d/charon-logging.conf %%DATADIR%%/templates/config/strongswan.d/charon.conf %%DATADIR%%/templates/config/strongswan.d/iptfs.conf %%PKI%%%%DATADIR%%/templates/config/strongswan.d/pki.conf %%SQL%%%%DATADIR%%/templates/config/strongswan.d/pool.conf %%SWANCTL%%%%DATADIR%%/templates/config/strongswan.d/swanctl.conf %%SQL%%%%DATADIR%%/templates/database/sql/mysql.sql %%SQL%%%%DATADIR%%/templates/database/sql/sqlite.sql %%SWANCTL%%@dir etc/swanctl/conf.d %%SWANCTL%%@dir etc/swanctl/ecdsa %%SWANCTL%%@dir etc/swanctl/pkcs12 %%SWANCTL%%@dir etc/swanctl/pkcs8 %%SWANCTL%%@dir etc/swanctl/private %%SWANCTL%%@dir etc/swanctl/pubkey %%SWANCTL%%@dir etc/swanctl/rsa %%SWANCTL%%@dir etc/swanctl/x509 %%SWANCTL%%@dir etc/swanctl/x509aa %%SWANCTL%%@dir etc/swanctl/x509ac %%SWANCTL%%@dir etc/swanctl/x509ca %%SWANCTL%%@dir etc/swanctl/x509crl %%SWANCTL%%@dir etc/swanctl/x509ocsp %%STROKE%%@dir etc/ipsec.d/aacerts %%STROKE%%@dir etc/ipsec.d/acerts %%STROKE%%@dir etc/ipsec.d/cacerts %%STROKE%%@dir etc/ipsec.d/certs %%STROKE%%@dir etc/ipsec.d/crls %%STROKE%%@dir etc/ipsec.d/ocspcerts %%STROKE%%@dir etc/ipsec.d/private %%STROKE%%@dir etc/ipsec.d/reqs