ipsec-tools-0.8.2-5.fc22 RPM for ppc64

From Fedora 22 testing updates for ppc64 / i

This package contains tools necessary for establishing
keys for IPSEC connections including the rekeying during
the connection lifetime.

The main tools of this package are:

- setkey, a program to directly manipulate policies and SAs in the kernel
- racoon, an IKEv1 keying daemon

Provides

• ipsec-tools
• config(ipsec-tools)
• ipsec-tools(ppc-64)

Requires

• /bin/bash
• /bin/sh
• /bin/sh
• /bin/sh
• /bin/sh
• config(ipsec-tools) = 0.8.2-5.fc22
• libaudit.so.1()(64bit)
• libc.so.6()(64bit)
• libc.so.6(GLIBC_2.15)(64bit)
• libc.so.6(GLIBC_2.17)(64bit)
• libc.so.6(GLIBC_2.3)(64bit)
• libc.so.6(GLIBC_2.3.4)(64bit)
• libc.so.6(GLIBC_2.4)(64bit)
• libc.so.6(GLIBC_2.8)(64bit)
• libcrypt.so.1()(64bit)
• libcrypt.so.1(GLIBC_2.3)(64bit)
• libcrypto.so.10()(64bit)
• libcrypto.so.10(OPENSSL_1.0.1)(64bit)
• libcrypto.so.10(libcrypto.so.10)(64bit)
• libgssapi_krb5.so.2()(64bit)
• libgssapi_krb5.so.2(gssapi_krb5_2_MIT)(64bit)
• libldap-2.4.so.2()(64bit)
• libpam.so.0()(64bit)
• libpam.so.0(LIBPAM_1.0)(64bit)
• libresolv.so.2()(64bit)
• libresolv.so.2(GLIBC_2.3)(64bit)
• libselinux.so.1()(64bit)
• pam
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsXz) <= 5.2-1
• rtld(GNU_HASH)
• systemd
• systemd
• systemd

License

BSD

Changelog

* Thu Apr 28 2016 Paul Wouters <pwouters@redhat.com> - 0.8.2-5
  - Resolves: rhbz#1251691 ifup-ipsec causes invalid ICMP redirects
    (Patch by Kaarle Ritvanen <kaarle.ritvanen@datakunkku.fi>)
* Thu Feb 04 2016 Fedora Release Engineering <releng@fedoraproject.org> - 0.8.2-4
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
* Thu Dec 17 2015 Paul Wouters <pwouters@redhat.com> - 0.8.2-2
  - Resolves: rhbz#1292522 Add remoteid/ph1id configuration feature
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.8.2-2
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
* Tue May 26 2015 Paul Wouters <pwouters@redhat.com> - 0.8.2-1
  - Upgraded to 0.8.2
  - Resolves rhbz#1223420 CVE-2015-4047 NULL pointer dereference in racoon/gssapi.c
  - Resolves rhbz#1154906 fix port 4500 vs 500 isakmp initiator issue
  - Resolves rhbz#952413 Support for Calling-Station-Id attribute for xauth RADIUS requests
* Fri Jan 09 2015 Paul Wouters <pwouters@redhat.com> - 0.8.1-6
  - Resolves: rhbz#1029503 missing depdendency on psmisc (fixup systemd scripts)
* Sat Aug 16 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.8.1-5
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.8.1-4
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Thu Nov 14 2013 Paul Wouters <pwouters@redhat.com> - 0.8.1-3
  - Enable ldap support (rhbz#895965)
  - Update systemd macros (rhbz#850016)
  - Enable full relro hardening
* Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.8.1-2
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Wed Feb 27 2013 Tomáš Mráz <tmraz@redhat.com> - 0.8.1-1
  - new upstream release
  - enabled ldap support (#895965)
  - macroized systemd script calls (#850165)
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.8.0-6
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.8.0-5
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Thu Jan 26 2012 Tomas Mraz <tmraz@redhat.com> - 0.8.0-4
  - prefer the main IKE exchange mode (#475337)
  - allow specification of additional parameters for the ifup-ipsec (#784859)
  - convert the init script to systemd unit (#662714)
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.8.0-3
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Fri Jun 17 2011 Tomas Mraz <tmraz@redhat.com> - 0.8.0-2
  - take over ifup-ipsec, ifdown-ipsec from initscripts
* Mon Mar 21 2011 Tomas Mraz <tmraz@redhat.com> - 0.8.0-1
  - update to a new upstream version
* Thu Feb 10 2011 Tomas Mraz <tmraz@redhat.com> - 0.7.3-8
  - fix build - drop -R from compiler invocation
* Wed Feb 09 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.7.3-7
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Tue Dec 07 2010 Tomas Mraz <tmraz@redhat.com> - 0.7.3-6
  - fix FTBFS, add flex-static to buildrequires (#660865)
* Wed Apr 14 2010 Tomas Mraz <tmraz@redhat.com> - 0.7.3-5
  - fix the initscript (#500571, #521647)
* Fri Sep 25 2009 Tomas Mraz <tmraz@redhat.com> - 0.7.3-4
  - properly check for errors on gssapi_get_token_to_send()
  - use proper mechanism when canonicalizing gss names
  - use password-auth common PAM configuration instead of system-auth
* Fri Aug 21 2009 Tomas Mraz <tmraz@redhat.com> - 0.7.3-3
  - rebuilt with new openssl
* Wed Aug 19 2009 Tomas Mraz <tmraz@redhat.com> - 0.7.3-2
  - enable xauth over PAM (#470793)
  - add TMPDIR setting to the p1_up_down script
* Tue Aug 18 2009 Tomas Mraz <tmraz@redhat.com> - 0.7.3-1
  - update to a new upstream version
  - fix service stop in preun (#515880)
* Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.7.2-3
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
* Wed Jul 15 2009 Tomas Mraz <tmraz@redhat.com> - 0.7.2-2
  - fix FTBFS (#511556)
  - fix some memory leaks and compilation warnings found by review
* Thu Apr 23 2009 Tomas Mraz <tmraz@redhat.com> - 0.7.2-1
  - Update to a new upstream version
* Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.7.1-8
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
* Thu Jan 15 2009 Tomas Mraz <tmraz@redhat.com> - 0.7.1-7
  - rebuild with new openssl
* Mon Nov 10 2008 Tomas Mraz <tmraz@redhat.com> - 0.7.1-6
  - fix patch porting error in the dpd-fixes patch (#470575)
* Fri Oct 17 2008 Tomas Mraz <tmraz@redhat.com> - 0.7.1-5
  - fix CVE-2008-3652 (memory leak DoS)
  - compile racoon as PIE
  - another fix for teardown of the IPSEC SAs on DPD in some circumstances
* Sun Aug 10 2008 Tomas Mraz <tmraz@redhat.com> - 0.7.1-4
  - Even better fix for IPSEC SA purging avoiding code duplication
    (original idea by Darrel Goeddel)
* Fri Aug 08 2008 Tomas Mraz <tmraz@redhat.com> - 0.7.1-3
  - Fix IPSEC SA purge with NAT_T enabled
* Wed Jul 30 2008 Tomas Mraz <tmraz@redhat.com> - 0.7.1-2
  - Different approach to allow racoon to add loopback SAs for
    labeled IPSec (without ISAKMP)
* Tue Jul 29 2008 Tomas Mraz <tmraz@redhat.com> - 0.7.1-1
  - Update to a new upstream version
* Thu Feb 28 2008 Steve Conklin <sconklin@redhat.com> - 0.7-13
  - Resolves bz#273261 remote-access client connection to Cisco ASA
* Mon Feb 25 2008 Steve Conklin <sconklin@redhat.com> - 0.7-12
  - And again
* Mon Feb 25 2008 Steve Conklin <sconklin@redhat.com> - 0.7-11
  - Messed that up, bumping
* Mon Feb 25 2008 Steve Conklin <sconklin@redhat.com> - 0.7-10
  - Added upstream patch to fix ipv6 cookie alen
* Thu Feb 14 2008 Steve Conklin <sconklin@redhat.com> - 0.7-9
  - rebuild for gcc4.3
* Wed Dec 19 2007 Steve Conklin <sconklin@redhat.com> - 0.7-8
  - sourced krb5-devel.sh to set path
* Tue Dec 18 2007 Steve Conklin <sconklin@redhatcom> - 0.7-7
  - bumped for retag
* Tue Dec 18 2007 Steve Conklin <sconklin@redhat.com> - 0.7-6
  - Added a patch for context size change
  - Resolves #413331 racoon dies with buffer overflow in MCS/MLS loopback
* Fri Dec 07 2007 Steve Conklin <sconklin@redhat.com> - 0.7-5
  - Bump for retagging
* Fri Dec 07 2007 Steve Conklin <sconklin@redhat.com> - 0.7-4
  - Rebuild for dependencies
* Thu Sep 20 2007 Steve Conklin <sconklin@redhat.com> - 0.7-3
  - Applied the following patches from Gabriel Somlo
  - Patches for connecting to Cisco ASA in remote-access (road-warrior) mode
  - Added phase1_up_down mode config script
  - Including our own .h files (ipsec, pfkeyv2, xfrm, udp) no longer necessary
  - Added init script for racoon daemon
* Tue Aug 28 2007 Steve Conklin <sconklin@redhat.com> - 0.7-2
  - Fixed the loopback patch
* Tue Aug 28 2007 Steve Conklin <sconklin@redhat.com> - 0.7-1
  - Rebase to upstream 0.7
* Mon Apr 23 2007 Steve Grubb <sgrubb@redhat.com> - 0.6.5-8
  - Upstream fix for Racoon DOS, informational delete must be encrypted
  - Resolves: rhbz#235388 - CVE-2007-1841 ipsec-tools racoon DoS
* Fri Apr 20 2007 Steve Grubb <sgrubb@redhat.com> - 0.6.5-7
  - Resolves: #218386 labeled ipsec does not work over loopback
* Mon Apr 16 2007 Steve Grubb <sgrubb@redhat.com> - 0.6.5-6.6
  - Related: #232508 add auditing to racoon
* Sat Apr 14 2007 Steve Grubb <sgrubb@redhat.com> - 0.6.6-6.fc22
  - Resolves: #235680 racoon socket descriptor exhaustion
* Fri Apr 13 2007 Steve Grubb <sgrubb@redhat.com> - 0.6.6-4.fc22
  - Resolves: #236121 increase buffer for context
  - Resolves: #234491 kernel sends ACQUIRES that racoon is not catching
  - Resolves: #218386 labeled ipsec does not work over loopback
* Tue Mar 20 2007 Harald Hoyer <harald@redhat.com> - 0.6.6-3.fc22
  - fix for setting the security context into a 
    proposal (32<->64bit) (rhbz#232508)
* Wed Jan 17 2007 Harald Hoyer <harald@redhat.com> - 0.6.6-1
  - version 0.6.6
* Sun Oct 01 2006 Jesse Keating <jkeating@redhat.com> - 0.6.5-6
  - rebuilt for unwind info generation, broken in gcc-4.1.1-21
* Mon Sep 25 2006 Harald Hoyer <harald@redhat.com> - 0.6.5-5
  - added patch for selinux integration (bug #207159)
* Fri Aug 04 2006 Harald Hoyer <harald@redhat.com> - 0.6.5-4
  - backport of important 0.6.6 fixes:
    - sets NAT-T ports to 0 if no NAT encapsulation
    - fixed memory leak
* Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 0.6.5-3.1
  - rebuild
* Wed Jun 21 2006 Harald Hoyer <harald@redhat.com> - 0.6.5-3
  - more build requirements
* Tue Apr 18 2006 Dan Walsh <dwalsh@redhat.com> - 0.6.5-2
  - Fix patch to build MLS Stuff correctly
* Tue Apr 18 2006 Dan Walsh <dwalsh@redhat.com> - 0.6.5-1
  - Update to latest upstream version
  - Add MLS Patch to allow use of labeled networks
  - Patch provided by Joy Latten <latten@austin.ibm.com>
* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 0.6.4-1.1
  - bump again for double-long bug on ppc(64)
* Tue Feb 07 2006 Harald Hoyer <harald@redhat.com> 0.6.4-1
  - version 0.6.4
* Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 0.6.3-1.2
  - rebuilt for new gcc4.1 snapshot and glibc changes
* Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>
  - rebuilt
* Mon Dec 05 2005 Harald Hoyer <harald@redhat.com> 0.6.3-1
  - version 0.6.3, which contains fixes for various DoS problems
* Wed Nov 09 2005 Tomas Mraz <tmraz@redhat.com> 0.6.1-2
  - rebuilt against new openssl
* Wed Oct 12 2005 Harald Hoyer <harald@redhat.com> 0.6.1-1
  - version 0.6.1
* Mon Mar 28 2005 Bill Nottingham <notting@redhat.com> 0.5-4
  - fix 64-bit issue in setph1attr() (<aviro@redhat.com>)
* Mon Mar 14 2005 Bill Nottingham <notting@redhat.com> 0.5-3
  - add patch for DoS (CAN-2005-0398, #145532)
* Sat Mar 05 2005 Uwe Beck <ubeck@c3pdm.com> 0.5-2
  - now racoon use /etc/racoon/racoon.conf as default
  - add the /var/racoon directory for racoon.sock
* Wed Feb 23 2005 Bill Nottingham <notting@redhat.com> 0.5-1
  - update to 0.5
* Thu Nov 04 2004 Bill Nottingham <notting@redhat.com> 0.3.3-2
  - don't use new 0.3.3 handling of stdin in setkey; it breaks the
    format (#138105)
* Mon Sep 27 2004 Bill Nottingham <notting@redhat.com> 0.3.3-1
  - update to 0.3.3 (#122211)
* Sun Aug 08 2004 Alan Cox <alan@redhat.com> 0.2.5-6
  - fix buildreqs (Steve Grubb)
* Mon Jun 28 2004 Nalin Dahyabhai <nalin@redhat.com> 0.2.5-5
  - rebuild
* Fri Jun 25 2004 Nalin Dahyabhai <nalin@redhat.com> 0.2.5-4
  - backport certificate validation fixes from 0.3.3 (#126568)
* Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>
  - rebuilt
* Wed Apr 14 2004 Bill Nottingham <notting@redhat.com> - 0.2.5-2
  - add patch for potential remote DoS (CAN-2004-0403)
* Tue Apr 06 2004 Bill Nottingham <notting@redhat.com>
  - update to 0.2.5
* Tue Mar 02 2004 Elliot Lee <sopwith@redhat.com>
  - rebuilt
* Mon Feb 23 2004 Bill Nottingham <notting@redhat.com>
  - update to 0.2.4, fix racoon install location (#116374, <kajtzu@fi.basen.net>)
* Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com>
  - rebuilt
* Mon Dec 08 2003 Bill Nottingham <notting@redhat.com> 0.2.2-8
  - rebuild
* Fri Aug 29 2003 Bill Nottingham <notting@redhat.com> 0.2.2-7
  - add fix for #103238
* Tue Aug 05 2003 Bill Nottingham <notting@redhat.com> 0.2.2-6
  - update kernel interface bits, rebuild against them
* Tue Jul 29 2003 Bill Nottingham <notting@redhat.com> 0.2.2-5
  - rebuild
* Wed Jul 02 2003 Bill Notitngham <notting@redhat.com> 0.2.2-4
  - ship a much more pared-down racoon.conf and psk.txt
* Thu Jun 05 2003 Bill Notitngham <notting@redhat.com> 0.2.2-3
  - update pfkey header for current kernels
* Wed Jun 04 2003 Elliot Lee <sopwith@redhat.com>
  - rebuilt
* Fri May 02 2003 Bill Nottingham <notting@redhat.com> 0.2.2-1
  - update to 0.2.2
* Fri Mar 07 2003 Bill Nottingham <notting@redhat.com>
  - initial build

Files

/etc/pam.d/racoon
/etc/racoon
/etc/racoon/certs
/etc/racoon/psk.txt
/etc/racoon/racoon.conf
/etc/racoon/scripts
/etc/racoon/scripts/p1_up_down
/etc/sysconfig/network-scripts/ifdown-ipsec
/etc/sysconfig/network-scripts/ifup-ipsec
/sbin/setkey
/usr/lib/systemd/system/racoon.service
/usr/sbin/plainrsa-gen
/usr/sbin/racoon
/usr/sbin/racoonctl
/usr/share/doc/ipsec-tools
/usr/share/doc/ipsec-tools/ChangeLog
/usr/share/doc/ipsec-tools/FAQ
/usr/share/doc/ipsec-tools/NEWS
/usr/share/doc/ipsec-tools/README
/usr/share/doc/ipsec-tools/psk.txt
/usr/share/doc/ipsec-tools/racoon.conf
/usr/share/man/man5/racoon.conf.5.gz
/usr/share/man/man8/plainrsa-gen.8.gz
/usr/share/man/man8/racoon.8.gz
/usr/share/man/man8/racoonctl.8.gz
/usr/share/man/man8/setkey.8.gz
/var/racoon

Generated by rpm2html 1.8.1

Fabrice Bellet, Tue Jul 9 08:25:36 2024