Still haven't managed to do this. I tried to build from source using a method described at [1] and on your link (and many other thinks) but am not successful.
Literally scoured Google trying to find a working example and all fail in some way.
# apt-get build-dep strongswan
Reading package lists... Done
Reading package lists... Done
Building dependency tree
Reading state information... Done
0 to upgrade, 0 to newly install, 0 to remove and 3 not to upgrade.
# apt-get source strongswan
Reading package lists... Done
NOTICE: 'strongswan' packaging is maintained in the 'Git' version control system at:
git://anonscm.debian.org/pkg-swan/strongswan.git
Please use:
git clone git://anonscm.debian.org/pkg-swan/strongswan.git
to retrieve the latest (possibly unreleased) updates to the package.
Need to get 4,561 kB of source archives.
Get:1 http://gb.archive.ubuntu.com/ubuntu xenial-updates/main strongswan 5.3.5-1ubuntu3.5 (dsc) [8,881 B]
Get:2 http://gb.archive.ubuntu.com/ubuntu xenial-updates/main strongswan 5.3.5-1ubuntu3.5 (tar) [4,415 kB]
Get:3 http://gb.archive.ubuntu.com/ubuntu xenial-updates/main strongswan 5.3.5-1ubuntu3.5 (diff) [137 kB]
Fetched 4,561 kB in 0s (4,571 kB/s)
gpgv: Signature made Mon 18 Dec 2017 10:40:37 GMT using RSA key ID 8280B242
gpgv: Can't check signature: public key not found
dpkg-source: warning: failed to verify signature on ./strongswan_5.3.5-1ubuntu3.5.dsc
dpkg-source: info: extracting strongswan in strongswan-5.3.5
dpkg-source: info: unpacking strongswan_5.3.5.orig.tar.bz2
dpkg-source: info: unpacking strongswan_5.3.5-1ubuntu3.5.debian.tar.xz
dpkg-source: info: applying 01_fix-manpages.patch
dpkg-source: info: applying 03_systemd-service.patch
dpkg-source: info: applying 04_disable-libtls-tests.patch
dpkg-source: info: applying dont-load-kernel-libipsec-plugin-by-default.patch
dpkg-source: info: applying increase-bliss-test-timeout.patch
dpkg-source: info: applying ikev2-Only-add-NAT-D-notifies-to-DPDs-as-initiator.patch
dpkg-source: info: applying CVE-2017-9022.patch
dpkg-source: info: applying CVE-2017-9023.patch
dpkg-source: info: applying CVE-2017-11185.patch
dpkg-source: info: applying ikev1-First-do-PSK-lookups-lp1734207.patch
W: Can't drop privileges for downloading as file 'strongswan_5.3.5-1ubuntu3.5.dsc' couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied)
# git clone git://anonscm.debian.org/pkg-swan/strongswan.git
Cloning into 'strongswan'...
fatal: unable to connect to anonscm.debian.org:
anonscm.debian.org[0: 194.177.211.202]: errno=Connection refused
anonscm.debian.org[1: 2001:648:2ffc:deb::211:202]: errno=Network is unreachable
[1] https://stackoverflow.com/questions/130894/how-to-build-a-debian-ubuntu-package-from-source <https://stackoverflow.com/questions/130894/how-to-build-a-debian-ubuntu-package-from-source>
Kind regards,
Christian Salway
IT Consultant - Naimuri
T: +44 7463 331432
E: ***@naimuri.com
A: Naimuri Ltd, Chandlers Point, Manchester M50 2UW
If you get the source with the "debian" directory that way, yes.
I am telling you to get that, then change the lines that need to be changed in that directory to build the latest version.
Look here: https://wiki.debian.org/BuildingTutorial#The_packaging_workflow
Post by Christian SalwayI was assuming you meant apt-get source <package>
Where do you get the source for the latest version?
That's why I wrote that you should get the source, change the required lines and build it. I did *not* tell you to install from the repositories.
Post by Christian SalwayHi Noel,
It is an old version in the repository.
# apt-cache policy strongswan
Installed: (none)
Candidate: 5.3.5-1ubuntu3.5
5.3.5-1ubuntu3.5 500
500 http://eu-west-2.ec2.archive.ubuntu.com/ubuntu xenial-updates/main amd64 Packages
5.3.5-1ubuntu3.4 500
500 http://security.ubuntu.com/ubuntu xenial-security/main amd64 Packages
5.3.5-1ubuntu3 500
500 http://eu-west-2.ec2.archive.ubuntu.com/ubuntu xenial/main amd64 Packages
Kind regards,
*Christian Salway*
IT Consultant - *Naimuri*
T: +44 7463 331432
A: Naimuri Ltd, Chandlers Point, Manchester M50 2UW
Get the package sources for the Ubuntu package for strongSwan, change the required lines, build it, done.
Post by Christian SalwayI was wondering if you could help me to package strongSwan so it doesnt have to build each time. I've asked around and apparently you are the best to ask.
I'm trying to package the following for Ubuntu 16.04 so it doesnt have to build it each time - takes a looong time.
wget -nv https://download.strongswan.org/strongswan-5.6.3.tar.bz2
tar xjf strongswan-5.6.3.tar.bz2
cd strongswan*
./configure --prefix=/usr --sysconfdir=/etc \
--enable-systemd --enable-swanctl \
--disable-charon --disable-stroke --disable-scepclient \
--enable-eap-identity --enable-eap-radius --enable-openssl
make
make install
Kind regards,
*Christian Salway*
IT Consultant - *Naimuri*
T: +44 7463 331432
A: Naimuri Ltd, Chandlers Point, Manchester M50 2UW