commit:     f03698bb5bc3a8dec1e44452d424443186a39c22
Author:     Nicolas PARLANT <nicolas.parlant <AT> parhuet <DOT> fr>
AuthorDate: Fri Nov 21 13:20:10 2025 +0000
Commit:     Sam James <sam <AT> gentoo <DOT> org>
CommitDate: Wed Nov 26 02:21:52 2025 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f03698bb

net-vpn/strongswan: fix deps, update plugins list

remove plugins ntru and newhope (since 6.0)
add connmark' plugin

update to libsoup-3, 2.X is no longer supported
unrestrict botan version
add missing dev-libs/libgpg-error for gcrypt
add missing net-firewall/nftables (libiptc) for forecast and connmark

Closes: https://bugs.gentoo.org/963601
Closes: https://bugs.gentoo.org/963910
Signed-off-by: Nicolas PARLANT <nicolas.parlant <AT> parhuet.fr>
Part-of: https://github.com/gentoo/gentoo/pull/44721
Signed-off-by: Sam James <sam <AT> gentoo.org>

 net-vpn/strongswan/metadata.xml            |  1 +
 net-vpn/strongswan/strongswan-6.0.3.ebuild | 13 +++++++++----
 2 files changed, 10 insertions(+), 4 deletions(-)

diff --git a/net-vpn/strongswan/metadata.xml b/net-vpn/strongswan/metadata.xml
index 352099638949..8d5fa9784967 100644
--- a/net-vpn/strongswan/metadata.xml
+++ b/net-vpn/strongswan/metadata.xml
@@ -42,6 +42,7 @@
                <flag name="strongswan_plugins_ccm">Enable support for the ccm 
plugin</flag>
                <flag name="strongswan_plugins_chapoly">Enable 
ChaCha20/Poly1305 AEAD implementation and ChaCha20 XOF plugin</flag>
                <flag name="strongswan_plugins_cmac">Enable support for the 
cmac plugin</flag>
+               <flag name="strongswan_plugins_connmark">Enable connmark plugin 
using conntrack based marks to select return path SA</flag>
                <flag name="strongswan_plugins_ctr">Enable support for the ctr 
plugin</flag>
                <flag name="strongswan_plugins_curve25519">Enable support for 
X25519 DH group and Ed25519 public key uthentication</flag>
                <flag name="strongswan_plugins_des">Enable DES/3DES cipher 
implementation</flag>

diff --git a/net-vpn/strongswan/strongswan-6.0.3.ebuild 
b/net-vpn/strongswan/strongswan-6.0.3.ebuild
index c3320cbe6a17..e49cc3dcee04 100644
--- a/net-vpn/strongswan/strongswan-6.0.3.ebuild
+++ b/net-vpn/strongswan/strongswan-6.0.3.ebuild
@@ -17,7 +17,7 @@ STRONGSWAN_PLUGINS_STD="aes cmac curve25519 des dnskey drbg 
eap-radius fips-prf
 pkcs1 pkcs7 pkcs8 pkcs12 pubkey random rc2 revocation sha1 sha2 sshkey 
systime-fix stroke unity vici x509 xcbc"
 STRONGSWAN_PLUGINS_OPT_DISABLE="kdf"
 STRONGSWAN_PLUGINS_OPT="acert af-alg agent addrblock aesni botan blowfish 
bypass-lan
-ccm chapoly ctr error-notify forecast files gcm ha ipseckey md4 mgf1 ntru 
newhope
+ccm chapoly connmark ctr error-notify forecast files gcm ha ipseckey md4 mgf1
 openxpki padlock rdrand save-keys sha3 soup test-vectors unbound whitelist 
xauth-noauth"
 
 for mod in $STRONGSWAN_PLUGINS_STD; do
@@ -38,7 +38,10 @@ COMMON_DEPEND="non-root? (
        )
        dev-libs/glib:2
        gmp? ( >=dev-libs/gmp-4.1.5:= )
-       gcrypt? ( dev-libs/libgcrypt:= )
+       gcrypt? (
+               dev-libs/libgcrypt:=
+               dev-libs/libgpg-error
+       )
        caps? ( sys-libs/libcap )
        curl? ( net-misc/curl )
        ldap? ( net-nds/openldap:= )
@@ -48,8 +51,10 @@ COMMON_DEPEND="non-root? (
        systemd? ( sys-apps/systemd )
        networkmanager? ( net-misc/networkmanager )
        pam? ( sys-libs/pam )
-       strongswan_plugins_botan? ( dev-libs/botan:2= )
-       strongswan_plugins_soup? ( net-libs/libsoup:2.4= )
+       strongswan_plugins_botan? ( dev-libs/botan:= )
+       strongswan_plugins_connmark? ( net-firewall/iptables:= )
+       strongswan_plugins_forecast? ( net-firewall/iptables:= )
+       strongswan_plugins_soup? ( net-libs/libsoup:3.0 )
        strongswan_plugins_unbound? ( net-dns/unbound:= net-libs/ldns:= )"
 
 DEPEND="${COMMON_DEPEND}

Reply via email to