104 lines
2.7 KiB
Ruby
104 lines
2.7 KiB
Ruby
class Strongswan < Formula
|
|
desc "VPN based on IPsec"
|
|
homepage "https://www.strongswan.org"
|
|
url "https://download.strongswan.org/strongswan-5.6.1.tar.bz2"
|
|
sha256 "e0c282d8ad418609c5dfb5e8efa01b28b95ef3678070ed47bf2a229f55f4ab53"
|
|
|
|
bottle do
|
|
sha256 "139e8b174f231ed63344e10e051850df5fb21eebc7df42ee99a2bc5008300311" => :high_sierra
|
|
sha256 "d851d94f6112691d0b200888fb11e193c3bea178e9b766598e304a88401b093c" => :sierra
|
|
sha256 "94858abdaf8430161d44264bacaa40181a6791a7a9b31822ba39f4e120d5928c" => :el_capitan
|
|
end
|
|
|
|
head do
|
|
url "https://git.strongswan.org/strongswan.git"
|
|
|
|
depends_on "autoconf" => :build
|
|
depends_on "automake" => :build
|
|
depends_on "libtool" => :build
|
|
depends_on "pkg-config" => :build
|
|
depends_on "gettext" => :build
|
|
depends_on "bison" => :build
|
|
end
|
|
|
|
option "with-curl", "Build with libcurl based fetcher"
|
|
option "with-suite-b", "Build with Suite B support (does not use the IPsec implementation provided by the kernel)"
|
|
|
|
depends_on "openssl"
|
|
depends_on "curl" => :optional
|
|
|
|
def install
|
|
args = %W[
|
|
--disable-dependency-tracking
|
|
--prefix=#{prefix}
|
|
--sbindir=#{bin}
|
|
--sysconfdir=#{etc}
|
|
--disable-defaults
|
|
--enable-charon
|
|
--enable-cmd
|
|
--enable-constraints
|
|
--enable-curve25519
|
|
--enable-eap-gtc
|
|
--enable-eap-identity
|
|
--enable-eap-md5
|
|
--enable-eap-mschapv2
|
|
--enable-ikev1
|
|
--enable-ikev2
|
|
--enable-kernel-pfroute
|
|
--enable-nonce
|
|
--enable-openssl
|
|
--enable-osx-attr
|
|
--enable-pem
|
|
--enable-pgp
|
|
--enable-pkcs1
|
|
--enable-pkcs8
|
|
--enable-pki
|
|
--enable-pubkey
|
|
--enable-revocation
|
|
--enable-scepclient
|
|
--enable-socket-default
|
|
--enable-sshkey
|
|
--enable-stroke
|
|
--enable-swanctl
|
|
--enable-unity
|
|
--enable-updown
|
|
--enable-x509
|
|
--enable-xauth-generic
|
|
]
|
|
args << "--enable-curl" if build.with? "curl"
|
|
|
|
if build.with? "suite-b"
|
|
args << "--enable-kernel-libipsec"
|
|
else
|
|
args << "--enable-kernel-pfkey"
|
|
end
|
|
|
|
system "./autogen.sh" if build.head?
|
|
system "./configure", *args
|
|
system "make", "check"
|
|
system "make", "install"
|
|
end
|
|
|
|
def caveats
|
|
msg = <<~EOS
|
|
strongSwan's configuration files are placed in:
|
|
#{etc}
|
|
|
|
You will have to run both "ipsec" and "charon-cmd" with "sudo".
|
|
EOS
|
|
if build.with? "suite-b"
|
|
msg += <<~EOS
|
|
|
|
If you previously ran strongSwan without Suite B support it might be
|
|
required to execute "sudo sysctl -w net.inet.ipsec.esp_port=0" in order
|
|
to receive packets.
|
|
EOS
|
|
end
|
|
msg
|
|
end
|
|
|
|
test do
|
|
system "#{bin}/ipsec", "--version"
|
|
system "#{bin}/charon-cmd", "--version"
|
|
end
|
|
end
|