racoon2 20090327c security =10

Racoon2 IPsec daemon
Maintained by: sumikawa@FreeBSD.org
Port Added: 01 Feb 2005 18:59:59
Also Listed In: net ipv6

---

---

"racoon2" is a system to exchange and to install security parameters
for the IPsec.

Currently the system supports the following specification:

	Internet Key Exchange (IKEv2) Protocol
	draft-ietf-ipsec-ikev2-17.txt

	Kerberized Internet Negotiation of Keys (KINK)
	draft-ietf-kink-kink-06.txt

	PF_KEY Key Management API, Version 2
	RFC2367
	
	The Internet Key Exchange (IKE)
	RFC2409

WWW: http://www.racoon2.wide.ad.jp/

CVSWeb : Sources : Main Web Site : Distfiles Availability : PortsMon

---

Required To Build: devel/autoconf262

---

To install the port: cd /usr/ports/security/racoon2/ && make install clean
To add the package: pkg_add -r racoon2

---

Configuration Options

===> The following configuration options are available for racoon2-20090327c:
     KINK=off (default) "enable KINK support"
===> Use 'make config' to modify these settings

---

Master Sites:

ftp://ftp.racoon2.wide.ad.jp/pub/racoon2/

ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/distfiles/

make compilable with KINK.

Upgrade to 20090327c.

Fix rcf_get_remotebyaddr() condition.
This fixes not worked simultaneously ikev1 and ikev2.

From:           Dmitry <dmitry2006@yandex.ru>
PR:             ports/131976
Obtained from: 
http://www.racoon2.wide.ad.jp/cvsweb/racoon2/lib/cfsetup.c.diff?r1=1.102&r2=1.103

Fix hardcoded cofiguration path.

Reported by:            Goran Lowkrantz <goran.lowkrantz@ismobile.com>

Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script.
Specifically, newer autoconf (> 2.13) has different semantic of the
configure target. In short, one should use --build=CONFIGURE_TARGET
instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning
and the old semantic may be removed in later autoconf releases.

To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.

To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.

Changes to Mk/*:
 - Add runtime detection magic in bsd.port.mk

Conversion from (now defunct) autoconf-2.61 to autoconf-2.62

Tested by:      exp build run (erwin)

Fix pkg-plist with WITH_KINK.

PR:             ports/125642
Submitted by:   yves guerin <yvesguerin@yahoo.ca>

Fix to mkdir unnecessary directory.

Upgrade to 20071227e.

PR:     ports/119795
From:   Yarema <yds@CoolRat.org>

Switch autoconf dependencies from 2.53 or 2.59 to 2.61.

PR:             ports/116639
Submitted by:   aDe

Revert removing USE_AUTOTOOLS.

Make compilable with recent FAST_IPSEC changes on -CURRENT.

Fix pkg-plist.

Upgrade to 20070720a.

Fix PLIST.

Upgrade to 20061228a. IKEv1 has been supported.

Add pathches to fix compilation problem on 64bit arch.

Fix compilation on 64bit archs.

Upgrade to 20060712a.

clean up startup scripts.

PR:             ports/91312
Reported by:    Vivek Khera <vivek@khera.org>

Fix installation problem on freebsd4.

- Make an option for kinkd support.  This should work on 4-STABLE
- Now kinkd is disabled in default
- use set_rcvar

Noticed by:     kris
Submitted by:   jau@iki.fi (set_rcvar patch)

SHA256ify

Approved by: krion@

Mass-conversion to the USE_AUTOTOOLS New World Order.  The code present
in bsd.autotools.mk essentially makes this a no-op given that all the
old variables set a USE_AUTOTOOLS_COMPAT variable, which is parsed in
exactly the same way as USE_AUTOTOOLS itself.

Moreover, USE_AUTOTOOLS has already been extensively tested by the GNOME
team -- all GNOME 2.12.x ports use it.

Preliminary documentation can be found at:
        http://people.FreeBSD.org/~ade/autotools.txt

which is in the process of being SGMLized before introduction into the
Porters Handbook.

Light blue touch-paper.  Run.

Fix plist.

Upgrade to 20051102a.

Make compilable on 64bit system.

Fix pkg-plist.

IKEv2 has been supported.

Upgrade to 20050625b.  IKEv2 has been supported.

- Make it broken when Kerberos5 is not installed in the system
- Correct paths in documents

"racoon2" is a system to exchange and to install security parameters
for the IPsec.

Currently the system supports the following specification:

        Internet Key Exchange (IKEv2) Protocol
        draft-ietf-ipsec-ikev2-17.txt
        (The IKE daemon is not included in the current release due to IPR issue)

        Kerberized Internet Negotiation of Keys (KINK)
        draft-ietf-kink-kink-06.txt

        PF_KEY Key Management API, Version 2
        RFC2367

The following protocols will be supported soon.

        The Internet Key Exchange (IKE)
        RFC2409

WWW: http://www.kame.net/

This port was repocopied from secutiry/racoon.
PR:             ports/76814

5 vulnerabilities affecting 16 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities