racoon2 20100526a_1 security =11

Racoon2 IPsec daemon
Maintained by: sumikawa@FreeBSD.org
Port Added: 01 Feb 2005 18:59:59
Also Listed In: net ipv6
License: not specified in port

---

---

"racoon2" is a system to exchange and to install security parameters
for the IPsec.

Currently the system supports the following specification:

	Internet Key Exchange (IKEv2) Protocol
	draft-ietf-ipsec-ikev2-17.txt

	Kerberized Internet Negotiation of Keys (KINK)
	draft-ietf-kink-kink-06.txt

	PF_KEY Key Management API, Version 2
	RFC2367
	
	The Internet Key Exchange (IKE)
	RFC2409

WWW: http://www.racoon2.wide.ad.jp/

CVSWeb : Sources : Main Web Site : Distfiles Availability : PortsMon

---

NOTE: FreshPorts displays only required dependencies information. Optional dependencies are not covered.
Required To Build: devel/autoconf
There are no ports dependent upon this port

---

To install the port: cd /usr/ports/security/racoon2/ && make install clean
To add the package: pkg_add -r racoon2

---

Configuration Options

===> The following configuration options are available for racoon2-20100526a_1:
     KINK=off (default) "enable KINK support"
===> Use 'make config' to modify these settings

---

Master Sites:

ftp://ftp.racoon2.wide.ad.jp/pub/racoon2/

ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/distfiles/

In the rc.d scripts, change assignments to rcvar to use the
literal name_enable wherever possible, and ${name}_enable
when it's not, to prepare for the demise of set_rcvar().

In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.

-remove MD5

Sync to new bsd.autotools.mk

Punt autoconf267->autoconf268

Autotools update.   Read ports/UPDATING 20100915 for details.

Approved by:    portmgr (for Mk/bsd.port.mk part)
Tested by:      Multiple -exp runs

Upgrade to 20100526a.

make compilable with KINK.

Upgrade to 20090327c.

Fix rcf_get_remotebyaddr() condition.
This fixes not worked simultaneously ikev1 and ikev2.

From:           Dmitry <dmitry2006@yandex.ru>
PR:             ports/131976
Obtained from: 
http://www.racoon2.wide.ad.jp/cvsweb/racoon2/lib/cfsetup.c.diff?r1=1.102&r2=1.103

Fix hardcoded cofiguration path.

Reported by:            Goran Lowkrantz <goran.lowkrantz@ismobile.com>

Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script.
Specifically, newer autoconf (> 2.13) has different semantic of the
configure target. In short, one should use --build=CONFIGURE_TARGET
instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning
and the old semantic may be removed in later autoconf releases.

To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.

To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.

Changes to Mk/*:
 - Add runtime detection magic in bsd.port.mk

Conversion from (now defunct) autoconf-2.61 to autoconf-2.62

Tested by:      exp build run (erwin)

Fix pkg-plist with WITH_KINK.

PR:             ports/125642
Submitted by:   yves guerin <yvesguerin@yahoo.ca>

Fix to mkdir unnecessary directory.

Upgrade to 20071227e.

PR:     ports/119795
From:   Yarema <yds@CoolRat.org>

Switch autoconf dependencies from 2.53 or 2.59 to 2.61.

PR:             ports/116639
Submitted by:   aDe

Revert removing USE_AUTOTOOLS.

Make compilable with recent FAST_IPSEC changes on -CURRENT.

Fix pkg-plist.

Upgrade to 20070720a.

Fix PLIST.

Upgrade to 20061228a. IKEv1 has been supported.

Add pathches to fix compilation problem on 64bit arch.

Fix compilation on 64bit archs.

Upgrade to 20060712a.

clean up startup scripts.

PR:             ports/91312
Reported by:    Vivek Khera <vivek@khera.org>

Fix installation problem on freebsd4.

- Make an option for kinkd support.  This should work on 4-STABLE
- Now kinkd is disabled in default
- use set_rcvar

Noticed by:     kris
Submitted by:   jau@iki.fi (set_rcvar patch)

SHA256ify

Approved by: krion@

Mass-conversion to the USE_AUTOTOOLS New World Order.  The code present
in bsd.autotools.mk essentially makes this a no-op given that all the
old variables set a USE_AUTOTOOLS_COMPAT variable, which is parsed in
exactly the same way as USE_AUTOTOOLS itself.

Moreover, USE_AUTOTOOLS has already been extensively tested by the GNOME
team -- all GNOME 2.12.x ports use it.

Preliminary documentation can be found at:
        http://people.FreeBSD.org/~ade/autotools.txt

which is in the process of being SGMLized before introduction into the
Porters Handbook.

Light blue touch-paper.  Run.

Fix plist.

Upgrade to 20051102a.

Make compilable on 64bit system.

Fix pkg-plist.

IKEv2 has been supported.

Upgrade to 20050625b.  IKEv2 has been supported.

- Make it broken when Kerberos5 is not installed in the system
- Correct paths in documents

"racoon2" is a system to exchange and to install security parameters
for the IPsec.

Currently the system supports the following specification:

        Internet Key Exchange (IKEv2) Protocol
        draft-ietf-ipsec-ikev2-17.txt
        (The IKE daemon is not included in the current release due to IPR issue)

        Kerberized Internet Negotiation of Keys (KINK)
        draft-ietf-kink-kink-06.txt

        PF_KEY Key Management API, Version 2
        RFC2367

The following protocols will be supported soon.

        The Internet Key Exchange (IKE)
        RFC2409

WWW: http://www.kame.net/

This port was repocopied from secutiry/racoon.
PR:             ports/76814

12 vulnerabilities affecting 31 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities