racoon development have stopped. use security/ipsec-tools.

12 files changed, 1 insertions, 235 deletions

diff --git a/security/Makefile b/security/Makefile
index c15113beaa8..e7600f068d0 100644
--- a/security/Makefile
+++ b/security/Makefile
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.236 2005/04/19 09:51:24 wiz Exp $
+# $NetBSD: Makefile,v 1.237 2005/04/21 10:23:09 itojun Exp $
 #
 
 COMMENT=	Security tools
@@ -189,7 +189,6 @@ SUBDIR+=	pyca
 SUBDIR+=	qca
 SUBDIR+=	qca-tls
 SUBDIR+=	qident
-SUBDIR+=	racoon
 SUBDIR+=	rats
 SUBDIR+=	rc5des
 SUBDIR+=	rid
diff --git a/security/racoon/DESCR b/security/racoon/DESCR
deleted file mode 100644
index 542e6afab5d..00000000000
--- a/security/racoon/DESCR
+++ /dev/null
@@ -1,18 +0,0 @@
-racoon speaks IKE (ISAKMP/Oakley) key management protocol, to
-establish security association with other hosts.
-
-Known issues:
-- Too many use of dynamic memory allocation, which leads to memory leak.
-- Non-threaded implementation.  Simultaneous key negotiation performance
-  should be improved.
-- Cannot negotiate keys for per-socket policy.
-- Cryptic configuration syntax - blame IPsec specification too...
-- Needs more documentation.
-
-Design choice, not a bug:
-- racoon negotiate IPsec keys only.  It does not negotiate policy.  Policy must
-  be configured into the kernel separately from racoon.  If you want to
-  support roaming clients, you may need to have a mechanism to put policy
-  for the roaming client after phase 1 finishes.
-
-Bug reports should be sent to http://orange.kame.net/dev/send-pr.html.
diff --git a/security/racoon/Makefile b/security/racoon/Makefile
deleted file mode 100644
index 8dba4d22db0..00000000000
--- a/security/racoon/Makefile
+++ /dev/null
@@ -1,60 +0,0 @@
-# $NetBSD: Makefile,v 1.74 2005/04/11 21:47:18 tv Exp $
-#
-
-DISTNAME=	racoon-20040818a
-PKGREVISION=	1
-CATEGORIES=	security net
-MASTER_SITES=	ftp://ftp.kame.net/pub/kame/misc/
-
-MAINTAINER=	itojun@kame.net
-HOMEPAGE=	http://www.kame.net/
-COMMENT=	KAME racoon IKE daemon
-
-CONFLICTS+=	racoon-[0-9]*
-
-WRKSRC=		${WRKDIR}/${DISTNAME}/racoon
-USE_PKGINSTALL=	yes
-
-CRYPTO=		yes
-
-# this is not compatible with cross build - there's no other way
-.if !exists(/usr/include/netinet6/ipsec.h)
-PKG_FAIL_REASON+= "${PKGNAME} requires ipsec-ready ${OPSYS}"
-.endif
-
-BUILD_DEFS+=	USE_INET6
-.include "../../mk/bsd.prefs.mk"
-
-PKG_SYSCONFSUBDIR?=	racoon
-RCD_SCRIPTS=	racoon
-CONF_FILES=	${PREFIX}/share/examples/racoon/racoon.conf.sample \
-		${PKG_SYSCONFDIR}/racoon.conf
-
-GNU_CONFIGURE=	yes
-CONFIGURE_ARGS+=--enable-debug
-.if defined(USE_INET6) && ${USE_INET6} == "YES"
-CONFIGURE_ARGS+=--enable-ipv6
-.else
-CONFIGURE_ARGS+=--disable-ipv6
-.endif
-CONFIGURE_ARGS+=--sysconfdir=${PKG_SYSCONFDIR}
-.if defined(PKGREVISION)
-CONFIGURE_ARGS+=--with-pkgversion=netbsd-pkgsrc-20040818anb${PKGREVISION}
-.else
-CONFIGURE_ARGS+=--with-pkgversion=netbsd-pkgsrc-20040818a
-.endif
-
-pre-configure:
-	(cd ${WRKSRC}/../libipsec; ${MAKE} ${MAKE_ENV})
-
-post-install:
-	${INSTALL_DATA_DIR} ${PREFIX}/share/doc/racoon
-	for i in FAQ README.certificate README.gssapi; do \
-		${INSTALL_DATA} ${WRKSRC}/doc/$$i ${PREFIX}/share/doc/racoon; \
-	done
-	${INSTALL_DATA_DIR} ${PREFIX}/share/examples/racoon
-	${INSTALL_DATA} ${WRKSRC}/samples/racoon.conf.sample \
-		${PREFIX}/share/examples/racoon
-
-.include "../../security/openssl/buildlink3.mk"
-.include "../../mk/bsd.pkg.mk"
diff --git a/security/racoon/PLIST b/security/racoon/PLIST
deleted file mode 100644
index bbf30544c70..00000000000
--- a/security/racoon/PLIST
+++ /dev/null
@@ -1,10 +0,0 @@
-@comment $NetBSD: PLIST,v 1.4 2004/04/23 22:07:58 reed Exp $
-sbin/racoon
-man/man8/racoon.8
-man/man5/racoon.conf.5
-share/doc/racoon/README.certificate
-share/doc/racoon/README.gssapi
-share/doc/racoon/FAQ
-@dirrm share/doc/racoon
-share/examples/racoon/racoon.conf.sample
-@dirrm share/examples/racoon
diff --git a/security/racoon/distinfo b/security/racoon/distinfo
deleted file mode 100644
index c92fca1d80e..00000000000
--- a/security/racoon/distinfo
+++ /dev/null
@@ -1,11 +0,0 @@
-$NetBSD: distinfo,v 1.28 2005/02/24 13:10:12 agc Exp $
-
-SHA1 (racoon-20040818a.tar.gz) = acce68144513e9c280b16b48d2a24654e0bb8636
-RMD160 (racoon-20040818a.tar.gz) = d0dc66f66b241659934debad7fd269533094cbf2
-Size (racoon-20040818a.tar.gz) = 397275 bytes
-SHA1 (patch-aa) = 586f7bd5129f3be88cb104244fba2b7b13a7b044
-SHA1 (patch-ab) = 9953d8e61c3c56c15aa78433f07ddd8d9d46c9c2
-SHA1 (patch-ac) = 29ff53ca5a23785253321a9629c32065da56ca9f
-SHA1 (patch-ad) = d4718088c04c72ccfe34c4b53ec4a2f830600877
-SHA1 (patch-ae) = 3b5dcbd2398e95e9bdb0cb69a11d49eecc981a08
-SHA1 (patch-af) = 0d0fb78ae6f3a10be95ff6160dc85140ea09455a
diff --git a/security/racoon/files/racoon.sh b/security/racoon/files/racoon.sh
deleted file mode 100644
index 6050e3a0f89..00000000000
--- a/security/racoon/files/racoon.sh
+++ /dev/null
@@ -1,19 +0,0 @@
-#!/bin/sh
-#
-# $NetBSD: racoon.sh,v 1.1 2003/03/22 11:00:17 jmmv Exp $
-#
-
-# PROVIDE: racoon
-# REQUIRE: DAEMON LOGIN network
-# KEYWORD: shutdown
-
-. /etc/rc.subr
-
-name="racoon"
-rcvar=$name
-command="@PREFIX@/sbin/${name}"
-required_files="@PKG_SYSCONFDIR@/racoon.conf"
-pidfile="/var/run/racoon.pid"
-
-load_rc_config $name
-run_rc_command "$1"
diff --git a/security/racoon/patches/patch-aa b/security/racoon/patches/patch-aa
deleted file mode 100644
index 5d021a4194a..00000000000
--- a/security/racoon/patches/patch-aa
+++ /dev/null
@@ -1,18 +0,0 @@
-$NetBSD: patch-aa,v 1.3 2000/09/12 12:51:28 itojun Exp $
---- ../libipsec/Makefile.orig	Sun Jun 11 23:54:31 2000
-+++ ../libipsec/Makefile	Tue Sep 12 16:11:57 2000
-@@ -27,5 +27,6 @@
- 
--.if exists(${.CURDIR}/../Makefile.opsys)
--.include "${.CURDIR}/../Makefile.opsys"
--.endif
-+#.if exists(${.CURDIR}/../Makefile.opsys)
-+#.include "${.CURDIR}/../Makefile.opsys"
-+#.endif
-+OPSYS!=	uname -s
- 
-@@ -36,3 +37,3 @@
- .else
--CPPFLAGS+=-DIPSEC_DEBUG -DIPSEC -DINET6
-+CPPFLAGS+=-DIPSEC_DEBUG -DIPSEC -DINET6 -I${.CURDIR}
- .endif
diff --git a/security/racoon/patches/patch-ab b/security/racoon/patches/patch-ab
deleted file mode 100644
index 56a03559043..00000000000
--- a/security/racoon/patches/patch-ab
+++ /dev/null
@@ -1,29 +0,0 @@
-$NetBSD: patch-ab,v 1.4 2003/08/26 03:06:09 itojun Exp $
-
---- Makefile.in.orig	2003-08-19 18:09:15.000000000 +0900
-+++ Makefile.in	2003-08-26 12:02:07.000000000 +0900
-@@ -10,7 +10,7 @@
- CFLAGS=	@CFLAGS@ $(CPPFLAGS) @DEFS@ $(CPPFLAGS) $(OPTFLAG) -DIPSEC -I. -I$(srcdir) -DSYSCONFDIR=\"${sysconfdir}\"
- CFLAGS+=-DYY_NO_UNPUT
- CFLAGS+=-I${srcdir}/../libipsec
--LIBS=	@LIBS@
-+LIBS=	-L${.CURDIR}/../libipsec @LIBS@
- YFLAGS+=-d
- 
- prefix=	@prefix@
-@@ -87,15 +87,6 @@
- 	$(INSTALL) -s -o bin -g bin -m 555 racoon $(sbindir)
- 	$(INSTALL) -o bin -g bin -m 444 racoon.8 $(mandir)/man8
- 	$(INSTALL) -o bin -g bin -m 444 racoon.conf.5 $(mandir)/man5
--	-mkdir -p ${sysconfdir}/racoon
--	for i in $(CONF); do \
--		if test ! -f ${sysconfdir}/racoon/$$i; then \
--			$(INSTALL) -o bin -g bin -m 444 samples/$$i \
--				${sysconfdir}/racoon; \
--		fi; \
--		$(INSTALL) -o bin -g bin -m 444 samples/$$i \
--			${sysconfdir}/racoon/$$i.dist; \
--	done
- 
- clean:
- 	-rm -f $(PROG) *.o *.core y.tab.h cftoken.c cfparse.c cftoken.h cfparse.h
diff --git a/security/racoon/patches/patch-ac b/security/racoon/patches/patch-ac
deleted file mode 100644
index 20296666730..00000000000
--- a/security/racoon/patches/patch-ac
+++ /dev/null
@@ -1,23 +0,0 @@
-$NetBSD: patch-ac,v 1.7 2001/10/17 02:53:09 itojun Exp $
-
---- samples/racoon.conf.sample.orig	Thu Aug 16 15:33:40 2001
-+++ samples/racoon.conf.sample	Fri Aug 31 18:39:12 2001
-@@ -4,15 +4,15 @@
- # "include" directive with relative file path.
- # you can overwrite "path" directive afterwards, however, doing so may add
- # more confusion.
--#path include "/usr/local/v6/etc" ;
-+#path include "/etc/racoon" ;
- #include "remote.conf" ;
- 
- # the file should contain key ID/key pairs, for pre-shared key authentication.
--path pre_shared_key "/usr/local/v6/etc/psk.txt" ;
-+path pre_shared_key "/etc/racoon/psk.txt" ;
- 
- # racoon will look for certificate file in the directory,
- # if the certificate/certificate request payload is received.
--#path certificate "/usr/local/openssl/certs" ;
-+#path certificate "/usr/pkg/certs" ;
- 
- # "log" specifies logging level.  It is followed by either "notify", "debug"
- # or "debug2".
diff --git a/security/racoon/patches/patch-ad b/security/racoon/patches/patch-ad
deleted file mode 100644
index be833cca7b8..00000000000
--- a/security/racoon/patches/patch-ad
+++ /dev/null
@@ -1,11 +0,0 @@
-$NetBSD: patch-ad,v 1.2 2000/09/23 21:25:07 itojun Exp $
-
---- racoon.8.orig	Sat Sep 23 15:00:49 2000
-+++ racoon.8	Sat Sep 23 15:01:40 2000
-@@ -94,4 +94,4 @@
- .Sh FILES
--.Bl -tag -width /usr/local/v6/etc/racoon.conf -compact
--.It Pa /usr/local/v6/etc/racoon.conf
-+.Bl -tag -width /etc/racoon/racoon.conf -compact
-+.It Pa /etc/racoon/racoon.conf
- default configuration file.
diff --git a/security/racoon/patches/patch-ae b/security/racoon/patches/patch-ae
deleted file mode 100644
index 3193af424ad..00000000000
--- a/security/racoon/patches/patch-ae
+++ /dev/null
@@ -1,18 +0,0 @@
-$NetBSD: patch-ae,v 1.10 2002/05/07 09:03:57 itojun Exp $
-
-make it compile on 1.5.x
-
---- ../libipsec/key_debug.c-	Thu Aug  2 21:38:17 2001
-+++ ../libipsec/key_debug.c	Thu Aug  2 21:38:44 2001
-@@ -392,9 +392,8 @@
- 
- 	printf("sadb_x_sa2{ mode=%u reqid=%u\n",
- 	    sa2->sadb_x_sa2_mode, sa2->sadb_x_sa2_reqid);
--	printf("  reserved1=%u reserved2=%u sequence=%u }\n",
--	    sa2->sadb_x_sa2_reserved1, sa2->sadb_x_sa2_reserved2,
--	    sa2->sadb_x_sa2_sequence);
-+	printf("  reserved1=%u reserved2=%u }\n",
-+	    sa2->sadb_x_sa2_reserved1, sa2->sadb_x_sa2_reserved2);
- 
- 	return;
- }
diff --git a/security/racoon/patches/patch-af b/security/racoon/patches/patch-af
deleted file mode 100644
index 7e769e20795..00000000000
--- a/security/racoon/patches/patch-af
+++ /dev/null
@@ -1,16 +0,0 @@
-$NetBSD: patch-af,v 1.2 2002/05/07 09:03:57 itojun Exp $
-
-make it compile on 1.5.x
-
---- ../libipsec/pfkey_dump.c-	Thu Aug  2 21:38:21 2001
-+++ ../libipsec/pfkey_dump.c	Thu Aug  2 21:38:34 2001
-@@ -299,8 +299,7 @@
- 	}
- 
- 	/* replay windoe size & flags */
--	printf("\tseq=0x%08x replay=%u flags=0x%08x ",
--		m_sa2->sadb_x_sa2_sequence,
-+	printf("\treplay=%u flags=0x%08x ",
- 		m_sa->sadb_sa_replay,
- 		m_sa->sadb_sa_flags);
-