Changelog for ipsec-tools-0.8.2-79.2.i586.rpm :
Wed Aug 5 14:00:00 2015 meissnerAATTsuse.com
- do not run %fdupes over the whole tree, to avoid symlinking
/etc/ config files and /usr/ sample configs.

Wed Jun 10 14:00:00 2015 chrisAATTcomputersalat.de
- rework racoon.psk.patch

* comment example entry (its not a backdoor just an example)

Thu Jun 4 14:00:00 2015 tchvatalAATTsuse.com
- Cleanup most of the rpmlint warnings to have it in better shape

Thu Apr 23 14:00:00 2015 meissnerAATTsuse.com
- racoon-fips-rsa.patch: Use a default exponent of at least 65537
(minimum FIPS required public exponent)
- racoon-no-md5.patch: replace one md5 usage by sha1 in an internal
hash table. Allow md5 usage for an external visible interface,
as it is also hashing only.

Thu Jan 22 13:00:00 2015 p.drouandAATTgmail.com
- Update to version 0.8.2

* Fix admin port establish-sa for tunnel mode SAs

* Fix source port selection regression from version 0.8.1

* Various logging improvements

* Additional compliance and build fixes
- Changes from version 0.8.1

* Improved X.509 subject name comparation

* Relax DPD cookie check for Cisco IOS compatibility

* Allow simplified syntax for inherited remote blocks

* Never shring pfkey socket buffer

* Privilege separation child process exit fix

* Multiple memory allocation and use-after-free fixes
- Remove some obsolete macros

Tue Jul 8 14:00:00 2014 meissnerAATTsuse.com
- ipsec-tools-0.8.0-certasn1txtbroken.patch:
disable the certificate test in src/racoon/eaytest.c as the
internal X.509 ASN.1 string presentation was changed in openssl
and the test currently does not work.

Thu Mar 13 13:00:00 2014 jbohacAATTsuse.cz
- add RemainAfterExit=yes to the .service file (bnc#856625)

Fri Jan 10 13:00:00 2014 jbohacAATTsuse.cz
- upgrade to version 0.8.0:
o Fix authentication method ambiguity with kerberos and xauth
o RFC2253 compliant escaping of asn1dn identifiers (Cyrus Rahman)
o Local address code rewrite to speed things up
o Improved MIPv6 support (Arnaud Ebalard)
o ISAKMP SA (phase1) rekeying
o Improved scheduler (faster algorithm, support monotonic clock)
o Handle RESPONDER-LIFETIME in quick mode
o Handle INITIAL-CONTACT in from main mode too
o Rewritten event handling framework for admin port
o Ability to initiate IPsec SA through admin port
o NAT-T Original Address handling (transport mode NAT-T support)
o clean NAT-T - PFkey support
o support for multiple anonymous remoteconfs
o Remove various obsolete configuration options
o A lot of other bug fixes, performance improvements and clean ups
- Remove ipsec-tools-linux-3.7-compat.diff which caused bnc#867055
by including wrong headers; fix by installing
linux-glibc-devel and including /usr/include for kernel headers

Thu Sep 19 14:00:00 2013 crrodriguezAATTopensuse.org
- remove unused racoon.init from the package, it was
already removed from the spec file in the previous change.

Thu Sep 19 14:00:00 2013 crrodriguezAATTopensuse.org
- Add systemd support, systemctl enable racoon.service
also enables helper optional service racoon-setkey
- /etc/sysconfig/racoon was never created, fix that.

Thu Jan 31 13:00:00 2013 mlinAATTsuse.com
- Add ipsec-tools-linux-3.7-compat.diff(partly from openwrt)

* since pfkeyv2.h moved to include/uapi/linux as
http://lwn.net/Articles/507794/ explained, make the compiler found
header in valid path. there is a discussion about this issue at
https://dev.openwrt.org/ticket/12813

Wed Oct 31 13:00:00 2012 mvyskocilAATTsuse.com
- unify the permissions of psk.txt to avoid false duplicate warnings
from fdupes (bnc#784670)

Tue Jan 31 13:00:00 2012 meissnerAATTsuse.de
- remove suse_update_config macro usage

Sat Oct 15 14:00:00 2011 cooloAATTsuse.com
- add libtool as buildrequire to make the spec file more reliable

Sun Sep 4 14:00:00 2011 mkubecekAATTsuse.cz
- create /var/run/racoon in the init script rather than including
it in the package as it doesn\'t work if /var/run is on tmpfs
(bnc#710277)

Sun May 15 14:00:00 2011 chrisAATTcomputersalat.de
- remove Author from description
- add racoon.psk patch

Wed May 4 14:00:00 2011 idoenmezAATTnovell.com
- Add ipsec-tools-0.7.3-linkerflag.patch: remove wrong linker flag
- Add ipsec-tools-0.7.2-nodevel.patch: don\'t install development
files, instead of manually removing them in the spec file.
- Drop no_werror.patch: Remove Werror flag by sed, its all over the
configure file, old patch was incomplete anyway.

Tue Nov 3 13:00:00 2009 cooloAATTnovell.com
- updated patches to apply with fuzz=0

Tue Oct 6 14:00:00 2009 chrisAATTcomputersalat.de
- cleanup spec
o sorted sections
o simplify clean
o sort install section
o sort files section
- added missing /etc/racoon/cert DIR

Fri Sep 18 14:00:00 2009 chrisAATTcomputersalat.de
- cleanup spec
o sorted TAGS
o added configure macro
- rpmlint
o added fdupes
- fix selinux build
o if suse_version >= 1100

Thu Jun 11 14:00:00 2009 jbohacAATTsuse.cz
- upgrade to 0.7.3
- integrated security patch
- enabled selinux support (--enable-security-context=yes)

Thu Jun 11 14:00:00 2009 jbohacAATTsuse.cz
- fix_sockaddr_overflow_in_ipsec_doi.c.diff (bnc#506710)

Wed May 6 14:00:00 2009 jbohacAATTsuse.cz
- Upgrade to 0.7.2
- fixed some rpmlint warnings/errors
- racoon.conf_macros.patch updates the .in file, not the result
- added /etc/pam.d/racoon
- added --with-libldap