libreswan-5: update to v5.2 (Feb 26, 2025)

[Andrew Cagney (via pkgsrc-wip) <commit-notify%pkgsrc.org@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Andrew Cagney <andrew.cagney%gmail.com@localhost>
Pushed By:	cagney
Date:		Thu Feb 27 01:00:07 2025 +0000
Changeset:	442b0fd300ed6dab384a04d83798f502284bdfc3

Modified Files:
	libreswan-5/Makefile
	libreswan-5/distinfo

Log Message:
libreswan-5: update to v5.2 (Feb 26, 2025)

* IKEv2:
  - add PPK in INTERMEDIATE exchange, draft-ietf-ipsecme-ikev2-qr-alt-04 [Vukasin]
  - add initial support for RFC 5723 IKE_SESSION_RESUME [Nupur Agrawal, Andrew]
  - fix crash in <<ipsec rereadsecrets>> [Andrew, Ilya Maximets #1894]
  - fix bogus ERROR when deleting connection [Andrew, Ilya Maximets #1914]
* IPsec Interface:
  - add support on FreeBSD, NetBSD and OpenBSD [Andrew]
  - add ipsec-interface-managed=no for namespaces [Andrew]
* IKEv1:
  - removed compile-time SOFTREMOTE_CLIENT_WORKAROUND [Andrew]
  - fix INVALID_ID_INFORMATION response using corrupt IV [Andrew #1830]
  - fix reconnect with addresspool after restart [Andrew #1790]
  - fix padding of modecfg payloads [Andrew wmasilva #2023]
  - update ikepad= to allow {yes,no,auto} [Andrew]
* Linux:
  - packet offload counters supported in 6.7+ [Paul]
  - Add IPTFS support (RFC 9347) [Paul / Antony / Andrew]
  - 6.10+ need replay-window 0 on OUTBOUND SA [Paul]
  - Do not set nopmtudisc on inbound SA [Paul]
  - Set DSCP options only on the relevant direction SA [Paul]
* updown:
  - Use half-routes for IPv6 to cover whole address space #1994 [Tuomo]
  - Use sourceip= for all remote subnets when set [Tuomo]
* whack/addconn:
  - fix "duplicated flag ctlsocket" regression in 5.0 #1840 [Andrew, Ilya Maximets #1840]
  - orders of magnitude speedup of 'ipsec add' w/ protoports= [Ilya Maximets #1987]
* building:
  - fix build with USE_LIBCURL=false [Hans de Graaff #1845, Andrew]
  - fix build on OpenBSD 7.6 [Andrew]
  - fix build with GCC 15 / C 23 [Daiki Ueno]
  - fix init script on Alpine [Andrew #2042]
* testing:
  - update OpenBSD: 7.6; NetBSD: 10.1; FreeBSD: 14.2; Alpine: 3.21 [Andrew]
  - eliminate pyOpenSSL dependency when generating CRLs and PKCS12 files [Andrew #1990 #1996]

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=442b0fd300ed6dab384a04d83798f502284bdfc3

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 libreswan-5/Makefile | 2 +-
 libreswan-5/distinfo | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)

diffs:
diff --git a/libreswan-5/Makefile b/libreswan-5/Makefile
index 25dd843d3d..dc8add68dd 100644
--- a/libreswan-5/Makefile
+++ b/libreswan-5/Makefile
@@ -15,7 +15,7 @@
 #
 # libreswan: 5.0 5.0nb1 ...
 
-DISTNAME=	libreswan-5.1
+DISTNAME=	libreswan-5.2
 MASTER_SITES=   https://download.libreswan.org/
 
 CATEGORIES=	security
diff --git a/libreswan-5/distinfo b/libreswan-5/distinfo
index efc353891b..ff42f354ce 100644
--- a/libreswan-5/distinfo
+++ b/libreswan-5/distinfo
@@ -1,5 +1,5 @@
 $NetBSD$
 
-BLAKE2s (libreswan-5.1.tar.gz) = 7f2cb02367d6a3cb27c4b73ab48f30ec7e67641d1ecfd2df116c6d1318a6c242
-SHA512 (libreswan-5.1.tar.gz) = 9ee8b071be414737c61529420af22b789d8968e99e376250afe42e1a5890d864dc2697ecfeb33a6c50de38a361bddf125852a8eb86318e544fc2f162f8ff6522
-Size (libreswan-5.1.tar.gz) = 4031106 bytes
+BLAKE2s (libreswan-5.2.tar.gz) = ecb889c97a18b2f5acb945c11e73993720dd3682fa2c59a2e56901feb0f8c2ac
+SHA512 (libreswan-5.2.tar.gz) = 5c87edc879914158ba9c4c2a0edcd6fac0787b16d3c6a50c268cbd675c51cdec94e509031bc226680c0d40bd3375d73007cae5ee0588c136292e3f34cb759694
+Size (libreswan-5.2.tar.gz) = 4132199 bytes