strongswan-ikev1

LOW

maintainer deu439 0 votes scanned 2026-09-14 15:19:29.115551

View on AUR

Why flagged

Package builds strongswan from its official download server (download.strongswan.org) with a valid PGP signature check; the only flag is the non-whitelisted host which is actually the project's own official distribution server, making this a normal AUR build with no malicious behavior.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 85%): Package builds strongswan from its official download server (download.strongswan.org) with a valid PGP signature check; the only flag is the non-whitelisted host which is actually the project's own official distribution server, making this a normal AUR build with no malicious behavior.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:41 source=("https://download.strongswan.org/strongswan-${pkgver}.tar.bz2"{,.sig})

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer : Jan Dorazil <doraz.jan@gmail.com>
    
      2# Maintainer : Christian Rebischke <Chris.Rebischke@archlinux.org>
    
      3# Contributor: dkorzhevin <dkorzhevin at gmail dot com>
    
      4# Contributor: Thermi <noel [at] familie-kuntze dot de>
    
      5# Contributor: nikicat <develniks at gmail dot com>
    
      6# Contributor: danilo <gezuru at gmail dot com>
    
      7# Contributor: Jason Begley <jayray at digitalgoat dot com>
    
      8# Contributor: Ray Kohler <ataraxia937 at gmail dot com>
    
      9# Contributor: Daniel Riedemann <daniel.riedemann [at] googlemail [dot] com>
    
      10# Contributor: 458italia <svenskaparadox [at] gmail dot com>
    
      11# Contributor: Thermi <noel [at] familie-kuntze dot com>
    
      12
    
      13pkgname=strongswan-ikev1
    
      14pkgver=6.1.0
    
      15provides=("strongswan=$pkgver")
    
      16conflicts=('strongswan')
    
      17pkgrel=2
    
      18pkgdesc='Open source IPsec implementation (with deprecated ikev1 protocol implementation)'
    
      19url='https://www.strongswan.org'
    
      20license=('GPL-2.0-only')
    
      21arch=('x86_64')
    
      22makedepends=('libnm' 'systemd' 'ruby' 'ruby-rdoc' 'mariadb' 'python-build' 'python-installer' 'python-setuptools' 'python-wheel')
    
      23depends=('curl' 'gmp' 'iproute2' 'openssl' 'sqlite' 'libcap' 'systemd-libs' 'pam')
    
      24optdepends=(
    
      25  'libnm: for networkmanager support'
    
      26  'mariadb: MySQL support'
    
      27  'ruby: Ruby support'
    
      28  'python: Python support'
    
      29  'resolvconf: Resolveplugin'
    
      30  'openldap: LDAP support'
    
      31)
    
      32# TODO: move to package() and use find
    
      33backup=(
    
      34  etc/ipsec.conf
    
      35  etc/ipsec.secrets
    
      36  etc/swanctl/swanctl.conf
    
      37  etc/strongswan.conf
    
      38  etc/strongswan.d/{charon-logging.conf,charon-nm.conf,charon-systemd.conf,charon.conf,pki.conf,pool.conf,starter.conf,swanctl.conf}
    
      39  etc/strongswan.d/charon/{aesni.conf,agent.conf,attr-sql.conf,attr.conf,bypass-lan.conf,chapoly.conf,cmac.conf,connmark.conf,constraints.conf,counters.conf,curl.conf,dhcp.conf,dnscert.conf,dnskey.conf,drbg.conf,eap-aka-3gpp2.conf,eap-aka.conf,eap-dynamic.conf,eap-gtc.conf,eap-identity.conf,eap-md5.conf,eap-mschapv2.conf,eap-peap.conf,eap-radius.conf,eap-sim-file.conf,eap-sim.conf,eap-simaka-pseudonym.conf,eap-simaka-reauth.conf,eap-tls.conf,eap-ttls.conf,ext-auth.conf,farp.conf,fips-prf.conf,forecast.conf,gmp.conf,ha.conf,kdf.conf,kernel-netlink.conf,ldap.conf,mgf1.conf,ml.conf,mysql.conf,nonce.conf,openssl.conf,pem.conf,pgp.conf,pkcs1.conf,pkcs11.conf,pkcs7.conf,pkcs8.conf,pubkey.conf,radattr.conf,random.conf,resolve.conf,revocation.conf,sha3.conf,socket-default.conf,sql.conf,sqlite.conf,sshkey.conf,stroke.conf,unity.conf,updown.conf,vici.conf,x509.conf,xauth-eap.conf,xauth-noauth.conf,xauth-pam.conf,xcbc.conf}
    
      40)
    
      41source=("https://download.strongswan.org/strongswan-${pkgver}.tar.bz2"{,.sig})
    
      42validpgpkeys=("948F158A4E76A27BF3D07532DF42C170B34DBA77")
    
      43sha512sums=('01cea929cea2535751b5ef23eddc780a3c32ffafee640a6d5cea9a52798d0ec7030107463e8ddcc73fd0924b378a8676942297a42d79319207ecf7716badcb5f'
    
      44            'SKIP')
    
      45
    
      46prepare() {
    
      47  cd strongswan-${pkgver}
    
      48  sed -i 's/$(PYTHON) -m build/$(PYTHON) -m build --wheel --no-isolation/' src/libcharon/plugins/vici/python/Makefile.am
    
      49  autoreconf -fiv
    
      50}
    
      51
    
      52build() {
    
      53  local _confflags=(
    
      54    --libexecdir=/usr/lib
    
      55    --prefix=/usr
    
      56    --sbindir=/usr/bin
    
      57    --sysconfdir=/etc
    
      58    --with-capabilities=libcap
    
      59    --with-ipsecdir=/usr/lib/strongswan
    
      60    --with-nm-ca-dir=/etc/ssl/certs
    
      61    --enable-aesni
    
      62    --enable-agent
    
      63    --enable-attr-sql
    
      64    --enable-bypass-lan
    
      65    --enable-chapoly
    
      66    --enable-cmd
    
      67    --enable-connmark
    
      68    --enable-curl
    
      69    --enable-dhcp
    
      70    --enable-dnscert
    
      71    --enable-eap-aka
    
      72    --enable-eap-aka-3gpp2
    
      73    --enable-eap-dynamic
    
      74    --enable-eap-gtc
    
      75    --enable-eap-identity
    
      76    --enable-eap-md5
    
      77    --enable-eap-mschapv2
    
      78    --enable-eap-peap
    
      79    --enable-eap-radius
    
      80    --enable-eap-sim
    
      81    --enable-eap-simaka-pseudonym
    
      82    --enable-eap-simaka-reauth
    
      83    --enable-eap-sim-file
    
      84    --enable-eap-tls
    
      85    --enable-eap-ttls
    
      86    --enable-ext-auth
    
      87    --enable-farp
    
      88    --enable-forecast
    
      89    --enable-ha
    
      90    --enable-integrity-test
    
      91    --enable-ldap
    
      92    --enable-mgf1
    
      93    --enable-ml
    
      94    --enable-mysql
    
      95    --enable-nm
    
      96    --enable-openssl
    
      97    --enable-pkcs11
    
      98    --enable-python-wheels
    
      99    --enable-radattr
    
      100    --enable-ruby-gems
    
      101    --enable-ruby-gems-install
    
      102    --enable-sha3
    
      103    --enable-sql
    
      104    --enable-sqlite
    
      105    --enable-stroke
    
      106    --enable-swanctl
    
      107    --enable-systemd
    
      108    --enable-unity
    
      109    --enable-vici
    
      110    --enable-xauth-eap
    
      111    --enable-xauth-noauth
    
      112    --enable-xauth-pam
    
      113    --enable-ikev1
    
      114  )
    
      115  cd strongswan-${pkgver}
    
      116  ./configure "${_confflags[@]:?_confflags unset}"
    
      117  make
    
      118}
    
      119
    
      120package() {
    
      121  local _gemdir="$(gem env gemdir)"
    
      122
    
      123  cd strongswan-${pkgver}
    
      124  make DESTDIR="${pkgdir}" install
    
      125
    
      126  python -m installer --destdir="$pkgdir" src/libcharon/plugins/vici/python/dist/*.whl
    
      127
    
      128  # remove unrepreducible files
    
      129  rm -r "${pkgdir}"/${_gemdir}/cache/
    
      130}
    
      131

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-14 15:19:29	Low	3
2026-09-14 15:17:35	Medium	2