git: 28b521d90f3c - 2026Q3 - security/strongswan: Update 6.0.7 => 6.1.0

From: R. Christian McDonald <rcm_at_FreeBSD.org>
Date: Sun, 13 Sep 2026 19:39:36 UTC
The branch 2026Q3 has been updated by rcm:

URL: https://cgit.FreeBSD.org/ports/commit/?id=28b521d90f3c9c0e9d1d4358239e0f9252a5148f

commit 28b521d90f3c9c0e9d1d4358239e0f9252a5148f
Author:     R. Christian McDonald <rcm@FreeBSD.org>
AuthorDate: 2026-09-13 19:20:59 +0000
Commit:     R. Christian McDonald <rcm@FreeBSD.org>
CommitDate: 2026-09-13 19:39:11 +0000

    security/strongswan: Update 6.0.7 => 6.1.0
    
    Changelog:
    https://github.com/strongswan/strongswan/releases/tag/6.1.0
    
    PR:             298372
    MFH:            2026Q3
    Security:       CVE-2026-78123
    Security:       CVE-2026-78124
    Security:       CVE-2026-78126
    Security:       CVE-2026-78127
    Security:       CVE-2026-78129
    Security:       CVE-2026-78130
    Security:       CVE-2026-78131
    Security:       CVE-2026-78132
    Security:       CVE-2026-78133
    Security:       CVE-2026-78134
    Security:       CVE-2026-78135
    Sponsored by:   Rubicon Communications, LLC ("Netgate")
    
    (cherry picked from commit 5a7f75878c1b8dabb3b333f523eba2c1c958ed8a)
---
 security/strongswan/Makefile                       |  4 ++--
 security/strongswan/distinfo                       |  6 +++---
 security/strongswan/files/patch-conf_Makefile.in   |  4 ++--
 .../files/patch-src_libcharon_plugins_smp_smp.c    | 23 ----------------------
 security/strongswan/pkg-plist                      |  5 -----
 5 files changed, 7 insertions(+), 35 deletions(-)

diff --git a/security/strongswan/Makefile b/security/strongswan/Makefile
index fdcbfe736c64..0152cb1114df 100644
--- a/security/strongswan/Makefile
+++ b/security/strongswan/Makefile
@@ -1,5 +1,5 @@
 PORTNAME=	strongswan
-DISTVERSION=	6.0.7
+DISTVERSION=	6.1.0
 CATEGORIES=	security net-vpn
 MASTER_SITES=	https://download.strongswan.org/ \
 		https://download2.strongswan.org/
@@ -103,7 +103,7 @@ EAPSIMFILE_CONFIGURE_ON=	--enable-eap-sim \
 FARP_CONFIGURE_ON=		--enable-farp
 FIPS_PRF_CONFIGURE_ON=		--enable-fips-prf
 GCM_CONFIGURE_ON=		--enable-gcm
-IKEV1_CONFIGURE_OFF=		--disable-ikev1
+IKEV1_CONFIGURE_ON=		--enable-ikev1
 IPSECKEY_CONFIGURE_ON=		--enable-ipseckey
 KDF_CONFIGURE_ON=		--enable-kdf
 KERNELLIBIPSEC_CONFIGURE_ON=	--enable-kernel-libipsec
diff --git a/security/strongswan/distinfo b/security/strongswan/distinfo
index 54be35770c69..fd3c047b8a90 100644
--- a/security/strongswan/distinfo
+++ b/security/strongswan/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1780929769
-SHA256 (strongswan-6.0.7.tar.bz2) = e518e34e159514f4c6ba80d1f926cb151e0dd4e3a1d94213171234b8b9ae6f55
-SIZE (strongswan-6.0.7.tar.bz2) = 4939164
+TIMESTAMP = 1789061339
+SHA256 (strongswan-6.1.0.tar.bz2) = fe6c97481298767213cfc2e9a1da29fdd8018d481ff4cb9cf0283099654f20d4
+SIZE (strongswan-6.1.0.tar.bz2) = 4620545
diff --git a/security/strongswan/files/patch-conf_Makefile.in b/security/strongswan/files/patch-conf_Makefile.in
index 53d4283d3e94..cbd67f3c4533 100644
--- a/security/strongswan/files/patch-conf_Makefile.in
+++ b/security/strongswan/files/patch-conf_Makefile.in
@@ -1,6 +1,6 @@
---- conf/Makefile.in.orig	2026-03-23 12:42:09 UTC
+--- conf/Makefile.in.orig	2026-09-10 17:39:46 UTC
 +++ conf/Makefile.in
-@@ -931,25 +931,25 @@ install-data-local: $(plugins_install_src)
+@@ -919,25 +919,25 @@ install-data-local: $(plugins_install_src)
  	test -e "$(DESTDIR)${charonconfdir}" || test -z "${charon_install_src}" || $(INSTALL) -d "$(DESTDIR)$(charonconfdir)" || true
  	test -e "$(DESTDIR)${cmdconfdir}" || test -z "${cmd_install_src}" || $(INSTALL) -d "$(DESTDIR)$(cmdconfdir)" || true
  	test -e "$(DESTDIR)${nmconfdir}" || test -z "${nm_install_src}" || $(INSTALL) -d "$(DESTDIR)$(nmconfdir)" || true
diff --git a/security/strongswan/files/patch-src_libcharon_plugins_smp_smp.c b/security/strongswan/files/patch-src_libcharon_plugins_smp_smp.c
deleted file mode 100644
index 0c57dc92e0cc..000000000000
--- a/security/strongswan/files/patch-src_libcharon_plugins_smp_smp.c
+++ /dev/null
@@ -1,23 +0,0 @@
---- src/libcharon/plugins/smp/smp.c.orig	2025-11-07 19:05:36 UTC
-+++ src/libcharon/plugins/smp/smp.c
-@@ -743,7 +743,7 @@ PLUGIN_DEFINE(smp)
-  */
- PLUGIN_DEFINE(smp)
- {
--	struct sockaddr_un unix_addr = { AF_UNIX, IPSEC_PIDDIR "/charon.xml"};
-+	struct sockaddr_un unix_addr;
- 	private_smp_t *this;
- 	mode_t old;
- 
-@@ -771,6 +771,11 @@ PLUGIN_DEFINE(smp)
- 		free(this);
- 		return NULL;
- 	}
-+
-+	strlcpy(unix_addr.sun_path, IPSEC_PIDDIR "/charon.xml",
-+	    sizeof(unix_addr.sun_path));
-+	unix_addr.sun_len = sizeof(unix_addr);
-+	unix_addr.sun_family = PF_LOCAL;
- 
- 	unlink(unix_addr.sun_path);
- 	old = umask(S_IRWXO);
diff --git a/security/strongswan/pkg-plist b/security/strongswan/pkg-plist
index d7cb7ca22130..9820d7f8ddf2 100644
--- a/security/strongswan/pkg-plist
+++ b/security/strongswan/pkg-plist
@@ -2,7 +2,6 @@
 %%TPM%%bin/tpm_extendpcr
 @sample %%ETCDIR%%.conf.sample
 @sample %%ETCDIR%%.d/charon-cmd.conf.sample
-@sample %%ETCDIR%%.d/charon-cmd/blowfish.conf.sample
 @sample %%ETCDIR%%.d/charon-cmd/cmac.conf.sample
 @sample %%ETCDIR%%.d/charon-cmd/constraints.conf.sample
 %%CTR%%@sample %%ETCDIR%%.d/charon-cmd/ctr.conf.sample
@@ -47,7 +46,6 @@
 @sample %%ETCDIR%%.d/charon/addrblock.conf.sample
 %%SQL%%@sample %%ETCDIR%%.d/charon/attr-sql.conf.sample
 @sample %%ETCDIR%%.d/charon/attr.conf.sample
-@sample %%ETCDIR%%.d/charon/blowfish.conf.sample
 @sample %%ETCDIR%%.d/charon/cmac.conf.sample
 @sample %%ETCDIR%%.d/charon/constraints.conf.sample
 @sample %%ETCDIR%%.d/charon/counters.conf.sample
@@ -161,8 +159,6 @@ lib/ipsec/plugins/libstrongswan-addrblock.so
 %%SQL%%lib/ipsec/plugins/libstrongswan-attr-sql.so
 lib/ipsec/plugins/libstrongswan-attr.la
 lib/ipsec/plugins/libstrongswan-attr.so
-lib/ipsec/plugins/libstrongswan-blowfish.la
-lib/ipsec/plugins/libstrongswan-blowfish.so
 lib/ipsec/plugins/libstrongswan-cmac.la
 lib/ipsec/plugins/libstrongswan-cmac.so
 lib/ipsec/plugins/libstrongswan-constraints.la
@@ -333,7 +329,6 @@ sbin/charon-cmd
 %%DATADIR%%/templates/config/plugins/addrblock.conf
 %%SQL%%%%DATADIR%%/templates/config/plugins/attr-sql.conf
 %%DATADIR%%/templates/config/plugins/attr.conf
-%%DATADIR%%/templates/config/plugins/blowfish.conf
 %%DATADIR%%/templates/config/plugins/cmac.conf
 %%DATADIR%%/templates/config/plugins/constraints.conf
 %%DATADIR%%/templates/config/plugins/counters.conf