Arch Linux User Repository

Hi,

The company I work for offers VPN access for Linux clients with the shrew client. However, I'm kinda hesitant to use it though as it seems the application has not had any update since many years. Is there a different VPN client that might support the same functionality? By the way, it needs to have support for smartcards.

I'm still using this everyday, so I adopt it. Thanks.

Feel free to adopt this package, I don't use it any more.

To build shrew, you can use this patch:

$ diff -u PKGBUILD_old PKGBUILD
--- PKGBUILD_old    2018-11-02 23:49:04.959031284 +0100
+++ PKGBUILD    2018-11-03 00:28:14.839051888 +0100
@@ -3,12 +3,12 @@

 pkgname=shrew-vpn-client
 pkgver=2.2.1
-pkgrel=2
+pkgrel=3
 pkgdesc="A portable VPN client for Linux with Qt GUI"
 arch=('i686' 'x86_64')
 url="http://www.shrew.net/"
 license=('osi')
-depends=('qt4' 'openssl')
+depends=('qt4' 'openssl-1.0')
 makedepends=('gcc' 'flex' 'libedit' 'bison' 'cmake')
 optdepends=('openldap' 'logrotate')
 conflicts=('shrew-vpn-client-alpha')
@@ -16,11 +16,20 @@
 source=("http://www.shrew.net/download/ike/ike-$pkgver-release.tbz2"
    'ikea.desktop'
    'iked.conf'
-   'iked.service')
+   'iked.service'
+   fix-openssl.patch)
 md5sums=('8fc14ac86771ee693d3950757c84f335'
          '5b35a4246eb1b7bd4bfb6780c23d39f2'
          '3cfe649578267235d60ab7cfb6fb4c57'
-         'e90d5922d37f9e45515c5754a3a29c73')
+         'e90d5922d37f9e45515c5754a3a29c73'
+         'c1f793c174db5d7f5c11c8009a967a4d')
+
+prepare() {
+
+  cd $srcdir/ike
+  patch -Np1 -i ../fix-openssl.patch
+
+}

 build() {
   cd $srcdir/ike

$ cat fix-openssl.patch 
diff --git a/CMakeLists.txt b/CMakeLists.txt
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -25,6 +25,7 @@ add_definitions( -DUNIX )

 include( CheckCSourceCompiles )
 include( CheckLibraryExists )
+include_directories(BEFORE SYSTEM "/usr/include/openssl-1.0")

 set(
    RELVER "2.2.1" )
@@ -270,7 +271,7 @@ endif( NOT PATH_INC_CRYPTO )

 find_library(
    PATH_LIB_CRYPTO
-   NAMES "crypto"
+   NAMES "libcrypto.so.1.0.0"
    PATHS ${SEARCH_LIB} )

 if( NOT PATH_LIB_CRYPTO )
diff --git a/source/ikec/CMakeLists.txt b/source/ikec/CMakeLists.txt
--- a/source/ikec/CMakeLists.txt
+++ b/source/ikec/CMakeLists.txt
@@ -32,7 +32,7 @@ target_link_libraries(
    ss_idb
    ss_ith
    ss_log
-   crypto
+   ${PATH_LIB_CRYPTO}
    pthread
    edit )

diff --git a/source/iked/CMakeLists.txt b/source/iked/CMakeLists.txt
--- a/source/iked/CMakeLists.txt
+++ b/source/iked/CMakeLists.txt
@@ -73,7 +73,7 @@ target_link_libraries(
    ss_ip
    ss_log
    ss_pfk
-   crypto
+   ${PATH_LIB_CRYPTO}
    pthread )

 if( FUNC_LIB_CRYPT )
diff --git a/source/libike/CMakeLists.txt b/source/libike/CMakeLists.txt
--- a/source/libike/CMakeLists.txt
+++ b/source/libike/CMakeLists.txt
@@ -29,7 +29,7 @@ target_link_libraries(
    ss_ike
    ss_idb
    ss_ith
-   crypto )
+   ${PATH_LIB_CRYPTO} )

 set_target_properties(
    ss_ike PROPERTIES
diff --git a/source/qikea/CMakeLists.txt b/source/qikea/CMakeLists.txt
--- a/source/qikea/CMakeLists.txt
+++ b/source/qikea/CMakeLists.txt
@@ -55,7 +55,7 @@ target_link_libraries(
    ss_idb
    ss_ith
    ss_log
-   crypto
+   ${PATH_LIB_CRYPTO}
    pthread
    ${QT_LIBRARIES} )

diff --git a/source/qikec/CMakeLists.txt b/source/qikec/CMakeLists.txt
--- a/source/qikec/CMakeLists.txt
+++ b/source/qikec/CMakeLists.txt
@@ -53,7 +53,7 @@ target_link_libraries(
    ss_idb
    ss_ith
    ss_log
-   crypto
+   ${PATH_LIB_CRYPTO}
    pthread
    ${QT_LIBRARIES} )

-- 
2.12.2

Maybe this is useful for someone: You can still using the ike daemon to connect to your remote location if you have the old config file backed up (file path: $home/.ike/sites/x.x.x.x ). -First , install ike from aur and skip the shrew GUI installation. -Copy the config file on that sites folder (x.x.x.x), asign a name that you want. -Run ike client from terminal: qikec -r x.x.x.x It will launch a popup asking for credential (I assume you are using psk + xauth) You can create a launcher with above command. :)

Sadly, I can connect to my office vpn only with shrew, vpnc doesn't help. Thank you though, for your work!

Hmm, I'd almost say this project is dead. The last update was published on 05-06-2013 and I for one have switched to vpnc, which still works nicely. If nobody wants to adopt this package, I'll remove it from AUR by the end of this week.

Cannot be compiled anymore: # shrew-vpn-client/src/ike/source/libike/manager.file.cpp:682:19: error: aggregate ‘EVP_CIPHER_CTX ctx_cipher’ has incomplete type and cannot be defined EVP_CIPHER_CTX ctx_cipher; ^~~~~~~~~~

Thanks guys, package has been updated.

iked.service should not be executable.