From a3193a92b0f6abc570cb0731a91b24c3a22aa21e Mon Sep 17 00:00:00 2001
From: Franco Fichtner <franco@opnsense.org>
Date: Wed, 18 Jun 2025 16:24:46 +0200
Subject: [PATCH] security: add OpenVPN and IPsec (Strongswan) legacy plugins

No content yet to make the backport easier.
---
 README.md                            | 4 +++-
 security/openvpn-legacy/Makefile     | 9 +++++++++
 security/openvpn-legacy/pkg-descr    | 1 +
 security/strongswan-legacy/Makefile  | 9 +++++++++
 security/strongswan-legacy/pkg-descr | 1 +
 5 files changed, 23 insertions(+), 1 deletion(-)
 create mode 100644 security/openvpn-legacy/Makefile
 create mode 100644 security/openvpn-legacy/pkg-descr
 create mode 100644 security/strongswan-legacy/Makefile
 create mode 100644 security/strongswan-legacy/pkg-descr

diff --git a/README.md b/README.md
index fd94485a8..c1bd79810 100644
--- a/README.md
+++ b/README.md
@@ -88,7 +88,9 @@ security/intrusion-detection-content-pt-open -- IDS Positive Technologies ESC ru
 security/intrusion-detection-content-snort-vrt -- IDS Snort VRT ruleset (needs registration or subscription)
 security/maltrail -- Malicious traffic detection system
 security/openconnect -- OpenConnect Client
+security/openvpn-legacy -- OpenVPN legacy support (development only)
 security/softether -- Cross-platform Multi-protocol VPN Program (development only)
+security/strongswan-legacy -- IPsec legacy support (development only)
 security/stunnel -- Stunnel TLS proxy
 security/tailscale -- VPN mesh securely connecting clients using WireGuard
 security/tinc -- Tinc VPN
@@ -115,7 +117,7 @@ sysutils/smart -- SMART tools
 sysutils/virtualbox -- VirtualBox guest additions
 sysutils/vmware -- VMware tools
 sysutils/xen -- Xen guest utilities
-vendor/sunnyvalley -- Vendor Repository for Zenarmor (a.k.a Sensei, Next Generation Firewall Extensions)
+vendor/sunnyvalley -- Vendor Repository for Zenarmor (Enterprise Security Modules - NGFW, SSE, SASE, f.k.a Sensei)
 www/OPNProxy -- OPNsense proxy additions
 www/c-icap -- c-icap connects the web proxy with a virus scanner
 www/cache -- Webserver cache
diff --git a/security/openvpn-legacy/Makefile b/security/openvpn-legacy/Makefile
new file mode 100644
index 000000000..2d4fb4c6f
--- /dev/null
+++ b/security/openvpn-legacy/Makefile
@@ -0,0 +1,9 @@
+PLUGIN_NAME=		openvpn-legacy
+PLUGIN_VERSION=		0.1
+PLUGIN_COMMENT=		OpenVPN legacy support
+PLUGIN_DEPENDS=		# openvpn
+PLUGIN_DEVEL=		yes
+PLUGIN_MAINTAINER=	ad@opnsense.org
+PLUGIN_TIER=		2
+
+.include "../../Mk/plugins.mk"
diff --git a/security/openvpn-legacy/pkg-descr b/security/openvpn-legacy/pkg-descr
new file mode 100644
index 000000000..aba0dbd28
--- /dev/null
+++ b/security/openvpn-legacy/pkg-descr
@@ -0,0 +1 @@
+This plugin adds the legacy OpenVPN server/client configuration pages.
diff --git a/security/strongswan-legacy/Makefile b/security/strongswan-legacy/Makefile
new file mode 100644
index 000000000..a2f7792d0
--- /dev/null
+++ b/security/strongswan-legacy/Makefile
@@ -0,0 +1,9 @@
+PLUGIN_NAME=		strongswan-legacy
+PLUGIN_VERSION=		0.1
+PLUGIN_COMMENT=		IPsec legacy support
+PLUGIN_DEPENDS=		# strongswan
+PLUGIN_DEVEL=		yes
+PLUGIN_MAINTAINER=	ad@opnsense.org
+PLUGIN_TIER=		2
+
+.include "../../Mk/plugins.mk"
diff --git a/security/strongswan-legacy/pkg-descr b/security/strongswan-legacy/pkg-descr
new file mode 100644
index 000000000..4d829ceb3
--- /dev/null
+++ b/security/strongswan-legacy/pkg-descr
@@ -0,0 +1 @@
+This plugin adds the legacy IPsec tunnel and mobile configuration pages.