Add Debian 7 workaround script

README-zh.md

@@ -31,7 +31,7 @@
 一个专用服务器，或者基于 KVM/Xen 的虚拟专用服务器 (VPS)，全新安装:   
 - Ubuntu 16.04 (Xenial), 14.04 (Trusty) or 12.04 (Precise)
 - Debian 8 (Jessie)
-- Debian 7 (Wheezy) &raquo; 不推荐。必须先运行<a href="https://gist.github.com/hwdsl2/5a769b2c4436cdf02a90" target="_blank">另一个脚本</a>。
+- Debian 7 (Wheezy) &raquo; 不推荐。必须先运行<a href="extras/vpnsetup-debian-7-workaround.sh" target="_blank">另一个脚本</a>。
 - CentOS / Red Hat Enterprise Linux (RHEL) 6 or 7
 
 OpenVZ VPS 用户请使用其它的 VPN 软件，比如 <a href="https://github.com/Nyr/openvpn-install" target="_blank">Nyr 的 OpenVPN 脚本</a>。

README.md

@@ -30,7 +30,7 @@ A newly created <a href="https://aws.amazon.com/ec2/" target="_blank">Amazon EC2
 A dedicated server or KVM/Xen-based Virtual Private Server (VPS), with freshly installed:   
 - Ubuntu 16.04 (Xenial), 14.04 (Trusty) or 12.04 (Precise)
 - Debian 8 (Jessie)
-- Debian 7 (Wheezy) &raquo; Not recommended. Requires <a href="https://gist.github.com/hwdsl2/5a769b2c4436cdf02a90" target="_blank">this workaround</a> to work.
+- Debian 7 (Wheezy) &raquo; Not recommended. Requires <a href="extras/vpnsetup-debian-7-workaround.sh" target="_blank">this workaround</a> to work.
 - CentOS / Red Hat Enterprise Linux (RHEL) 6 or 7
 
 OpenVZ VPS users should instead try <a href="https://github.com/Nyr/openvpn-install" target="_blank">Nyr's OpenVPN script</a>.

extras/vpnsetup-debian-7-workaround.sh

@@ -0,0 +1,77 @@
+#!/bin/sh
+#
+# Debian 7 (Wheezy) does NOT have the required libnss version (>= 3.16) for Libreswan.
+# This script provides a workaround by installing newer packages from download.libreswan.org.
+# Debian 7 users: Run this script first, before using my VPN setup script (vpnsetup.sh).
+#
+# IMPORTANT NOTE:
+# These newer packages may not have the latest security updates compared to official Debian packages.
+# They could contain unpatched security vulnerabilities. Use them at your own risk!
+#
+# Copyright (C) 2015 Lin Song
+#
+# This program is free software: you can redistribute it and/or modify it under
+# the terms of the GNU General Public License as published by the Free Software
+# Foundation, either version 3 of the License, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful, but WITHOUT ANY
+# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A
+# PARTICULAR PURPOSE. See the GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License along with
+# this program. If not, see http://www.gnu.org/licenses/.
+
+if [ "$(sed 's/\..*//' /etc/debian_version 2>/dev/null)" != "7" ]; then
+  echo "This script only supports Debian 7 (Wheezy)."
+  exit 1
+fi
+
+if [ "$(uname -m)" != "x86_64" ]; then
+  echo "This script only supports 64-bit Debian 7."
+  exit 1
+fi
+
+if [ "$(id -u)" != 0 ]; then
+  echo "Script must be run as root. Try 'sudo sh $0'"
+  exit 1
+fi
+
+# Create and change to working dir
+mkdir -p /opt/src
+cd /opt/src || { echo "Failed to change directory to /opt/src. Aborting."; exit 1; }
+
+# Update package index and install wget
+export DEBIAN_FRONTEND=noninteractive
+apt-get -y update
+apt-get -y install wget
+
+# Install newer libnss/libnspr packages from download.libreswan.org.
+# Ref: https://libreswan.org/wiki/3.14_on_Debian_Wheezy
+base_url=https://download.libreswan.org/binaries/debian/wheezy
+
+FILE1=libnspr4_4.10.7-1_amd64.deb
+FILE2=libnspr4-dev_4.10.7-1_amd64.deb
+FILE3=libnss3_3.17.2-1.1_amd64.deb
+FILE4=libnss3-dev_3.17.2-1.1_amd64.deb
+FILE5=libnss3-tools_3.17.2-1.1_amd64.deb
+
+wget -t 3 -T 30 -nv -O $FILE1 $base_url/$FILE1
+wget -t 3 -T 30 -nv -O $FILE2 $base_url/$FILE2
+wget -t 3 -T 30 -nv -O $FILE3 $base_url/$FILE3
+wget -t 3 -T 30 -nv -O $FILE4 $base_url/$FILE4
+wget -t 3 -T 30 -nv -O $FILE5 $base_url/$FILE5
+
+if [ -s $FILE1 ] && [ -s $FILE2 ] && [ -s $FILE3 ] && [ -s $FILE4 ] && [ -s $FILE5 ]; then
+  dpkg -i $FILE1 $FILE2 $FILE3 $FILE4 $FILE5 && /bin/rm -f $FILE1 $FILE2 $FILE3 $FILE4 $FILE5
+  apt-get install -f
+  echo
+  echo 'Completed! If no error occurred in the output above, you may now proceed to run vpnsetup.sh.'
+  echo
+  exit 0
+else
+  echo
+  echo 'Could not retrieve libnss/libnspr package(s) from download.libreswan.org. Aborting.'
+  echo
+  /bin/rm -f $FILE1 $FILE2 $FILE3 $FILE4 $FILE5
+  exit 1
+fi