/[smecontribs]/rpms/smeserver-libreswan/contribs10/smeserver-libreswan.spec
ViewVC logotype

Annotation of /rpms/smeserver-libreswan/contribs10/smeserver-libreswan.spec

Parent Directory Parent Directory | Revision Log Revision Log | View Revision Graph Revision Graph

Revision 1.1 - (hide annotations) (download)
Mon Feb 22 16:03:37 2021 UTC (3 years, 8 months ago) by brianr
Branch: MAIN 
Initial import
1 brianr 1.1 %define name smeserver-libreswan
2     %define version 0.5
3     %define release 34
4     Summary: Plugin to enable IPSEC connections
5     Name: %{name}
6     Version: %{version}
7     Release: %{release}%{?dist}
8     License: GNU GPL version 2
9     URL: http://libreswan.org/
10     Group: SMEserver/addon
11     Source: %{name}-%{version}.tar.gz
12     Patch1: smeserver-libreswan-fix-masq-templates.patch
13     Patch2: smeserver-libreswan-move-logfile.patch
14     Patch3: smeserver-libreswan-add-debug-key.patch
15     Patch4: smeserver-libreswan-fix-rsa-id.patch
16     Patch5: smeserver-libreswan-fix-createlinks.patch
17     Patch6: smeserver-libreswan-ikev2-logrotate.patch
18     Patch7: smeserver-libreswan-add-certificates.patch
19     Patch8: smeserver-libreswan-modify-identifiers.patch
20     Patch9: smeserver-libreswan-modify-identifiers1.patch
21     Patch10: smeserver-libreswan-forceencaps-l2tpd.patch
22     Patch11: smeserver-libreswan-variable-network-interfaces.patch
23     Patch12: smeserver-libreswan-remove-obsoletes.patch
24     Patch13: smeserver-libreswan-add-reauth.patch
25     Patch14: smeserver-libreswan-check-l2tpd-status.patch
26     Patch15: smeserver-libreswan-include-l2tpd-rightsubnet.patch
27     Patch16: smeserver-libreswan-fix-xl2tpd-status-check.patch
28     Patch17: smeserver-libreswan-createlinks.patch
29     Patch18: smeserver-libreswan-modify-leftrightsubnet.patch
30    
31     BuildRoot: /var/tmp/%{name}-%{version}
32     BuildArchitectures: noarch
33     BuildRequires: e-smith-devtools
34     Requires: e-smith-release >= 9.2
35     Requires: libreswan >= 3.29
36     AutoReqProv: no
37    
38     %description
39     Libreswan is a free software implementation of the most widely supported and standardised VPN protocol based on ("IPsec") and the Internet Key Exchange ("IKE")
40    
41     %changelog
42     * Mon Feb 17 2020 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-34.sme
43     - auto insert leftsourceip and subnet from internal interface
44     - Force right to have a value
45    
46     * Tue Feb 14 2020 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-33.sme
47     - update keyingtries
48     - update virtual-private
49    
50     * Thu Jan 30 2020 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-32.sme
51     - Fix xl2tpd status check
52    
53     * Thu Oct 17 2019 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-31.sme
54     - Allow rightsubnet for xl2tpd in virtual_private
55     - Add check for empty virtual_private hosts
56    
57     * Sun Oct 13 2019 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-30.sme
58     - Fix issue when there is no xl2tpd key
59    
60     * Sat Aug 31 2019 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-29.sme
61     - Bump required Libreswan to 3.29
62     - add reauth option
63    
64     * Thu Jun 21 2018 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-28.sme
65     - Bump required Libreswan to 3.23
66     - Change forceencaps to encapsulation
67     - Remove obsolete nat_traversal
68     - Modify ipsec.conf for no rightsubnet in xl2tpd
69    
70     * Tue Sep 19 2017 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-27.sme
71     - Allow variable network interface names - Stefano Zamboni
72    
73     * Thu Jun 15 2017 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-26.sme
74     - add keep-alive option in main ipsec.conf
75     - add forceencaps option overall default and per connection
76     - small code tidy
77     - Add support for L2TPD
78    
79     * Thu Jan 26 2017 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-25.sme
80     - Fix the ipsec.conf as well
81     - remove automatic \@ in IDs - Fixes [SME: 9729]
82    
83     * Thu Jan 26 2017 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-24.sme
84     - remove automatic \@ in IDs - Fixes [SME: 9729]
85     - fix swapped left/right IDs in password file
86    
87     * Wed Jan 25 2017 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-23.sme
88     - Add the ability to use PEM/PKCS#12 certificates - fixes [SME: 9942]
89     - lots of code tidying
90    
91     * Wed Dec 21 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-22.sme
92     - update logrotate completely now I realise it is symlinked
93     - remove UPDPort and add UPDPorts due to ipsec v2
94    
95     * Wed Dec 21 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-21.sme
96     - add more variations for ike v1/2
97     - remove logrotate template
98     - add /etc/e-smith/events/logrotate/logfiles2timestamp/var/log/pluto.log
99     - Fix some log noise when first installed and still disabled
100    
101     * Sat Apr 23 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-20.sme
102     - Fix typo in createlinks for sysctl.conf
103    
104     * Mon Apr 04 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-19.sme
105     - Fix ID in ipsec.secrets if ID is set
106    
107     * Thu Mar 24 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-18.sme
108     - Add debug db key to /etc/ipsec.conf
109     - Remove setting public/private keys as they won't affect unless templates are re-expanded
110     - Set xfrm_larval_drop drop correctly
111    
112     * Tue Mar 22 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-17.sme
113     - Move pluto.log to /var/log/pluto
114     - bump libreswan requires version to 3.16
115     - regenerate masq template on ipsec-update
116     - change wiki location page
117     - add sysctl.conf template
118     - modify masq templates for ipsec status enabled/disabled
119     - only load ipsec.conf rather than *.conf to avoid loading v6neighbor-hole.conf
120    
121     * Thu Mar 10 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-16.sme
122     - Fix masq templates for missing db entries on install
123    
124     * Wed Mar 09 2016 JP Pialasse <tests@pialasse.com> 0.5-15.sme
125     - first import in SME buildsys
126    
127     * Wed Feb 17 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-13
128     - Fix small typo in readme
129    
130     * Fri Dec 04 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-12
131     - Add keyingtries
132     - Finally fix add issues using asynchronous
133    
134     * Wed Dec 02 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-11
135     - Determine host IPtype - static or dynamic IP
136     - auto --up changed to exec
137     - Add checks for Left/Right ID in secrets file
138    
139     * Tue Dec 01 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-10
140     - Allow dynamic addresses
141     - Add iptype
142     - disallow " in PSK passwords
143     - Revised logging messages
144    
145     * Mon Nov 30 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-9
146     - Amended templates to allow for rsasig. Early cert settings removed
147    
148     * Wed Nov 25 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-8
149     - Revised masq templates - disable on ipsec disable
150     - Template ipsec.secrets so Terry won't break it again
151     - Set requires e-smith >=9 and libreswan >=3.14
152    
153     * Wed Nov 18 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-7
154     - add 90adjustESP
155    
156     * Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-6
157     - more update to masq firewalls - change -p 50 to -p ESP
158    
159     * Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-5
160     - update masq firewall rules
161     - document clean up
162    
163     * Wed May 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-4
164     - set dpd actions off if ipsec is 'add'
165     - add salifetime key and rename ikelifetime and keylife
166     - change defaults for salifetime and ikelifetime
167     - add in rsasig support
168    
169     * Wed Apr 22 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-3
170     - change default ike from aes-sha to aes-sha1
171    
172     * Tue Mar 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-2
173     - More minor fixes - should work OK with xl2tpd
174    
175     * Thu Mar 19 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-1
176     - Remove templates2expand and added to createlinks
177     - modified ipsec.secret template
178     - various other fixes
179    
180     * Fri Mar 13 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-5
181     - Big changes again - now have PreviousState to detect changes
182     - Createlinks to S10 to run after expand-templates
183    
184     * Thu Mar 5 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-4
185     - Changed lots. Removed sysctl.conf template
186     - Changed firewall template
187    
188     * Tue Mar 3 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-3
189     - Load of code tidying and prep from xl2tpd
190    
191     * Fri Feb 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-2
192     - Update action script and allow for system not in gateway mode
193     - add ike and phase2alg db settings
194    
195     * Tue Feb 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-1
196     - New ipsec-action script
197     - Numerous template changes
198    
199     * Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-1
200     - remove debugging lines
201     - remove expand templates from spec file
202     - add status check for ipsec.conf
203     - add comment to masq template
204     - updated db defaults
205     - ipsec.conf not expanded on install
206     - missed auto=start
207    
208     * Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.2-1
209     - remove rc.local modifications
210     - add /etc/sysctl.conf patches
211    
212     * Thu Jan 15 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-1
213     - initial release
214    
215     %prep
216     %setup
217     %patch1 -p1
218     %patch2 -p1
219     %patch3 -p1
220     %patch4 -p1
221     %patch5 -p1
222     %patch6 -p1
223     %patch7 -p1
224     %patch8 -p1
225     %patch9 -p1
226     %patch10 -p1
227     %patch11 -p1
228     %patch12 -p1
229     %patch13 -p1
230     %patch14 -p1
231     %patch15 -p1
232     %patch16 -p1
233     %patch17 -p1
234     %patch18 -p1
235    
236     %build
237     perl createlinks
238    
239     %install
240     rm -rf $RPM_BUILD_ROOT
241     (cd root ; find . -depth -print | cpio -dump $RPM_BUILD_ROOT)
242     rm -f %{name}-%{version}-filelist
243     /sbin/e-smith/genfilelist $RPM_BUILD_ROOT > %{name}-%{version}-filelist
244     echo "%doc COPYING" >> %{name}-%{version}-filelist
245    
246    
247     %clean
248     cd ..
249     rm -rf %{name}-%{version}
250    
251     %files -f %{name}-%{version}-filelist
252     %defattr(-,root,root)
253    
254     %pre
255     %preun
256     %post
257    
258     /sbin/e-smith/expand-template /etc/rc.d/init.d/masq
259     /sbin/e-smith/expand-template /etc/inittab
260     /sbin/init q
261    
262    
263     echo "see https://wiki.contribs.org/Libreswan"
264    
265     %postun
266     /sbin/e-smith/expand-template /etc/rc.d/init.d/masq
267     /sbin/e-smith/expand-template /etc/inittab
268     /sbin/init q
admin@koozali.org
 ViewVC Help
Powered by ViewVC 1.2.1 RSS 2.0 feed