smeserver-libreswan/contribs9/smeserver-libreswan.spec

%define name smeserver-libreswan
%define version 0.5
%define release 13
Summary: Plugin to enable IPSEC connections
Name: %{name}
Version: %{version}
Release: %{release}
License: GNU GPL version 2
URL: http://libreswan.org/
Group: SMEserver/addon
Source: %{name}-%{version}.tar.gz
BuildRoot: /var/tmp/%{name}-%{version}
BuildArchitectures: noarch
BuildRequires: e-smith-devtools
Requires:  e-smith-release >= 9.0
Requires:  libreswan >= 3.14
AutoReqProv: no

%description
Libreswan is a free software implementation of the most widely supported and standardised VPN protocol based on ("IPsec") and the Internet Key Exchange ("IKE")

%changelog
* Wed Feb 17 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-13
- Fix small typo in readme

* Fri Dec 04 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-12
- Add keyingtries
- Finally fix add issues using asynchronous

* Wed Dec 02 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-11
- Determine host IPtype - static or dynamic IP
- auto --up changed to exec
- Add checks for Left/Right ID in secrets file

* Tue Dec 01 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-10
- Allow dynamic addresses
- Add iptype
- disallow " in PSK passwords
- Revised logging messages

* Mon Nov 30 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-9
- Amended templates to allow for rsasig. Early cert settings removed

* Wed Nov 25 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-8
- Revised masq templates - disable on ipsec disable
- Template ipsec.secrets so Terry won't break it again
- Set requires e-smith >=9 and libreswan >=3.14

* Wed Nov 18 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-7
- add 90adjustESP

* Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-6
- more update to masq firewalls - change -p 50 to -p ESP

* Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-5
- update masq firewall rules
- document clean up

* Wed May 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-4
- set dpd actions off if ipsec is 'add'
- add salifetime key and rename ikelifetime and keylife
- change defaults for salifetime and ikelifetime
- add in rsasig support

* Wed Apr 22 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-3
- change default ike from aes-sha to aes-sha1

* Tue Mar 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-2
- More minor fixes - should work OK with xl2tpd

* Thu Mar 19 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-1
- Remove templates2expand and added to createlinks
- modified ipsec.secret template
- various other fixes

* Fri Mar 13 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-5
- Big changes again - now have PreviousState to detect changes
- Createlinks to S10 to run after expand-templates

* Thu Mar 5 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-4
- Changed lots. Removed sysctl.conf template
- Changed firewall template

* Tue Mar 3 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-3
- Load of code tidying and prep from xl2tpd

* Fri Feb 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-2
- Update action script and allow for system not in gateway mode
- add ike and phase2alg db settings

* Tue Feb 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-1
- New ipsec-action script
- Numerous template changes

* Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-1
- remove debugging lines
- remove expand templates from spec file
- add status check for ipsec.conf
- add comment to masq template
- updated db defaults
- ipsec.conf not expanded on install
- missed auto=start

* Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.2-1
- remove rc.local modifications
- add /etc/sysctl.conf patches

* Thu Jan 15 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-1
- initial release

%prep
%setup

%build
perl createlinks

%install
rm -rf $RPM_BUILD_ROOT
(cd root ; find . -depth -print | cpio -dump $RPM_BUILD_ROOT)
rm -f %{name}-%{version}-filelist
/sbin/e-smith/genfilelist $RPM_BUILD_ROOT > %{name}-%{version}-filelist
echo "%doc COPYING" >> %{name}-%{version}-filelist


%clean
cd ..
rm -rf %{name}-%{version}

%files -f %{name}-%{version}-filelist
%defattr(-,root,root)

%pre
%preun
%post

/sbin/e-smith/expand-template /etc/rc.d/init.d/masq
/sbin/e-smith/expand-template /etc/inittab
/sbin/init q


echo "see http://wiki.contribs.org/IPSEC"

%postun
/sbin/e-smith/expand-template /etc/rc.d/init.d/masq
/sbin/e-smith/expand-template /etc/inittab
/sbin/init q
1	unnilennium	1.1	%define name smeserver-libreswan
2			%define version 0.5
3			%define release 13
4			Summary: Plugin to enable IPSEC connections
5			Name: %{name}
6			Version: %{version}
7			Release: %{release}
8			License: GNU GPL version 2
9			URL: http://libreswan.org/
10			Group: SMEserver/addon
11			Source: %{name}-%{version}.tar.gz
12			BuildRoot: /var/tmp/%{name}-%{version}
13			BuildArchitectures: noarch
14			BuildRequires: e-smith-devtools
15			Requires: e-smith-release >= 9.0
16			Requires: libreswan >= 3.14
17			AutoReqProv: no
18
19			%description
20			Libreswan is a free software implementation of the most widely supported and standardised VPN protocol based on ("IPsec") and the Internet Key Exchange ("IKE")
21
22			%changelog
23			* Wed Feb 17 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-13
24			- Fix small typo in readme
25
26			* Fri Dec 04 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-12
27			- Add keyingtries
28			- Finally fix add issues using asynchronous
29
30			* Wed Dec 02 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-11
31			- Determine host IPtype - static or dynamic IP
32			- auto --up changed to exec
33			- Add checks for Left/Right ID in secrets file
34
35			* Tue Dec 01 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-10
36			- Allow dynamic addresses
37			- Add iptype
38			- disallow " in PSK passwords
39			- Revised logging messages
40
41			* Mon Nov 30 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-9
42			- Amended templates to allow for rsasig. Early cert settings removed
43
44			* Wed Nov 25 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-8
45			- Revised masq templates - disable on ipsec disable
46			- Template ipsec.secrets so Terry won't break it again
47			- Set requires e-smith >=9 and libreswan >=3.14
48
49			* Wed Nov 18 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-7
50			- add 90adjustESP
51
52			* Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-6
53			- more update to masq firewalls - change -p 50 to -p ESP
54
55			* Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-5
56			- update masq firewall rules
57			- document clean up
58
59			* Wed May 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-4
60			- set dpd actions off if ipsec is 'add'
61			- add salifetime key and rename ikelifetime and keylife
62			- change defaults for salifetime and ikelifetime
63			- add in rsasig support
64
65			* Wed Apr 22 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-3
66			- change default ike from aes-sha to aes-sha1
67
68			* Tue Mar 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-2
69			- More minor fixes - should work OK with xl2tpd
70
71			* Thu Mar 19 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-1
72			- Remove templates2expand and added to createlinks
73			- modified ipsec.secret template
74			- various other fixes
75
76			* Fri Mar 13 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-5
77			- Big changes again - now have PreviousState to detect changes
78			- Createlinks to S10 to run after expand-templates
79
80			* Thu Mar 5 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-4
81			- Changed lots. Removed sysctl.conf template
82			- Changed firewall template
83
84			* Tue Mar 3 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-3
85			- Load of code tidying and prep from xl2tpd
86
87			* Fri Feb 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-2
88			- Update action script and allow for system not in gateway mode
89			- add ike and phase2alg db settings
90
91			* Tue Feb 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-1
92			- New ipsec-action script
93			- Numerous template changes
94
95			* Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-1
96			- remove debugging lines
97			- remove expand templates from spec file
98			- add status check for ipsec.conf
99			- add comment to masq template
100			- updated db defaults
101			- ipsec.conf not expanded on install
102			- missed auto=start
103
104			* Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.2-1
105			- remove rc.local modifications
106			- add /etc/sysctl.conf patches
107
108			* Thu Jan 15 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-1
109			- initial release
110
111			%prep
112			%setup
113
114			%build
115			perl createlinks
116
117			%install
118			rm -rf $RPM_BUILD_ROOT
119			(cd root ; find . -depth -print \| cpio -dump $RPM_BUILD_ROOT)
120			rm -f %{name}-%{version}-filelist
121			/sbin/e-smith/genfilelist $RPM_BUILD_ROOT > %{name}-%{version}-filelist
122			echo "%doc COPYING" >> %{name}-%{version}-filelist
123
124
125			%clean
126			cd ..
127			rm -rf %{name}-%{version}
128
129			%files -f %{name}-%{version}-filelist
130			%defattr(-,root,root)
131
132			%pre
133			%preun
134			%post
135
136			/sbin/e-smith/expand-template /etc/rc.d/init.d/masq
137			/sbin/e-smith/expand-template /etc/inittab
138			/sbin/init q
139
140
141			echo "see http://wiki.contribs.org/IPSEC"
142
143			%postun
144			/sbin/e-smith/expand-template /etc/rc.d/init.d/masq
145			/sbin/e-smith/expand-template /etc/inittab
146			/sbin/init q