/[smecontribs]/rpms/smeserver-libreswan/contribs9/smeserver-libreswan.spec
ViewVC logotype

Annotation of /rpms/smeserver-libreswan/contribs9/smeserver-libreswan.spec

Parent Directory Parent Directory | Revision Log Revision Log | View Revision Graph Revision Graph


Revision 1.21 - (hide annotations) (download)
Mon Feb 17 14:46:54 2020 UTC (4 years, 9 months ago) by jcrisp
Branch: MAIN
CVS Tags: smeserver-libreswan-0_5-34_el6_sme, HEAD
Changes since 1.20: +7 -1 lines
* Mon Feb 17 2020 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-34.sme
- auto insert leftsourceip and subnet from internal interface
- Force right to have a value

1 unnilennium 1.1 %define name smeserver-libreswan
2     %define version 0.5
3 jcrisp 1.21 %define release 34
4 unnilennium 1.1 Summary: Plugin to enable IPSEC connections
5     Name: %{name}
6     Version: %{version}
7 unnilennium 1.3 Release: %{release}%{?dist}
8 unnilennium 1.1 License: GNU GPL version 2
9     URL: http://libreswan.org/
10     Group: SMEserver/addon
11     Source: %{name}-%{version}.tar.gz
12 reetspetit 1.4 Patch1: smeserver-libreswan-fix-masq-templates.patch
13 reetspetit 1.5 Patch2: smeserver-libreswan-move-logfile.patch
14 reetspetit 1.6 Patch3: smeserver-libreswan-add-debug-key.patch
15 reetspetit 1.7 Patch4: smeserver-libreswan-fix-rsa-id.patch
16 reetspetit 1.8 Patch5: smeserver-libreswan-fix-createlinks.patch
17 reetspetit 1.9 Patch6: smeserver-libreswan-ikev2-logrotate.patch
18 reetspetit 1.10 Patch7: smeserver-libreswan-add-certificates.patch
19 reetspetit 1.11 Patch8: smeserver-libreswan-modify-identifiers.patch
20 reetspetit 1.12 Patch9: smeserver-libreswan-modify-identifiers1.patch
21 reetspetit 1.13 Patch10: smeserver-libreswan-forceencaps-l2tpd.patch
22 reetspetit 1.14 Patch11: smeserver-libreswan-variable-network-interfaces.patch
23 jcrisp 1.15 Patch12: smeserver-libreswan-remove-obsoletes.patch
24 jcrisp 1.16 Patch13: smeserver-libreswan-add-reauth.patch
25 jcrisp 1.17 Patch14: smeserver-libreswan-check-l2tpd-status.patch
26 jcrisp 1.18 Patch15: smeserver-libreswan-include-l2tpd-rightsubnet.patch
27 jcrisp 1.19 Patch16: smeserver-libreswan-fix-xl2tpd-status-check.patch
28 jcrisp 1.20 Patch17: smeserver-libreswan-createlinks.patch
29 jcrisp 1.21 Patch18: smeserver-libreswan-modify-leftrightsubnet.patch
30 reetspetit 1.9
31 unnilennium 1.1 BuildRoot: /var/tmp/%{name}-%{version}
32     BuildArchitectures: noarch
33     BuildRequires: e-smith-devtools
34 jcrisp 1.15 Requires: e-smith-release >= 9.2
35 jcrisp 1.16 Requires: libreswan >= 3.29
36 unnilennium 1.1 AutoReqProv: no
37    
38     %description
39     Libreswan is a free software implementation of the most widely supported and standardised VPN protocol based on ("IPsec") and the Internet Key Exchange ("IKE")
40    
41     %changelog
42 jcrisp 1.21 * Mon Feb 17 2020 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-34.sme
43     - auto insert leftsourceip and subnet from internal interface
44     - Force right to have a value
45    
46 jcrisp 1.20 * Tue Feb 14 2020 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-33.sme
47     - update keyingtries
48     - update virtual-private
49    
50 jcrisp 1.19 * Thu Jan 30 2020 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-32.sme
51     - Fix xl2tpd status check
52    
53 jcrisp 1.18 * Thu Oct 17 2019 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-31.sme
54     - Allow rightsubnet for xl2tpd in virtual_private
55     - Add check for empty virtual_private hosts
56    
57 jcrisp 1.17 * Sun Oct 13 2019 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-30.sme
58     - Fix issue when there is no xl2tpd key
59    
60 jcrisp 1.16 * Sat Aug 31 2019 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-29.sme
61     - Bump required Libreswan to 3.29
62     - add reauth option
63    
64 jcrisp 1.15 * Thu Jun 21 2018 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-28.sme
65     - Bump required Libreswan to 3.23
66 jcrisp 1.16 - Change forceencaps to encapsulation
67 jcrisp 1.15 - Remove obsolete nat_traversal
68     - Modify ipsec.conf for no rightsubnet in xl2tpd
69    
70 reetspetit 1.14 * Tue Sep 19 2017 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-27.sme
71     - Allow variable network interface names - Stefano Zamboni
72 reetspetit 1.13
73     * Thu Jun 15 2017 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-26.sme
74     - add keep-alive option in main ipsec.conf
75     - add forceencaps option overall default and per connection
76     - small code tidy
77     - Add support for L2TPD
78    
79 reetspetit 1.12 * Thu Jan 26 2017 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-25.sme
80     - Fix the ipsec.conf as well
81     - remove automatic \@ in IDs - Fixes [SME: 9729]
82    
83 reetspetit 1.11 * Thu Jan 26 2017 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-24.sme
84     - remove automatic \@ in IDs - Fixes [SME: 9729]
85     - fix swapped left/right IDs in password file
86    
87 reetspetit 1.10 * Wed Jan 25 2017 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-23.sme
88     - Add the ability to use PEM/PKCS#12 certificates - fixes [SME: 9942]
89     - lots of code tidying
90    
91 reetspetit 1.9 * Wed Dec 21 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-22.sme
92     - update logrotate completely now I realise it is symlinked
93     - remove UPDPort and add UPDPorts due to ipsec v2
94    
95     * Wed Dec 21 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-21.sme
96     - add more variations for ike v1/2
97     - remove logrotate template
98     - add /etc/e-smith/events/logrotate/logfiles2timestamp/var/log/pluto.log
99     - Fix some log noise when first installed and still disabled
100    
101 reetspetit 1.8 * Sat Apr 23 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-20.sme
102     - Fix typo in createlinks for sysctl.conf
103 reetspetit 1.7
104     * Mon Apr 04 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-19.sme
105     - Fix ID in ipsec.secrets if ID is set
106    
107 reetspetit 1.6 * Thu Mar 24 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-18.sme
108     - Add debug db key to /etc/ipsec.conf
109     - Remove setting public/private keys as they won't affect unless templates are re-expanded
110 reetspetit 1.7 - Set xfrm_larval_drop drop correctly
111 reetspetit 1.6
112 reetspetit 1.5 * Tue Mar 22 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-17.sme
113     - Move pluto.log to /var/log/pluto
114     - bump libreswan requires version to 3.16
115     - regenerate masq template on ipsec-update
116     - change wiki location page
117     - add sysctl.conf template
118     - modify masq templates for ipsec status enabled/disabled
119     - only load ipsec.conf rather than *.conf to avoid loading v6neighbor-hole.conf
120    
121 reetspetit 1.4 * Thu Mar 10 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-16.sme
122     - Fix masq templates for missing db entries on install
123    
124 unnilennium 1.3 * Wed Mar 09 2016 JP Pialasse <tests@pialasse.com> 0.5-15.sme
125 unnilennium 1.2 - first import in SME buildsys
126    
127 unnilennium 1.1 * Wed Feb 17 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-13
128     - Fix small typo in readme
129    
130     * Fri Dec 04 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-12
131     - Add keyingtries
132     - Finally fix add issues using asynchronous
133    
134     * Wed Dec 02 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-11
135     - Determine host IPtype - static or dynamic IP
136     - auto --up changed to exec
137     - Add checks for Left/Right ID in secrets file
138    
139     * Tue Dec 01 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-10
140     - Allow dynamic addresses
141     - Add iptype
142     - disallow " in PSK passwords
143     - Revised logging messages
144    
145     * Mon Nov 30 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-9
146     - Amended templates to allow for rsasig. Early cert settings removed
147    
148     * Wed Nov 25 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-8
149     - Revised masq templates - disable on ipsec disable
150     - Template ipsec.secrets so Terry won't break it again
151     - Set requires e-smith >=9 and libreswan >=3.14
152    
153     * Wed Nov 18 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-7
154     - add 90adjustESP
155    
156     * Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-6
157     - more update to masq firewalls - change -p 50 to -p ESP
158    
159     * Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-5
160     - update masq firewall rules
161     - document clean up
162    
163     * Wed May 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-4
164     - set dpd actions off if ipsec is 'add'
165     - add salifetime key and rename ikelifetime and keylife
166     - change defaults for salifetime and ikelifetime
167     - add in rsasig support
168    
169     * Wed Apr 22 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-3
170     - change default ike from aes-sha to aes-sha1
171    
172     * Tue Mar 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-2
173     - More minor fixes - should work OK with xl2tpd
174    
175     * Thu Mar 19 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-1
176     - Remove templates2expand and added to createlinks
177     - modified ipsec.secret template
178     - various other fixes
179    
180     * Fri Mar 13 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-5
181     - Big changes again - now have PreviousState to detect changes
182     - Createlinks to S10 to run after expand-templates
183    
184     * Thu Mar 5 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-4
185     - Changed lots. Removed sysctl.conf template
186     - Changed firewall template
187    
188     * Tue Mar 3 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-3
189     - Load of code tidying and prep from xl2tpd
190    
191     * Fri Feb 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-2
192     - Update action script and allow for system not in gateway mode
193     - add ike and phase2alg db settings
194    
195     * Tue Feb 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-1
196     - New ipsec-action script
197     - Numerous template changes
198    
199     * Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-1
200     - remove debugging lines
201     - remove expand templates from spec file
202     - add status check for ipsec.conf
203     - add comment to masq template
204     - updated db defaults
205     - ipsec.conf not expanded on install
206     - missed auto=start
207    
208     * Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.2-1
209     - remove rc.local modifications
210     - add /etc/sysctl.conf patches
211    
212     * Thu Jan 15 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-1
213     - initial release
214    
215     %prep
216     %setup
217 reetspetit 1.4 %patch1 -p1
218 reetspetit 1.5 %patch2 -p1
219 reetspetit 1.6 %patch3 -p1
220 reetspetit 1.7 %patch4 -p1
221 reetspetit 1.8 %patch5 -p1
222 reetspetit 1.9 %patch6 -p1
223 reetspetit 1.10 %patch7 -p1
224 reetspetit 1.11 %patch8 -p1
225 reetspetit 1.12 %patch9 -p1
226 reetspetit 1.13 %patch10 -p1
227 reetspetit 1.14 %patch11 -p1
228 jcrisp 1.15 %patch12 -p1
229 jcrisp 1.16 %patch13 -p1
230 jcrisp 1.17 %patch14 -p1
231 jcrisp 1.18 %patch15 -p1
232 jcrisp 1.19 %patch16 -p1
233 jcrisp 1.20 %patch17 -p1
234 jcrisp 1.21 %patch18 -p1
235 unnilennium 1.1
236     %build
237     perl createlinks
238    
239     %install
240     rm -rf $RPM_BUILD_ROOT
241     (cd root ; find . -depth -print | cpio -dump $RPM_BUILD_ROOT)
242     rm -f %{name}-%{version}-filelist
243     /sbin/e-smith/genfilelist $RPM_BUILD_ROOT > %{name}-%{version}-filelist
244     echo "%doc COPYING" >> %{name}-%{version}-filelist
245    
246    
247     %clean
248     cd ..
249     rm -rf %{name}-%{version}
250    
251     %files -f %{name}-%{version}-filelist
252     %defattr(-,root,root)
253    
254     %pre
255     %preun
256     %post
257 reetspetit 1.6
258 unnilennium 1.1 /sbin/e-smith/expand-template /etc/rc.d/init.d/masq
259     /sbin/e-smith/expand-template /etc/inittab
260     /sbin/init q
261    
262    
263 reetspetit 1.11 echo "see https://wiki.contribs.org/Libreswan"
264 unnilennium 1.1
265     %postun
266     /sbin/e-smith/expand-template /etc/rc.d/init.d/masq
267     /sbin/e-smith/expand-template /etc/inittab
268     /sbin/init q

admin@koozali.org
ViewVC Help
Powered by ViewVC 1.2.1 RSS 2.0 feed