1 |
unnilennium |
1.1 |
%define name smeserver-libreswan |
2 |
|
|
%define version 0.5 |
3 |
jcrisp |
1.21 |
%define release 34 |
4 |
unnilennium |
1.1 |
Summary: Plugin to enable IPSEC connections |
5 |
|
|
Name: %{name} |
6 |
|
|
Version: %{version} |
7 |
unnilennium |
1.3 |
Release: %{release}%{?dist} |
8 |
unnilennium |
1.1 |
License: GNU GPL version 2 |
9 |
|
|
URL: http://libreswan.org/ |
10 |
|
|
Group: SMEserver/addon |
11 |
|
|
Source: %{name}-%{version}.tar.gz |
12 |
reetspetit |
1.4 |
Patch1: smeserver-libreswan-fix-masq-templates.patch |
13 |
reetspetit |
1.5 |
Patch2: smeserver-libreswan-move-logfile.patch |
14 |
reetspetit |
1.6 |
Patch3: smeserver-libreswan-add-debug-key.patch |
15 |
reetspetit |
1.7 |
Patch4: smeserver-libreswan-fix-rsa-id.patch |
16 |
reetspetit |
1.8 |
Patch5: smeserver-libreswan-fix-createlinks.patch |
17 |
reetspetit |
1.9 |
Patch6: smeserver-libreswan-ikev2-logrotate.patch |
18 |
reetspetit |
1.10 |
Patch7: smeserver-libreswan-add-certificates.patch |
19 |
reetspetit |
1.11 |
Patch8: smeserver-libreswan-modify-identifiers.patch |
20 |
reetspetit |
1.12 |
Patch9: smeserver-libreswan-modify-identifiers1.patch |
21 |
reetspetit |
1.13 |
Patch10: smeserver-libreswan-forceencaps-l2tpd.patch |
22 |
reetspetit |
1.14 |
Patch11: smeserver-libreswan-variable-network-interfaces.patch |
23 |
jcrisp |
1.15 |
Patch12: smeserver-libreswan-remove-obsoletes.patch |
24 |
jcrisp |
1.16 |
Patch13: smeserver-libreswan-add-reauth.patch |
25 |
jcrisp |
1.17 |
Patch14: smeserver-libreswan-check-l2tpd-status.patch |
26 |
jcrisp |
1.18 |
Patch15: smeserver-libreswan-include-l2tpd-rightsubnet.patch |
27 |
jcrisp |
1.19 |
Patch16: smeserver-libreswan-fix-xl2tpd-status-check.patch |
28 |
jcrisp |
1.20 |
Patch17: smeserver-libreswan-createlinks.patch |
29 |
jcrisp |
1.21 |
Patch18: smeserver-libreswan-modify-leftrightsubnet.patch |
30 |
reetspetit |
1.9 |
|
31 |
unnilennium |
1.1 |
BuildRoot: /var/tmp/%{name}-%{version} |
32 |
|
|
BuildArchitectures: noarch |
33 |
|
|
BuildRequires: e-smith-devtools |
34 |
jcrisp |
1.15 |
Requires: e-smith-release >= 9.2 |
35 |
jcrisp |
1.16 |
Requires: libreswan >= 3.29 |
36 |
unnilennium |
1.1 |
AutoReqProv: no |
37 |
|
|
|
38 |
|
|
%description |
39 |
|
|
Libreswan is a free software implementation of the most widely supported and standardised VPN protocol based on ("IPsec") and the Internet Key Exchange ("IKE") |
40 |
|
|
|
41 |
|
|
%changelog |
42 |
jcrisp |
1.21 |
* Mon Feb 17 2020 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-34.sme |
43 |
|
|
- auto insert leftsourceip and subnet from internal interface |
44 |
|
|
- Force right to have a value |
45 |
|
|
|
46 |
jcrisp |
1.20 |
* Tue Feb 14 2020 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-33.sme |
47 |
|
|
- update keyingtries |
48 |
|
|
- update virtual-private |
49 |
|
|
|
50 |
jcrisp |
1.19 |
* Thu Jan 30 2020 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-32.sme |
51 |
|
|
- Fix xl2tpd status check |
52 |
|
|
|
53 |
jcrisp |
1.18 |
* Thu Oct 17 2019 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-31.sme |
54 |
|
|
- Allow rightsubnet for xl2tpd in virtual_private |
55 |
|
|
- Add check for empty virtual_private hosts |
56 |
|
|
|
57 |
jcrisp |
1.17 |
* Sun Oct 13 2019 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-30.sme |
58 |
|
|
- Fix issue when there is no xl2tpd key |
59 |
|
|
|
60 |
jcrisp |
1.16 |
* Sat Aug 31 2019 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-29.sme |
61 |
|
|
- Bump required Libreswan to 3.29 |
62 |
|
|
- add reauth option |
63 |
|
|
|
64 |
jcrisp |
1.15 |
* Thu Jun 21 2018 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-28.sme |
65 |
|
|
- Bump required Libreswan to 3.23 |
66 |
jcrisp |
1.16 |
- Change forceencaps to encapsulation |
67 |
jcrisp |
1.15 |
- Remove obsolete nat_traversal |
68 |
|
|
- Modify ipsec.conf for no rightsubnet in xl2tpd |
69 |
|
|
|
70 |
reetspetit |
1.14 |
* Tue Sep 19 2017 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-27.sme |
71 |
|
|
- Allow variable network interface names - Stefano Zamboni |
72 |
reetspetit |
1.13 |
|
73 |
|
|
* Thu Jun 15 2017 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-26.sme |
74 |
|
|
- add keep-alive option in main ipsec.conf |
75 |
|
|
- add forceencaps option overall default and per connection |
76 |
|
|
- small code tidy |
77 |
|
|
- Add support for L2TPD |
78 |
|
|
|
79 |
reetspetit |
1.12 |
* Thu Jan 26 2017 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-25.sme |
80 |
|
|
- Fix the ipsec.conf as well |
81 |
|
|
- remove automatic \@ in IDs - Fixes [SME: 9729] |
82 |
|
|
|
83 |
reetspetit |
1.11 |
* Thu Jan 26 2017 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-24.sme |
84 |
|
|
- remove automatic \@ in IDs - Fixes [SME: 9729] |
85 |
|
|
- fix swapped left/right IDs in password file |
86 |
|
|
|
87 |
reetspetit |
1.10 |
* Wed Jan 25 2017 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-23.sme |
88 |
|
|
- Add the ability to use PEM/PKCS#12 certificates - fixes [SME: 9942] |
89 |
|
|
- lots of code tidying |
90 |
|
|
|
91 |
reetspetit |
1.9 |
* Wed Dec 21 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-22.sme |
92 |
|
|
- update logrotate completely now I realise it is symlinked |
93 |
|
|
- remove UPDPort and add UPDPorts due to ipsec v2 |
94 |
|
|
|
95 |
|
|
* Wed Dec 21 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-21.sme |
96 |
|
|
- add more variations for ike v1/2 |
97 |
|
|
- remove logrotate template |
98 |
|
|
- add /etc/e-smith/events/logrotate/logfiles2timestamp/var/log/pluto.log |
99 |
|
|
- Fix some log noise when first installed and still disabled |
100 |
|
|
|
101 |
reetspetit |
1.8 |
* Sat Apr 23 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-20.sme |
102 |
|
|
- Fix typo in createlinks for sysctl.conf |
103 |
reetspetit |
1.7 |
|
104 |
|
|
* Mon Apr 04 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-19.sme |
105 |
|
|
- Fix ID in ipsec.secrets if ID is set |
106 |
|
|
|
107 |
reetspetit |
1.6 |
* Thu Mar 24 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-18.sme |
108 |
|
|
- Add debug db key to /etc/ipsec.conf |
109 |
|
|
- Remove setting public/private keys as they won't affect unless templates are re-expanded |
110 |
reetspetit |
1.7 |
- Set xfrm_larval_drop drop correctly |
111 |
reetspetit |
1.6 |
|
112 |
reetspetit |
1.5 |
* Tue Mar 22 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-17.sme |
113 |
|
|
- Move pluto.log to /var/log/pluto |
114 |
|
|
- bump libreswan requires version to 3.16 |
115 |
|
|
- regenerate masq template on ipsec-update |
116 |
|
|
- change wiki location page |
117 |
|
|
- add sysctl.conf template |
118 |
|
|
- modify masq templates for ipsec status enabled/disabled |
119 |
|
|
- only load ipsec.conf rather than *.conf to avoid loading v6neighbor-hole.conf |
120 |
|
|
|
121 |
reetspetit |
1.4 |
* Thu Mar 10 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-16.sme |
122 |
|
|
- Fix masq templates for missing db entries on install |
123 |
|
|
|
124 |
unnilennium |
1.3 |
* Wed Mar 09 2016 JP Pialasse <tests@pialasse.com> 0.5-15.sme |
125 |
unnilennium |
1.2 |
- first import in SME buildsys |
126 |
|
|
|
127 |
unnilennium |
1.1 |
* Wed Feb 17 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-13 |
128 |
|
|
- Fix small typo in readme |
129 |
|
|
|
130 |
|
|
* Fri Dec 04 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-12 |
131 |
|
|
- Add keyingtries |
132 |
|
|
- Finally fix add issues using asynchronous |
133 |
|
|
|
134 |
|
|
* Wed Dec 02 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-11 |
135 |
|
|
- Determine host IPtype - static or dynamic IP |
136 |
|
|
- auto --up changed to exec |
137 |
|
|
- Add checks for Left/Right ID in secrets file |
138 |
|
|
|
139 |
|
|
* Tue Dec 01 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-10 |
140 |
|
|
- Allow dynamic addresses |
141 |
|
|
- Add iptype |
142 |
|
|
- disallow " in PSK passwords |
143 |
|
|
- Revised logging messages |
144 |
|
|
|
145 |
|
|
* Mon Nov 30 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-9 |
146 |
|
|
- Amended templates to allow for rsasig. Early cert settings removed |
147 |
|
|
|
148 |
|
|
* Wed Nov 25 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-8 |
149 |
|
|
- Revised masq templates - disable on ipsec disable |
150 |
|
|
- Template ipsec.secrets so Terry won't break it again |
151 |
|
|
- Set requires e-smith >=9 and libreswan >=3.14 |
152 |
|
|
|
153 |
|
|
* Wed Nov 18 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-7 |
154 |
|
|
- add 90adjustESP |
155 |
|
|
|
156 |
|
|
* Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-6 |
157 |
|
|
- more update to masq firewalls - change -p 50 to -p ESP |
158 |
|
|
|
159 |
|
|
* Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-5 |
160 |
|
|
- update masq firewall rules |
161 |
|
|
- document clean up |
162 |
|
|
|
163 |
|
|
* Wed May 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-4 |
164 |
|
|
- set dpd actions off if ipsec is 'add' |
165 |
|
|
- add salifetime key and rename ikelifetime and keylife |
166 |
|
|
- change defaults for salifetime and ikelifetime |
167 |
|
|
- add in rsasig support |
168 |
|
|
|
169 |
|
|
* Wed Apr 22 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-3 |
170 |
|
|
- change default ike from aes-sha to aes-sha1 |
171 |
|
|
|
172 |
|
|
* Tue Mar 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-2 |
173 |
|
|
- More minor fixes - should work OK with xl2tpd |
174 |
|
|
|
175 |
|
|
* Thu Mar 19 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-1 |
176 |
|
|
- Remove templates2expand and added to createlinks |
177 |
|
|
- modified ipsec.secret template |
178 |
|
|
- various other fixes |
179 |
|
|
|
180 |
|
|
* Fri Mar 13 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-5 |
181 |
|
|
- Big changes again - now have PreviousState to detect changes |
182 |
|
|
- Createlinks to S10 to run after expand-templates |
183 |
|
|
|
184 |
|
|
* Thu Mar 5 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-4 |
185 |
|
|
- Changed lots. Removed sysctl.conf template |
186 |
|
|
- Changed firewall template |
187 |
|
|
|
188 |
|
|
* Tue Mar 3 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-3 |
189 |
|
|
- Load of code tidying and prep from xl2tpd |
190 |
|
|
|
191 |
|
|
* Fri Feb 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-2 |
192 |
|
|
- Update action script and allow for system not in gateway mode |
193 |
|
|
- add ike and phase2alg db settings |
194 |
|
|
|
195 |
|
|
* Tue Feb 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-1 |
196 |
|
|
- New ipsec-action script |
197 |
|
|
- Numerous template changes |
198 |
|
|
|
199 |
|
|
* Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-1 |
200 |
|
|
- remove debugging lines |
201 |
|
|
- remove expand templates from spec file |
202 |
|
|
- add status check for ipsec.conf |
203 |
|
|
- add comment to masq template |
204 |
|
|
- updated db defaults |
205 |
|
|
- ipsec.conf not expanded on install |
206 |
|
|
- missed auto=start |
207 |
|
|
|
208 |
|
|
* Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.2-1 |
209 |
|
|
- remove rc.local modifications |
210 |
|
|
- add /etc/sysctl.conf patches |
211 |
|
|
|
212 |
|
|
* Thu Jan 15 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-1 |
213 |
|
|
- initial release |
214 |
|
|
|
215 |
|
|
%prep |
216 |
|
|
%setup |
217 |
reetspetit |
1.4 |
%patch1 -p1 |
218 |
reetspetit |
1.5 |
%patch2 -p1 |
219 |
reetspetit |
1.6 |
%patch3 -p1 |
220 |
reetspetit |
1.7 |
%patch4 -p1 |
221 |
reetspetit |
1.8 |
%patch5 -p1 |
222 |
reetspetit |
1.9 |
%patch6 -p1 |
223 |
reetspetit |
1.10 |
%patch7 -p1 |
224 |
reetspetit |
1.11 |
%patch8 -p1 |
225 |
reetspetit |
1.12 |
%patch9 -p1 |
226 |
reetspetit |
1.13 |
%patch10 -p1 |
227 |
reetspetit |
1.14 |
%patch11 -p1 |
228 |
jcrisp |
1.15 |
%patch12 -p1 |
229 |
jcrisp |
1.16 |
%patch13 -p1 |
230 |
jcrisp |
1.17 |
%patch14 -p1 |
231 |
jcrisp |
1.18 |
%patch15 -p1 |
232 |
jcrisp |
1.19 |
%patch16 -p1 |
233 |
jcrisp |
1.20 |
%patch17 -p1 |
234 |
jcrisp |
1.21 |
%patch18 -p1 |
235 |
unnilennium |
1.1 |
|
236 |
|
|
%build |
237 |
|
|
perl createlinks |
238 |
|
|
|
239 |
|
|
%install |
240 |
|
|
rm -rf $RPM_BUILD_ROOT |
241 |
|
|
(cd root ; find . -depth -print | cpio -dump $RPM_BUILD_ROOT) |
242 |
|
|
rm -f %{name}-%{version}-filelist |
243 |
|
|
/sbin/e-smith/genfilelist $RPM_BUILD_ROOT > %{name}-%{version}-filelist |
244 |
|
|
echo "%doc COPYING" >> %{name}-%{version}-filelist |
245 |
|
|
|
246 |
|
|
|
247 |
|
|
%clean |
248 |
|
|
cd .. |
249 |
|
|
rm -rf %{name}-%{version} |
250 |
|
|
|
251 |
|
|
%files -f %{name}-%{version}-filelist |
252 |
|
|
%defattr(-,root,root) |
253 |
|
|
|
254 |
|
|
%pre |
255 |
|
|
%preun |
256 |
|
|
%post |
257 |
reetspetit |
1.6 |
|
258 |
unnilennium |
1.1 |
/sbin/e-smith/expand-template /etc/rc.d/init.d/masq |
259 |
|
|
/sbin/e-smith/expand-template /etc/inittab |
260 |
|
|
/sbin/init q |
261 |
|
|
|
262 |
|
|
|
263 |
reetspetit |
1.11 |
echo "see https://wiki.contribs.org/Libreswan" |
264 |
unnilennium |
1.1 |
|
265 |
|
|
%postun |
266 |
|
|
/sbin/e-smith/expand-template /etc/rc.d/init.d/masq |
267 |
|
|
/sbin/e-smith/expand-template /etc/inittab |
268 |
|
|
/sbin/init q |