smeserver-libreswan/contribs9/smeserver-libreswan.spec

%define name smeserver-libreswan
%define version 0.5
%define release 15
Summary: Plugin to enable IPSEC connections
Name: %{name}
Version: %{version}
Release: %{release}%{?dist}
License: GNU GPL version 2
URL: http://libreswan.org/
Group: SMEserver/addon
Source: %{name}-%{version}.tar.gz
BuildRoot: /var/tmp/%{name}-%{version}
BuildArchitectures: noarch
BuildRequires: e-smith-devtools
Requires:  e-smith-release >= 9.0
Requires:  libreswan >= 3.14
AutoReqProv: no

%description
Libreswan is a free software implementation of the most widely supported and standardised VPN protocol based on ("IPsec") and the Internet Key Exchange ("IKE")

%changelog
* Wed Mar 09 2016 JP Pialasse <tests@pialasse.com> 0.5-15.sme
- first import in SME buildsys

* Wed Feb 17 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-13
- Fix small typo in readme

* Fri Dec 04 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-12
- Add keyingtries
- Finally fix add issues using asynchronous

* Wed Dec 02 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-11
- Determine host IPtype - static or dynamic IP
- auto --up changed to exec
- Add checks for Left/Right ID in secrets file

* Tue Dec 01 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-10
- Allow dynamic addresses
- Add iptype
- disallow " in PSK passwords
- Revised logging messages

* Mon Nov 30 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-9
- Amended templates to allow for rsasig. Early cert settings removed

* Wed Nov 25 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-8
- Revised masq templates - disable on ipsec disable
- Template ipsec.secrets so Terry won't break it again
- Set requires e-smith >=9 and libreswan >=3.14

* Wed Nov 18 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-7
- add 90adjustESP

* Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-6
- more update to masq firewalls - change -p 50 to -p ESP

* Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-5
- update masq firewall rules
- document clean up

* Wed May 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-4
- set dpd actions off if ipsec is 'add'
- add salifetime key and rename ikelifetime and keylife
- change defaults for salifetime and ikelifetime
- add in rsasig support

* Wed Apr 22 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-3
- change default ike from aes-sha to aes-sha1

* Tue Mar 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-2
- More minor fixes - should work OK with xl2tpd

* Thu Mar 19 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-1
- Remove templates2expand and added to createlinks
- modified ipsec.secret template
- various other fixes

* Fri Mar 13 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-5
- Big changes again - now have PreviousState to detect changes
- Createlinks to S10 to run after expand-templates

* Thu Mar 5 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-4
- Changed lots. Removed sysctl.conf template
- Changed firewall template

* Tue Mar 3 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-3
- Load of code tidying and prep from xl2tpd

* Fri Feb 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-2
- Update action script and allow for system not in gateway mode
- add ike and phase2alg db settings

* Tue Feb 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-1
- New ipsec-action script
- Numerous template changes

* Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-1
- remove debugging lines
- remove expand templates from spec file
- add status check for ipsec.conf
- add comment to masq template
- updated db defaults
- ipsec.conf not expanded on install
- missed auto=start

* Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.2-1
- remove rc.local modifications
- add /etc/sysctl.conf patches

* Thu Jan 15 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-1
- initial release

%prep
%setup

%build
perl createlinks

%install
rm -rf $RPM_BUILD_ROOT
(cd root ; find . -depth -print | cpio -dump $RPM_BUILD_ROOT)
rm -f %{name}-%{version}-filelist
/sbin/e-smith/genfilelist $RPM_BUILD_ROOT > %{name}-%{version}-filelist
echo "%doc COPYING" >> %{name}-%{version}-filelist


%clean
cd ..
rm -rf %{name}-%{version}

%files -f %{name}-%{version}-filelist
%defattr(-,root,root)

%pre
%preun
%post

/sbin/e-smith/expand-template /etc/rc.d/init.d/masq
/sbin/e-smith/expand-template /etc/inittab
/sbin/init q


echo "see http://wiki.contribs.org/IPSEC"

%postun
/sbin/e-smith/expand-template /etc/rc.d/init.d/masq
/sbin/e-smith/expand-template /etc/inittab
/sbin/init q
1	unnilennium	1.1	%define name smeserver-libreswan
2			%define version 0.5
3	unnilennium	1.3	%define release 15
4	unnilennium	1.1	Summary: Plugin to enable IPSEC connections
5			Name: %{name}
6			Version: %{version}
7	unnilennium	1.3	Release: %{release}%{?dist}
8	unnilennium	1.1	License: GNU GPL version 2
9			URL: http://libreswan.org/
10			Group: SMEserver/addon
11			Source: %{name}-%{version}.tar.gz
12			BuildRoot: /var/tmp/%{name}-%{version}
13			BuildArchitectures: noarch
14			BuildRequires: e-smith-devtools
15			Requires: e-smith-release >= 9.0
16			Requires: libreswan >= 3.14
17			AutoReqProv: no
18
19			%description
20			Libreswan is a free software implementation of the most widely supported and standardised VPN protocol based on ("IPsec") and the Internet Key Exchange ("IKE")
21
22			%changelog
23	unnilennium	1.3	* Wed Mar 09 2016 JP Pialasse <tests@pialasse.com> 0.5-15.sme
24	unnilennium	1.2	- first import in SME buildsys
25
26	unnilennium	1.1	* Wed Feb 17 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-13
27			- Fix small typo in readme
28
29			* Fri Dec 04 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-12
30			- Add keyingtries
31			- Finally fix add issues using asynchronous
32
33			* Wed Dec 02 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-11
34			- Determine host IPtype - static or dynamic IP
35			- auto --up changed to exec
36			- Add checks for Left/Right ID in secrets file
37
38			* Tue Dec 01 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-10
39			- Allow dynamic addresses
40			- Add iptype
41			- disallow " in PSK passwords
42			- Revised logging messages
43
44			* Mon Nov 30 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-9
45			- Amended templates to allow for rsasig. Early cert settings removed
46
47			* Wed Nov 25 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-8
48			- Revised masq templates - disable on ipsec disable
49			- Template ipsec.secrets so Terry won't break it again
50			- Set requires e-smith >=9 and libreswan >=3.14
51
52			* Wed Nov 18 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-7
53			- add 90adjustESP
54
55			* Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-6
56			- more update to masq firewalls - change -p 50 to -p ESP
57
58			* Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-5
59			- update masq firewall rules
60			- document clean up
61
62			* Wed May 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-4
63			- set dpd actions off if ipsec is 'add'
64			- add salifetime key and rename ikelifetime and keylife
65			- change defaults for salifetime and ikelifetime
66			- add in rsasig support
67
68			* Wed Apr 22 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-3
69			- change default ike from aes-sha to aes-sha1
70
71			* Tue Mar 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-2
72			- More minor fixes - should work OK with xl2tpd
73
74			* Thu Mar 19 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-1
75			- Remove templates2expand and added to createlinks
76			- modified ipsec.secret template
77			- various other fixes
78
79			* Fri Mar 13 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-5
80			- Big changes again - now have PreviousState to detect changes
81			- Createlinks to S10 to run after expand-templates
82
83			* Thu Mar 5 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-4
84			- Changed lots. Removed sysctl.conf template
85			- Changed firewall template
86
87			* Tue Mar 3 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-3
88			- Load of code tidying and prep from xl2tpd
89
90			* Fri Feb 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-2
91			- Update action script and allow for system not in gateway mode
92			- add ike and phase2alg db settings
93
94			* Tue Feb 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-1
95			- New ipsec-action script
96			- Numerous template changes
97
98			* Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-1
99			- remove debugging lines
100			- remove expand templates from spec file
101			- add status check for ipsec.conf
102			- add comment to masq template
103			- updated db defaults
104			- ipsec.conf not expanded on install
105			- missed auto=start
106
107			* Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.2-1
108			- remove rc.local modifications
109			- add /etc/sysctl.conf patches
110
111			* Thu Jan 15 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-1
112			- initial release
113
114			%prep
115			%setup
116
117			%build
118			perl createlinks
119
120			%install
121			rm -rf $RPM_BUILD_ROOT
122			(cd root ; find . -depth -print \| cpio -dump $RPM_BUILD_ROOT)
123			rm -f %{name}-%{version}-filelist
124			/sbin/e-smith/genfilelist $RPM_BUILD_ROOT > %{name}-%{version}-filelist
125			echo "%doc COPYING" >> %{name}-%{version}-filelist
126
127
128			%clean
129			cd ..
130			rm -rf %{name}-%{version}
131
132			%files -f %{name}-%{version}-filelist
133			%defattr(-,root,root)
134
135			%pre
136			%preun
137			%post
138
139			/sbin/e-smith/expand-template /etc/rc.d/init.d/masq
140			/sbin/e-smith/expand-template /etc/inittab
141			/sbin/init q
142
143
144			echo "see http://wiki.contribs.org/IPSEC"
145
146			%postun
147			/sbin/e-smith/expand-template /etc/rc.d/init.d/masq
148			/sbin/e-smith/expand-template /etc/inittab
149			/sbin/init q