1 |
%define name smeserver-libreswan |
%define name smeserver-libreswan |
2 |
%define version 0.5 |
%define version 0.5 |
3 |
%define release 15 |
%define release 33 |
4 |
Summary: Plugin to enable IPSEC connections |
Summary: Plugin to enable IPSEC connections |
5 |
Name: %{name} |
Name: %{name} |
6 |
Version: %{version} |
Version: %{version} |
9 |
URL: http://libreswan.org/ |
URL: http://libreswan.org/ |
10 |
Group: SMEserver/addon |
Group: SMEserver/addon |
11 |
Source: %{name}-%{version}.tar.gz |
Source: %{name}-%{version}.tar.gz |
12 |
|
Patch1: smeserver-libreswan-fix-masq-templates.patch |
13 |
|
Patch2: smeserver-libreswan-move-logfile.patch |
14 |
|
Patch3: smeserver-libreswan-add-debug-key.patch |
15 |
|
Patch4: smeserver-libreswan-fix-rsa-id.patch |
16 |
|
Patch5: smeserver-libreswan-fix-createlinks.patch |
17 |
|
Patch6: smeserver-libreswan-ikev2-logrotate.patch |
18 |
|
Patch7: smeserver-libreswan-add-certificates.patch |
19 |
|
Patch8: smeserver-libreswan-modify-identifiers.patch |
20 |
|
Patch9: smeserver-libreswan-modify-identifiers1.patch |
21 |
|
Patch10: smeserver-libreswan-forceencaps-l2tpd.patch |
22 |
|
Patch11: smeserver-libreswan-variable-network-interfaces.patch |
23 |
|
Patch12: smeserver-libreswan-remove-obsoletes.patch |
24 |
|
Patch13: smeserver-libreswan-add-reauth.patch |
25 |
|
Patch14: smeserver-libreswan-check-l2tpd-status.patch |
26 |
|
Patch15: smeserver-libreswan-include-l2tpd-rightsubnet.patch |
27 |
|
Patch16: smeserver-libreswan-fix-xl2tpd-status-check.patch |
28 |
|
Patch17: smeserver-libreswan-createlinks.patch |
29 |
|
|
30 |
BuildRoot: /var/tmp/%{name}-%{version} |
BuildRoot: /var/tmp/%{name}-%{version} |
31 |
BuildArchitectures: noarch |
BuildArchitectures: noarch |
32 |
BuildRequires: e-smith-devtools |
BuildRequires: e-smith-devtools |
33 |
Requires: e-smith-release >= 9.0 |
Requires: e-smith-release >= 9.2 |
34 |
Requires: libreswan >= 3.14 |
Requires: libreswan >= 3.29 |
35 |
AutoReqProv: no |
AutoReqProv: no |
36 |
|
|
37 |
%description |
%description |
38 |
Libreswan is a free software implementation of the most widely supported and standardised VPN protocol based on ("IPsec") and the Internet Key Exchange ("IKE") |
Libreswan is a free software implementation of the most widely supported and standardised VPN protocol based on ("IPsec") and the Internet Key Exchange ("IKE") |
39 |
|
|
40 |
%changelog |
%changelog |
41 |
|
* Tue Feb 14 2020 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-33.sme |
42 |
|
- update keyingtries |
43 |
|
- update virtual-private |
44 |
|
|
45 |
|
* Thu Jan 30 2020 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-32.sme |
46 |
|
- Fix xl2tpd status check |
47 |
|
|
48 |
|
* Thu Oct 17 2019 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-31.sme |
49 |
|
- Allow rightsubnet for xl2tpd in virtual_private |
50 |
|
- Add check for empty virtual_private hosts |
51 |
|
|
52 |
|
* Sun Oct 13 2019 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-30.sme |
53 |
|
- Fix issue when there is no xl2tpd key |
54 |
|
|
55 |
|
* Sat Aug 31 2019 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-29.sme |
56 |
|
- Bump required Libreswan to 3.29 |
57 |
|
- add reauth option |
58 |
|
|
59 |
|
* Thu Jun 21 2018 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-28.sme |
60 |
|
- Bump required Libreswan to 3.23 |
61 |
|
- Change forceencaps to encapsulation |
62 |
|
- Remove obsolete nat_traversal |
63 |
|
- Modify ipsec.conf for no rightsubnet in xl2tpd |
64 |
|
|
65 |
|
* Tue Sep 19 2017 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-27.sme |
66 |
|
- Allow variable network interface names - Stefano Zamboni |
67 |
|
|
68 |
|
* Thu Jun 15 2017 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-26.sme |
69 |
|
- add keep-alive option in main ipsec.conf |
70 |
|
- add forceencaps option overall default and per connection |
71 |
|
- small code tidy |
72 |
|
- Add support for L2TPD |
73 |
|
|
74 |
|
* Thu Jan 26 2017 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-25.sme |
75 |
|
- Fix the ipsec.conf as well |
76 |
|
- remove automatic \@ in IDs - Fixes [SME: 9729] |
77 |
|
|
78 |
|
* Thu Jan 26 2017 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-24.sme |
79 |
|
- remove automatic \@ in IDs - Fixes [SME: 9729] |
80 |
|
- fix swapped left/right IDs in password file |
81 |
|
|
82 |
|
* Wed Jan 25 2017 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-23.sme |
83 |
|
- Add the ability to use PEM/PKCS#12 certificates - fixes [SME: 9942] |
84 |
|
- lots of code tidying |
85 |
|
|
86 |
|
* Wed Dec 21 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-22.sme |
87 |
|
- update logrotate completely now I realise it is symlinked |
88 |
|
- remove UPDPort and add UPDPorts due to ipsec v2 |
89 |
|
|
90 |
|
* Wed Dec 21 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-21.sme |
91 |
|
- add more variations for ike v1/2 |
92 |
|
- remove logrotate template |
93 |
|
- add /etc/e-smith/events/logrotate/logfiles2timestamp/var/log/pluto.log |
94 |
|
- Fix some log noise when first installed and still disabled |
95 |
|
|
96 |
|
* Sat Apr 23 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-20.sme |
97 |
|
- Fix typo in createlinks for sysctl.conf |
98 |
|
|
99 |
|
* Mon Apr 04 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-19.sme |
100 |
|
- Fix ID in ipsec.secrets if ID is set |
101 |
|
|
102 |
|
* Thu Mar 24 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-18.sme |
103 |
|
- Add debug db key to /etc/ipsec.conf |
104 |
|
- Remove setting public/private keys as they won't affect unless templates are re-expanded |
105 |
|
- Set xfrm_larval_drop drop correctly |
106 |
|
|
107 |
|
* Tue Mar 22 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-17.sme |
108 |
|
- Move pluto.log to /var/log/pluto |
109 |
|
- bump libreswan requires version to 3.16 |
110 |
|
- regenerate masq template on ipsec-update |
111 |
|
- change wiki location page |
112 |
|
- add sysctl.conf template |
113 |
|
- modify masq templates for ipsec status enabled/disabled |
114 |
|
- only load ipsec.conf rather than *.conf to avoid loading v6neighbor-hole.conf |
115 |
|
|
116 |
|
* Thu Mar 10 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-16.sme |
117 |
|
- Fix masq templates for missing db entries on install |
118 |
|
|
119 |
* Wed Mar 09 2016 JP Pialasse <tests@pialasse.com> 0.5-15.sme |
* Wed Mar 09 2016 JP Pialasse <tests@pialasse.com> 0.5-15.sme |
120 |
- first import in SME buildsys |
- first import in SME buildsys |
121 |
|
|
209 |
|
|
210 |
%prep |
%prep |
211 |
%setup |
%setup |
212 |
|
%patch1 -p1 |
213 |
|
%patch2 -p1 |
214 |
|
%patch3 -p1 |
215 |
|
%patch4 -p1 |
216 |
|
%patch5 -p1 |
217 |
|
%patch6 -p1 |
218 |
|
%patch7 -p1 |
219 |
|
%patch8 -p1 |
220 |
|
%patch9 -p1 |
221 |
|
%patch10 -p1 |
222 |
|
%patch11 -p1 |
223 |
|
%patch12 -p1 |
224 |
|
%patch13 -p1 |
225 |
|
%patch14 -p1 |
226 |
|
%patch15 -p1 |
227 |
|
%patch16 -p1 |
228 |
|
%patch17 -p1 |
229 |
|
|
230 |
%build |
%build |
231 |
perl createlinks |
perl createlinks |
254 |
/sbin/init q |
/sbin/init q |
255 |
|
|
256 |
|
|
257 |
echo "see http://wiki.contribs.org/IPSEC" |
echo "see https://wiki.contribs.org/Libreswan" |
258 |
|
|
259 |
%postun |
%postun |
260 |
/sbin/e-smith/expand-template /etc/rc.d/init.d/masq |
/sbin/e-smith/expand-template /etc/rc.d/init.d/masq |