smeserver-libreswan/contribs9/smeserver-libreswan.spec

%define name smeserver-libreswan
%define version 0.5
%define release 23
Summary: Plugin to enable IPSEC connections
Name: %{name}
Version: %{version}
Release: %{release}%{?dist}
License: GNU GPL version 2
URL: http://libreswan.org/
Group: SMEserver/addon
Source: %{name}-%{version}.tar.gz
Patch1: smeserver-libreswan-fix-masq-templates.patch
Patch2: smeserver-libreswan-move-logfile.patch
Patch3: smeserver-libreswan-add-debug-key.patch
Patch4: smeserver-libreswan-fix-rsa-id.patch
Patch5: smeserver-libreswan-fix-createlinks.patch
Patch6: smeserver-libreswan-ikev2-logrotate.patch
Patch7: smeserver-libreswan-add-certificates.patch


BuildRoot: /var/tmp/%{name}-%{version}
BuildArchitectures: noarch
BuildRequires: e-smith-devtools
Requires:  e-smith-release >= 9.0
Requires:  libreswan >= 3.16
AutoReqProv: no

%description
Libreswan is a free software implementation of the most widely supported and standardised VPN protocol based on ("IPsec") and the Internet Key Exchange ("IKE")

%changelog
* Wed Jan 25 2017 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-23.sme
- Add the ability to use PEM/PKCS#12 certificates - fixes [SME: 9942]
- lots of code tidying

* Wed Dec 21 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-22.sme
- update logrotate completely now I realise it is symlinked
- remove UPDPort and add UPDPorts due to ipsec v2

* Wed Dec 21 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-21.sme
- add more variations for ike v1/2
- remove logrotate template
- add /etc/e-smith/events/logrotate/logfiles2timestamp/var/log/pluto.log
- Fix some log noise when first installed and still disabled

* Sat Apr 23 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-20.sme
- Fix typo in createlinks for sysctl.conf

* Mon Apr 04 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-19.sme
- Fix ID in ipsec.secrets if ID is set

* Thu Mar 24 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-18.sme
- Add debug db key to /etc/ipsec.conf
- Remove setting public/private keys as they won't affect unless templates are re-expanded
- Set xfrm_larval_drop drop correctly

* Tue Mar 22 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-17.sme
- Move pluto.log to /var/log/pluto
- bump libreswan requires version to 3.16
- regenerate masq template on ipsec-update
- change wiki location page
- add sysctl.conf template
- modify masq templates for ipsec status enabled/disabled
- only load ipsec.conf rather than *.conf to avoid loading v6neighbor-hole.conf

* Thu Mar 10 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-16.sme
- Fix masq templates for missing db entries on install

* Wed Mar 09 2016 JP Pialasse <tests@pialasse.com> 0.5-15.sme
- first import in SME buildsys

* Wed Feb 17 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-13
- Fix small typo in readme

* Fri Dec 04 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-12
- Add keyingtries
- Finally fix add issues using asynchronous

* Wed Dec 02 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-11
- Determine host IPtype - static or dynamic IP
- auto --up changed to exec
- Add checks for Left/Right ID in secrets file

* Tue Dec 01 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-10
- Allow dynamic addresses
- Add iptype
- disallow " in PSK passwords
- Revised logging messages

* Mon Nov 30 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-9
- Amended templates to allow for rsasig. Early cert settings removed

* Wed Nov 25 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-8
- Revised masq templates - disable on ipsec disable
- Template ipsec.secrets so Terry won't break it again
- Set requires e-smith >=9 and libreswan >=3.14

* Wed Nov 18 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-7
- add 90adjustESP

* Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-6
- more update to masq firewalls - change -p 50 to -p ESP

* Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-5
- update masq firewall rules
- document clean up

* Wed May 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-4
- set dpd actions off if ipsec is 'add'
- add salifetime key and rename ikelifetime and keylife
- change defaults for salifetime and ikelifetime
- add in rsasig support

* Wed Apr 22 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-3
- change default ike from aes-sha to aes-sha1

* Tue Mar 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-2
- More minor fixes - should work OK with xl2tpd

* Thu Mar 19 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-1
- Remove templates2expand and added to createlinks
- modified ipsec.secret template
- various other fixes

* Fri Mar 13 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-5
- Big changes again - now have PreviousState to detect changes
- Createlinks to S10 to run after expand-templates

* Thu Mar 5 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-4
- Changed lots. Removed sysctl.conf template
- Changed firewall template

* Tue Mar 3 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-3
- Load of code tidying and prep from xl2tpd

* Fri Feb 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-2
- Update action script and allow for system not in gateway mode
- add ike and phase2alg db settings

* Tue Feb 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-1
- New ipsec-action script
- Numerous template changes

* Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-1
- remove debugging lines
- remove expand templates from spec file
- add status check for ipsec.conf
- add comment to masq template
- updated db defaults
- ipsec.conf not expanded on install
- missed auto=start

* Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.2-1
- remove rc.local modifications
- add /etc/sysctl.conf patches

* Thu Jan 15 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-1
- initial release

%prep
%setup
%patch1 -p1
%patch2 -p1
%patch3 -p1
%patch4 -p1
%patch5 -p1
%patch6 -p1
%patch7 -p1

%build
perl createlinks

%install
rm -rf $RPM_BUILD_ROOT
(cd root ; find . -depth -print | cpio -dump $RPM_BUILD_ROOT)
rm -f %{name}-%{version}-filelist
/sbin/e-smith/genfilelist $RPM_BUILD_ROOT > %{name}-%{version}-filelist
echo "%doc COPYING" >> %{name}-%{version}-filelist


%clean
cd ..
rm -rf %{name}-%{version}

%files -f %{name}-%{version}-filelist
%defattr(-,root,root)

%pre
%preun
%post

/sbin/e-smith/expand-template /etc/rc.d/init.d/masq
/sbin/e-smith/expand-template /etc/inittab
/sbin/init q


echo "see http://wiki.contribs.org/VPN"

%postun
/sbin/e-smith/expand-template /etc/rc.d/init.d/masq
/sbin/e-smith/expand-template /etc/inittab
/sbin/init q
1	%define name smeserver-libreswan
2	%define version 0.5
3	%define release 23
4	Summary: Plugin to enable IPSEC connections
5	Name: %{name}
6	Version: %{version}
7	Release: %{release}%{?dist}
8	License: GNU GPL version 2
9	URL: http://libreswan.org/
10	Group: SMEserver/addon
11	Source: %{name}-%{version}.tar.gz
12	Patch1: smeserver-libreswan-fix-masq-templates.patch
13	Patch2: smeserver-libreswan-move-logfile.patch
14	Patch3: smeserver-libreswan-add-debug-key.patch
15	Patch4: smeserver-libreswan-fix-rsa-id.patch
16	Patch5: smeserver-libreswan-fix-createlinks.patch
17	Patch6: smeserver-libreswan-ikev2-logrotate.patch
18	Patch7: smeserver-libreswan-add-certificates.patch
19
20
21	BuildRoot: /var/tmp/%{name}-%{version}
22	BuildArchitectures: noarch
23	BuildRequires: e-smith-devtools
24	Requires: e-smith-release >= 9.0
25	Requires: libreswan >= 3.16
26	AutoReqProv: no
27
28	%description
29	Libreswan is a free software implementation of the most widely supported and standardised VPN protocol based on ("IPsec") and the Internet Key Exchange ("IKE")
30
31	%changelog
32	* Wed Jan 25 2017 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-23.sme
33	- Add the ability to use PEM/PKCS#12 certificates - fixes [SME: 9942]
34	- lots of code tidying
35
36	* Wed Dec 21 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-22.sme
37	- update logrotate completely now I realise it is symlinked
38	- remove UPDPort and add UPDPorts due to ipsec v2
39
40	* Wed Dec 21 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-21.sme
41	- add more variations for ike v1/2
42	- remove logrotate template
43	- add /etc/e-smith/events/logrotate/logfiles2timestamp/var/log/pluto.log
44	- Fix some log noise when first installed and still disabled
45
46	* Sat Apr 23 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-20.sme
47	- Fix typo in createlinks for sysctl.conf
48
49	* Mon Apr 04 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-19.sme
50	- Fix ID in ipsec.secrets if ID is set
51
52	* Thu Mar 24 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-18.sme
53	- Add debug db key to /etc/ipsec.conf
54	- Remove setting public/private keys as they won't affect unless templates are re-expanded
55	- Set xfrm_larval_drop drop correctly
56
57	* Tue Mar 22 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-17.sme
58	- Move pluto.log to /var/log/pluto
59	- bump libreswan requires version to 3.16
60	- regenerate masq template on ipsec-update
61	- change wiki location page
62	- add sysctl.conf template
63	- modify masq templates for ipsec status enabled/disabled
64	- only load ipsec.conf rather than *.conf to avoid loading v6neighbor-hole.conf
65
66	* Thu Mar 10 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-16.sme
67	- Fix masq templates for missing db entries on install
68
69	* Wed Mar 09 2016 JP Pialasse <tests@pialasse.com> 0.5-15.sme
70	- first import in SME buildsys
71
72	* Wed Feb 17 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-13
73	- Fix small typo in readme
74
75	* Fri Dec 04 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-12
76	- Add keyingtries
77	- Finally fix add issues using asynchronous
78
79	* Wed Dec 02 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-11
80	- Determine host IPtype - static or dynamic IP
81	- auto --up changed to exec
82	- Add checks for Left/Right ID in secrets file
83
84	* Tue Dec 01 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-10
85	- Allow dynamic addresses
86	- Add iptype
87	- disallow " in PSK passwords
88	- Revised logging messages
89
90	* Mon Nov 30 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-9
91	- Amended templates to allow for rsasig. Early cert settings removed
92
93	* Wed Nov 25 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-8
94	- Revised masq templates - disable on ipsec disable
95	- Template ipsec.secrets so Terry won't break it again
96	- Set requires e-smith >=9 and libreswan >=3.14
97
98	* Wed Nov 18 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-7
99	- add 90adjustESP
100
101	* Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-6
102	- more update to masq firewalls - change -p 50 to -p ESP
103
104	* Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-5
105	- update masq firewall rules
106	- document clean up
107
108	* Wed May 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-4
109	- set dpd actions off if ipsec is 'add'
110	- add salifetime key and rename ikelifetime and keylife
111	- change defaults for salifetime and ikelifetime
112	- add in rsasig support
113
114	* Wed Apr 22 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-3
115	- change default ike from aes-sha to aes-sha1
116
117	* Tue Mar 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-2
118	- More minor fixes - should work OK with xl2tpd
119
120	* Thu Mar 19 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-1
121	- Remove templates2expand and added to createlinks
122	- modified ipsec.secret template
123	- various other fixes
124
125	* Fri Mar 13 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-5
126	- Big changes again - now have PreviousState to detect changes
127	- Createlinks to S10 to run after expand-templates
128
129	* Thu Mar 5 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-4
130	- Changed lots. Removed sysctl.conf template
131	- Changed firewall template
132
133	* Tue Mar 3 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-3
134	- Load of code tidying and prep from xl2tpd
135
136	* Fri Feb 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-2
137	- Update action script and allow for system not in gateway mode
138	- add ike and phase2alg db settings
139
140	* Tue Feb 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-1
141	- New ipsec-action script
142	- Numerous template changes
143
144	* Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-1
145	- remove debugging lines
146	- remove expand templates from spec file
147	- add status check for ipsec.conf
148	- add comment to masq template
149	- updated db defaults
150	- ipsec.conf not expanded on install
151	- missed auto=start
152
153	* Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.2-1
154	- remove rc.local modifications
155	- add /etc/sysctl.conf patches
156
157	* Thu Jan 15 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-1
158	- initial release
159
160	%prep
161	%setup
162	%patch1 -p1
163	%patch2 -p1
164	%patch3 -p1
165	%patch4 -p1
166	%patch5 -p1
167	%patch6 -p1
168	%patch7 -p1
169
170	%build
171	perl createlinks
172
173	%install
174	rm -rf $RPM_BUILD_ROOT
175	(cd root ; find . -depth -print \| cpio -dump $RPM_BUILD_ROOT)
176	rm -f %{name}-%{version}-filelist
177	/sbin/e-smith/genfilelist $RPM_BUILD_ROOT > %{name}-%{version}-filelist
178	echo "%doc COPYING" >> %{name}-%{version}-filelist
179
180
181	%clean
182	cd ..
183	rm -rf %{name}-%{version}
184
185	%files -f %{name}-%{version}-filelist
186	%defattr(-,root,root)
187
188	%pre
189	%preun
190	%post
191
192	/sbin/e-smith/expand-template /etc/rc.d/init.d/masq
193	/sbin/e-smith/expand-template /etc/inittab
194	/sbin/init q
195
196
197	echo "see http://wiki.contribs.org/VPN"
198
199	%postun
200	/sbin/e-smith/expand-template /etc/rc.d/init.d/masq
201	/sbin/e-smith/expand-template /etc/inittab
202	/sbin/init q