1 |
%define name smeserver-libreswan |
2 |
%define version 0.5 |
3 |
%define release 14 |
4 |
Summary: Plugin to enable IPSEC connections |
5 |
Name: %{name} |
6 |
Version: %{version} |
7 |
Release: %{release} |
8 |
License: GNU GPL version 2 |
9 |
URL: http://libreswan.org/ |
10 |
Group: SMEserver/addon |
11 |
Source: %{name}-%{version}.tar.gz |
12 |
BuildRoot: /var/tmp/%{name}-%{version} |
13 |
BuildArchitectures: noarch |
14 |
BuildRequires: e-smith-devtools |
15 |
Requires: e-smith-release >= 9.0 |
16 |
Requires: libreswan >= 3.14 |
17 |
AutoReqProv: no |
18 |
|
19 |
%description |
20 |
Libreswan is a free software implementation of the most widely supported and standardised VPN protocol based on ("IPsec") and the Internet Key Exchange ("IKE") |
21 |
|
22 |
%changelog |
23 |
* Wed Mar 09 2016 JP Pialasse <tests@pialasse.com> 0.5-14 |
24 |
- first import in SME buildsys |
25 |
|
26 |
* Wed Feb 17 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-13 |
27 |
- Fix small typo in readme |
28 |
|
29 |
* Fri Dec 04 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-12 |
30 |
- Add keyingtries |
31 |
- Finally fix add issues using asynchronous |
32 |
|
33 |
* Wed Dec 02 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-11 |
34 |
- Determine host IPtype - static or dynamic IP |
35 |
- auto --up changed to exec |
36 |
- Add checks for Left/Right ID in secrets file |
37 |
|
38 |
* Tue Dec 01 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-10 |
39 |
- Allow dynamic addresses |
40 |
- Add iptype |
41 |
- disallow " in PSK passwords |
42 |
- Revised logging messages |
43 |
|
44 |
* Mon Nov 30 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-9 |
45 |
- Amended templates to allow for rsasig. Early cert settings removed |
46 |
|
47 |
* Wed Nov 25 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-8 |
48 |
- Revised masq templates - disable on ipsec disable |
49 |
- Template ipsec.secrets so Terry won't break it again |
50 |
- Set requires e-smith >=9 and libreswan >=3.14 |
51 |
|
52 |
* Wed Nov 18 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-7 |
53 |
- add 90adjustESP |
54 |
|
55 |
* Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-6 |
56 |
- more update to masq firewalls - change -p 50 to -p ESP |
57 |
|
58 |
* Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-5 |
59 |
- update masq firewall rules |
60 |
- document clean up |
61 |
|
62 |
* Wed May 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-4 |
63 |
- set dpd actions off if ipsec is 'add' |
64 |
- add salifetime key and rename ikelifetime and keylife |
65 |
- change defaults for salifetime and ikelifetime |
66 |
- add in rsasig support |
67 |
|
68 |
* Wed Apr 22 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-3 |
69 |
- change default ike from aes-sha to aes-sha1 |
70 |
|
71 |
* Tue Mar 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-2 |
72 |
- More minor fixes - should work OK with xl2tpd |
73 |
|
74 |
* Thu Mar 19 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-1 |
75 |
- Remove templates2expand and added to createlinks |
76 |
- modified ipsec.secret template |
77 |
- various other fixes |
78 |
|
79 |
* Fri Mar 13 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-5 |
80 |
- Big changes again - now have PreviousState to detect changes |
81 |
- Createlinks to S10 to run after expand-templates |
82 |
|
83 |
* Thu Mar 5 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-4 |
84 |
- Changed lots. Removed sysctl.conf template |
85 |
- Changed firewall template |
86 |
|
87 |
* Tue Mar 3 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-3 |
88 |
- Load of code tidying and prep from xl2tpd |
89 |
|
90 |
* Fri Feb 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-2 |
91 |
- Update action script and allow for system not in gateway mode |
92 |
- add ike and phase2alg db settings |
93 |
|
94 |
* Tue Feb 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-1 |
95 |
- New ipsec-action script |
96 |
- Numerous template changes |
97 |
|
98 |
* Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-1 |
99 |
- remove debugging lines |
100 |
- remove expand templates from spec file |
101 |
- add status check for ipsec.conf |
102 |
- add comment to masq template |
103 |
- updated db defaults |
104 |
- ipsec.conf not expanded on install |
105 |
- missed auto=start |
106 |
|
107 |
* Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.2-1 |
108 |
- remove rc.local modifications |
109 |
- add /etc/sysctl.conf patches |
110 |
|
111 |
* Thu Jan 15 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-1 |
112 |
- initial release |
113 |
|
114 |
%prep |
115 |
%setup |
116 |
|
117 |
%build |
118 |
perl createlinks |
119 |
|
120 |
%install |
121 |
rm -rf $RPM_BUILD_ROOT |
122 |
(cd root ; find . -depth -print | cpio -dump $RPM_BUILD_ROOT) |
123 |
rm -f %{name}-%{version}-filelist |
124 |
/sbin/e-smith/genfilelist $RPM_BUILD_ROOT > %{name}-%{version}-filelist |
125 |
echo "%doc COPYING" >> %{name}-%{version}-filelist |
126 |
|
127 |
|
128 |
%clean |
129 |
cd .. |
130 |
rm -rf %{name}-%{version} |
131 |
|
132 |
%files -f %{name}-%{version}-filelist |
133 |
%defattr(-,root,root) |
134 |
|
135 |
%pre |
136 |
%preun |
137 |
%post |
138 |
|
139 |
/sbin/e-smith/expand-template /etc/rc.d/init.d/masq |
140 |
/sbin/e-smith/expand-template /etc/inittab |
141 |
/sbin/init q |
142 |
|
143 |
|
144 |
echo "see http://wiki.contribs.org/IPSEC" |
145 |
|
146 |
%postun |
147 |
/sbin/e-smith/expand-template /etc/rc.d/init.d/masq |
148 |
/sbin/e-smith/expand-template /etc/inittab |
149 |
/sbin/init q |