1 |
unnilennium |
1.1 |
%define name smeserver-openswan |
2 |
|
|
%define version 0.6 |
3 |
|
|
%define release 1 |
4 |
|
|
Summary: Plugin to enable IPSEC connections |
5 |
|
|
Name: %{name} |
6 |
|
|
Version: %{version} |
7 |
|
|
Release: %{release} |
8 |
|
|
License: GNU GPL version 2 |
9 |
|
|
URL: http://libreswan.org/ |
10 |
|
|
Group: SMEserver/addon |
11 |
|
|
Source: %{name}-%{version}.tar.gz |
12 |
|
|
BuildRoot: /var/tmp/%{name}-%{version} |
13 |
|
|
BuildArchitectures: noarch |
14 |
|
|
BuildRequires: e-smith-devtools |
15 |
|
|
Requires: e-smith-release >= 8.0 |
16 |
|
|
Requires: openswan >= 2.6.38 |
17 |
|
|
AutoReqProv: no |
18 |
|
|
|
19 |
|
|
%description |
20 |
|
|
Openswan is a free software implementation of the most widely supported and standarised VPN protocol based on ("IPsec") and the Internet Key Exchange ("IKE") |
21 |
|
|
|
22 |
|
|
%changelog |
23 |
|
|
* Sat Dec 05 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.6-1 |
24 |
|
|
- New Branch for openswan on v8 |
25 |
|
|
|
26 |
|
|
* Wed Nov 25 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-9 |
27 |
|
|
- Copied code to openswan contrib as libreswan contrib is now LibreSwan specific |
28 |
|
|
|
29 |
|
|
* Wed Nov 25 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-8 |
30 |
|
|
- Revised masq templates - disable on ipsec disable |
31 |
|
|
- Template ipsec.secrets so Terry won't break it again |
32 |
|
|
- Set requires e-smith >=9 and libreswan >=3.14 |
33 |
|
|
|
34 |
|
|
* Wed Nov 18 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-7 |
35 |
|
|
- add 90adjustESP |
36 |
|
|
|
37 |
|
|
* Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-6 |
38 |
|
|
- more update to masq firewalls - change -p 50 to -p ESP |
39 |
|
|
|
40 |
|
|
* Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-5 |
41 |
|
|
- update masq firewall rules |
42 |
|
|
- document clean up |
43 |
|
|
|
44 |
|
|
* Wed May 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-4 |
45 |
|
|
- set dpd actions off if ipsec is 'add' |
46 |
|
|
- add salifetime key and rename ikelifetime and keylife |
47 |
|
|
- change defaults for salifetime and ikelifetime |
48 |
|
|
- add in rsasig support |
49 |
|
|
|
50 |
|
|
* Wed Apr 22 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-3 |
51 |
|
|
- change default ike from aes-sha to aes-sha1 |
52 |
|
|
|
53 |
|
|
* Tue Mar 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-2 |
54 |
|
|
- More minor fixes - should work OK with xl2tpd |
55 |
|
|
|
56 |
|
|
* Thu Mar 19 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-1 |
57 |
|
|
- Remove templates2expand and added to createlinks |
58 |
|
|
- modified ipsec.secret template |
59 |
|
|
- various other fixes |
60 |
|
|
|
61 |
|
|
* Fri Mar 13 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-5 |
62 |
|
|
- Big changes again - now have PreviousState to detect changes |
63 |
|
|
- Createlinks to S10 to run after expand-templates |
64 |
|
|
|
65 |
|
|
* Thu Mar 5 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-4 |
66 |
|
|
- Changed lots. Removed sysctl.conf template |
67 |
|
|
- Changed firewall template |
68 |
|
|
|
69 |
|
|
* Tue Mar 3 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-3 |
70 |
|
|
- Load of code tidying and prep from xl2tpd |
71 |
|
|
|
72 |
|
|
* Fri Feb 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-2 |
73 |
|
|
- Update action script and allow for system not in gateway mode |
74 |
|
|
- add ike and phase2alg db settings |
75 |
|
|
|
76 |
|
|
* Tue Feb 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-1 |
77 |
|
|
- New ipsec-action script |
78 |
|
|
- Numerous template changes |
79 |
|
|
|
80 |
|
|
* Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-1 |
81 |
|
|
- remove debugging lines |
82 |
|
|
- remove expand templates from spec file |
83 |
|
|
- add status check for ipsec.conf |
84 |
|
|
- add comment to masq template |
85 |
|
|
- updated db defaults |
86 |
|
|
- ipsec.conf not expanded on install |
87 |
|
|
- missed auto=start |
88 |
|
|
|
89 |
|
|
* Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.2-1 |
90 |
|
|
- remove rc.local modifications |
91 |
|
|
- add /etc/sysctl.conf patches |
92 |
|
|
|
93 |
|
|
* Thu Jan 15 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-1 |
94 |
|
|
- initial release |
95 |
|
|
|
96 |
|
|
%prep |
97 |
|
|
%setup |
98 |
|
|
|
99 |
|
|
%build |
100 |
|
|
perl createlinks |
101 |
|
|
|
102 |
|
|
%install |
103 |
|
|
rm -rf $RPM_BUILD_ROOT |
104 |
|
|
(cd root ; find . -depth -print | cpio -dump $RPM_BUILD_ROOT) |
105 |
|
|
rm -f %{name}-%{version}-filelist |
106 |
|
|
/sbin/e-smith/genfilelist $RPM_BUILD_ROOT > %{name}-%{version}-filelist |
107 |
|
|
echo "%doc COPYING" >> %{name}-%{version}-filelist |
108 |
|
|
|
109 |
|
|
|
110 |
|
|
%clean |
111 |
|
|
cd .. |
112 |
|
|
rm -rf %{name}-%{version} |
113 |
|
|
|
114 |
|
|
%files -f %{name}-%{version}-filelist |
115 |
|
|
%defattr(-,root,root) |
116 |
|
|
|
117 |
|
|
%pre |
118 |
|
|
%preun |
119 |
|
|
%post |
120 |
|
|
|
121 |
|
|
/sbin/e-smith/expand-template /etc/rc.d/init.d/masq |
122 |
|
|
/sbin/e-smith/expand-template /etc/inittab |
123 |
|
|
/sbin/init q |
124 |
|
|
|
125 |
|
|
|
126 |
|
|
echo "see http://wiki.contribs.org/IPSEC" |
127 |
|
|
|
128 |
|
|
%postun |
129 |
|
|
/sbin/e-smith/expand-template /etc/rc.d/init.d/masq |
130 |
|
|
/sbin/e-smith/expand-template /etc/inittab |
131 |
|
|
/sbin/init q |