smeserver-openswan/contribs8/smeserver-openswan.spec

%define name smeserver-openswan
%define version 0.6
%define release 3
Summary: Plugin to enable IPSEC connections
Name: %{name}
Version: %{version}
Release: %{release}%{?dist}
License: GNU GPL version 2
URL: http://libreswan.org/
Group: SMEserver/addon
Source: %{name}-%{version}.tar.gz
Patch1: smeserver-openswan-fix-masq-templates.patch
BuildRoot: /var/tmp/%{name}-%{version}
BuildArchitectures: noarch
BuildRequires: e-smith-devtools
Requires:  e-smith-release >= 8.0
Requires:  openswan >= 2.6.38
AutoReqProv: no

%description
Openswan is a free software implementation of the most widely supported and standarised VPN protocol based on ("IPsec") and the Internet Key Exchange ("IKE")

%changelog
* Tue Mar 22 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.6-3.sme
- Fix masq templates for missing db keys on install
- Move pluto.log to /var/log/pluto
- regenerate masq template on ipsec-update
- change wiki location page
- add sysctl.conf template
- modify masq templates for ipsec status enabled/disabled
- only load ipsec.conf rather than *.conf to avoid loading v6neighbor-hole.conf

* Wed Mar 09 2016 JP Pialasse <tests@pialasse.com> 0.6-2.sme
- first import in SME buildsys

* Sat Dec 05 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.6-1
- New Branch for openswan on v8

* Wed Nov 25 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-9
- Copied code to openswan contrib as libreswan contrib is now LibreSwan specific

* Wed Nov 25 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-8
- Revised masq templates - disable on ipsec disable
- Template ipsec.secrets so Terry won't break it again
- Set requires e-smith >=9 and libreswan >=3.14

* Wed Nov 18 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-7
- add 90adjustESP

* Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-6
- more update to masq firewalls - change -p 50 to -p ESP

* Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-5
- update masq firewall rules
- document clean up

* Wed May 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-4
- set dpd actions off if ipsec is 'add'
- add salifetime key and rename ikelifetime and keylife
- change defaults for salifetime and ikelifetime
- add in rsasig support

* Wed Apr 22 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-3
- change default ike from aes-sha to aes-sha1

* Tue Mar 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-2
- More minor fixes - should work OK with xl2tpd

* Thu Mar 19 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-1
- Remove templates2expand and added to createlinks
- modified ipsec.secret template
- various other fixes

* Fri Mar 13 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-5
- Big changes again - now have PreviousState to detect changes
- Createlinks to S10 to run after expand-templates

* Thu Mar 5 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-4
- Changed lots. Removed sysctl.conf template
- Changed firewall template

* Tue Mar 3 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-3
- Load of code tidying and prep from xl2tpd

* Fri Feb 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-2
- Update action script and allow for system not in gateway mode
- add ike and phase2alg db settings

* Tue Feb 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-1
- New ipsec-action script
- Numerous template changes

* Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-1
- remove debugging lines
- remove expand templates from spec file
- add status check for ipsec.conf
- add comment to masq template
- updated db defaults
- ipsec.conf not expanded on install
- missed auto=start

* Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.2-1
- remove rc.local modifications
- add /etc/sysctl.conf patches

* Thu Jan 15 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-1
- initial release

%prep
%setup
%patch1 -p1

%build
perl createlinks

%install
rm -rf $RPM_BUILD_ROOT
(cd root ; find . -depth -print | cpio -dump $RPM_BUILD_ROOT)
rm -f %{name}-%{version}-filelist
/sbin/e-smith/genfilelist $RPM_BUILD_ROOT > %{name}-%{version}-filelist
echo "%doc COPYING" >> %{name}-%{version}-filelist


%clean
cd ..
rm -rf %{name}-%{version}

%files -f %{name}-%{version}-filelist
%defattr(-,root,root)

%pre
%preun
%post

/sbin/e-smith/expand-template /etc/rc.d/init.d/masq
/sbin/e-smith/expand-template /etc/inittab
/sbin/init q


echo "see http://wiki.contribs.org/IPSEC"

%postun
/sbin/e-smith/expand-template /etc/rc.d/init.d/masq
/sbin/e-smith/expand-template /etc/inittab
/sbin/init q
1	unnilennium	1.1	%define name smeserver-openswan
2			%define version 0.6
3	reetspetit	1.3	%define release 3
4	unnilennium	1.1	Summary: Plugin to enable IPSEC connections
5			Name: %{name}
6			Version: %{version}
7	unnilennium	1.2	Release: %{release}%{?dist}
8	unnilennium	1.1	License: GNU GPL version 2
9			URL: http://libreswan.org/
10			Group: SMEserver/addon
11			Source: %{name}-%{version}.tar.gz
12	reetspetit	1.3	Patch1: smeserver-openswan-fix-masq-templates.patch
13	unnilennium	1.1	BuildRoot: /var/tmp/%{name}-%{version}
14			BuildArchitectures: noarch
15			BuildRequires: e-smith-devtools
16			Requires: e-smith-release >= 8.0
17			Requires: openswan >= 2.6.38
18			AutoReqProv: no
19
20			%description
21			Openswan is a free software implementation of the most widely supported and standarised VPN protocol based on ("IPsec") and the Internet Key Exchange ("IKE")
22
23			%changelog
24	reetspetit	1.3	* Tue Mar 22 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.6-3.sme
25			- Fix masq templates for missing db keys on install
26			- Move pluto.log to /var/log/pluto
27			- regenerate masq template on ipsec-update
28			- change wiki location page
29			- add sysctl.conf template
30			- modify masq templates for ipsec status enabled/disabled
31			- only load ipsec.conf rather than *.conf to avoid loading v6neighbor-hole.conf
32
33	unnilennium	1.2	* Wed Mar 09 2016 JP Pialasse <tests@pialasse.com> 0.6-2.sme
34			- first import in SME buildsys
35
36	unnilennium	1.1	* Sat Dec 05 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.6-1
37			- New Branch for openswan on v8
38
39			* Wed Nov 25 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-9
40			- Copied code to openswan contrib as libreswan contrib is now LibreSwan specific
41
42			* Wed Nov 25 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-8
43			- Revised masq templates - disable on ipsec disable
44			- Template ipsec.secrets so Terry won't break it again
45			- Set requires e-smith >=9 and libreswan >=3.14
46
47			* Wed Nov 18 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-7
48			- add 90adjustESP
49
50			* Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-6
51			- more update to masq firewalls - change -p 50 to -p ESP
52
53			* Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-5
54			- update masq firewall rules
55			- document clean up
56
57			* Wed May 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-4
58			- set dpd actions off if ipsec is 'add'
59			- add salifetime key and rename ikelifetime and keylife
60			- change defaults for salifetime and ikelifetime
61			- add in rsasig support
62
63			* Wed Apr 22 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-3
64			- change default ike from aes-sha to aes-sha1
65
66			* Tue Mar 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-2
67			- More minor fixes - should work OK with xl2tpd
68
69			* Thu Mar 19 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-1
70			- Remove templates2expand and added to createlinks
71			- modified ipsec.secret template
72			- various other fixes
73
74			* Fri Mar 13 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-5
75			- Big changes again - now have PreviousState to detect changes
76			- Createlinks to S10 to run after expand-templates
77
78			* Thu Mar 5 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-4
79			- Changed lots. Removed sysctl.conf template
80			- Changed firewall template
81
82			* Tue Mar 3 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-3
83			- Load of code tidying and prep from xl2tpd
84
85			* Fri Feb 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-2
86			- Update action script and allow for system not in gateway mode
87			- add ike and phase2alg db settings
88
89			* Tue Feb 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-1
90			- New ipsec-action script
91			- Numerous template changes
92
93			* Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-1
94			- remove debugging lines
95			- remove expand templates from spec file
96			- add status check for ipsec.conf
97			- add comment to masq template
98			- updated db defaults
99			- ipsec.conf not expanded on install
100			- missed auto=start
101
102			* Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.2-1
103			- remove rc.local modifications
104			- add /etc/sysctl.conf patches
105
106			* Thu Jan 15 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-1
107			- initial release
108
109			%prep
110			%setup
111	reetspetit	1.3	%patch1 -p1
112	unnilennium	1.1
113			%build
114			perl createlinks
115
116			%install
117			rm -rf $RPM_BUILD_ROOT
118			(cd root ; find . -depth -print \| cpio -dump $RPM_BUILD_ROOT)
119			rm -f %{name}-%{version}-filelist
120			/sbin/e-smith/genfilelist $RPM_BUILD_ROOT > %{name}-%{version}-filelist
121			echo "%doc COPYING" >> %{name}-%{version}-filelist
122
123
124			%clean
125			cd ..
126			rm -rf %{name}-%{version}
127
128			%files -f %{name}-%{version}-filelist
129			%defattr(-,root,root)
130
131			%pre
132			%preun
133			%post
134
135			/sbin/e-smith/expand-template /etc/rc.d/init.d/masq
136			/sbin/e-smith/expand-template /etc/inittab
137			/sbin/init q
138
139
140			echo "see http://wiki.contribs.org/IPSEC"
141
142			%postun
143			/sbin/e-smith/expand-template /etc/rc.d/init.d/masq
144			/sbin/e-smith/expand-template /etc/inittab
145			/sbin/init q