smeserver-openswan/contribs8/smeserver-openswan.spec

%define name smeserver-openswan
%define version 0.6
%define release 1
Summary: Plugin to enable IPSEC connections
Name: %{name}
Version: %{version}
Release: %{release}
License: GNU GPL version 2
URL: http://libreswan.org/
Group: SMEserver/addon
Source: %{name}-%{version}.tar.gz
BuildRoot: /var/tmp/%{name}-%{version}
BuildArchitectures: noarch
BuildRequires: e-smith-devtools
Requires:  e-smith-release >= 8.0
Requires:  openswan >= 2.6.38
AutoReqProv: no

%description
Openswan is a free software implementation of the most widely supported and standarised VPN protocol based on ("IPsec") and the Internet Key Exchange ("IKE")

%changelog
* Sat Dec 05 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.6-1
- New Branch for openswan on v8

* Wed Nov 25 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-9
- Copied code to openswan contrib as libreswan contrib is now LibreSwan specific

* Wed Nov 25 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-8
- Revised masq templates - disable on ipsec disable
- Template ipsec.secrets so Terry won't break it again
- Set requires e-smith >=9 and libreswan >=3.14

* Wed Nov 18 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-7
- add 90adjustESP

* Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-6
- more update to masq firewalls - change -p 50 to -p ESP

* Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-5
- update masq firewall rules
- document clean up

* Wed May 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-4
- set dpd actions off if ipsec is 'add'
- add salifetime key and rename ikelifetime and keylife
- change defaults for salifetime and ikelifetime
- add in rsasig support

* Wed Apr 22 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-3
- change default ike from aes-sha to aes-sha1

* Tue Mar 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-2
- More minor fixes - should work OK with xl2tpd

* Thu Mar 19 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-1
- Remove templates2expand and added to createlinks
- modified ipsec.secret template
- various other fixes

* Fri Mar 13 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-5
- Big changes again - now have PreviousState to detect changes
- Createlinks to S10 to run after expand-templates

* Thu Mar 5 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-4
- Changed lots. Removed sysctl.conf template
- Changed firewall template

* Tue Mar 3 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-3
- Load of code tidying and prep from xl2tpd

* Fri Feb 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-2
- Update action script and allow for system not in gateway mode
- add ike and phase2alg db settings

* Tue Feb 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-1
- New ipsec-action script
- Numerous template changes

* Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-1
- remove debugging lines
- remove expand templates from spec file
- add status check for ipsec.conf
- add comment to masq template
- updated db defaults
- ipsec.conf not expanded on install
- missed auto=start

* Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.2-1
- remove rc.local modifications
- add /etc/sysctl.conf patches

* Thu Jan 15 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-1
- initial release

%prep
%setup

%build
perl createlinks

%install
rm -rf $RPM_BUILD_ROOT
(cd root ; find . -depth -print | cpio -dump $RPM_BUILD_ROOT)
rm -f %{name}-%{version}-filelist
/sbin/e-smith/genfilelist $RPM_BUILD_ROOT > %{name}-%{version}-filelist
echo "%doc COPYING" >> %{name}-%{version}-filelist


%clean
cd ..
rm -rf %{name}-%{version}

%files -f %{name}-%{version}-filelist
%defattr(-,root,root)

%pre
%preun
%post

/sbin/e-smith/expand-template /etc/rc.d/init.d/masq
/sbin/e-smith/expand-template /etc/inittab
/sbin/init q


echo "see http://wiki.contribs.org/IPSEC"

%postun
/sbin/e-smith/expand-template /etc/rc.d/init.d/masq
/sbin/e-smith/expand-template /etc/inittab
/sbin/init q
1	%define name smeserver-openswan
2	%define version 0.6
3	%define release 1
4	Summary: Plugin to enable IPSEC connections
5	Name: %{name}
6	Version: %{version}
7	Release: %{release}
8	License: GNU GPL version 2
9	URL: http://libreswan.org/
10	Group: SMEserver/addon
11	Source: %{name}-%{version}.tar.gz
12	BuildRoot: /var/tmp/%{name}-%{version}
13	BuildArchitectures: noarch
14	BuildRequires: e-smith-devtools
15	Requires: e-smith-release >= 8.0
16	Requires: openswan >= 2.6.38
17	AutoReqProv: no
18
19	%description
20	Openswan is a free software implementation of the most widely supported and standarised VPN protocol based on ("IPsec") and the Internet Key Exchange ("IKE")
21
22	%changelog
23	* Sat Dec 05 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.6-1
24	- New Branch for openswan on v8
25
26	* Wed Nov 25 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-9
27	- Copied code to openswan contrib as libreswan contrib is now LibreSwan specific
28
29	* Wed Nov 25 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-8
30	- Revised masq templates - disable on ipsec disable
31	- Template ipsec.secrets so Terry won't break it again
32	- Set requires e-smith >=9 and libreswan >=3.14
33
34	* Wed Nov 18 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-7
35	- add 90adjustESP
36
37	* Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-6
38	- more update to masq firewalls - change -p 50 to -p ESP
39
40	* Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-5
41	- update masq firewall rules
42	- document clean up
43
44	* Wed May 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-4
45	- set dpd actions off if ipsec is 'add'
46	- add salifetime key and rename ikelifetime and keylife
47	- change defaults for salifetime and ikelifetime
48	- add in rsasig support
49
50	* Wed Apr 22 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-3
51	- change default ike from aes-sha to aes-sha1
52
53	* Tue Mar 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-2
54	- More minor fixes - should work OK with xl2tpd
55
56	* Thu Mar 19 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-1
57	- Remove templates2expand and added to createlinks
58	- modified ipsec.secret template
59	- various other fixes
60
61	* Fri Mar 13 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-5
62	- Big changes again - now have PreviousState to detect changes
63	- Createlinks to S10 to run after expand-templates
64
65	* Thu Mar 5 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-4
66	- Changed lots. Removed sysctl.conf template
67	- Changed firewall template
68
69	* Tue Mar 3 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-3
70	- Load of code tidying and prep from xl2tpd
71
72	* Fri Feb 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-2
73	- Update action script and allow for system not in gateway mode
74	- add ike and phase2alg db settings
75
76	* Tue Feb 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-1
77	- New ipsec-action script
78	- Numerous template changes
79
80	* Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-1
81	- remove debugging lines
82	- remove expand templates from spec file
83	- add status check for ipsec.conf
84	- add comment to masq template
85	- updated db defaults
86	- ipsec.conf not expanded on install
87	- missed auto=start
88
89	* Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.2-1
90	- remove rc.local modifications
91	- add /etc/sysctl.conf patches
92
93	* Thu Jan 15 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-1
94	- initial release
95
96	%prep
97	%setup
98
99	%build
100	perl createlinks
101
102	%install
103	rm -rf $RPM_BUILD_ROOT
104	(cd root ; find . -depth -print \| cpio -dump $RPM_BUILD_ROOT)
105	rm -f %{name}-%{version}-filelist
106	/sbin/e-smith/genfilelist $RPM_BUILD_ROOT > %{name}-%{version}-filelist
107	echo "%doc COPYING" >> %{name}-%{version}-filelist
108
109
110	%clean
111	cd ..
112	rm -rf %{name}-%{version}
113
114	%files -f %{name}-%{version}-filelist
115	%defattr(-,root,root)
116
117	%pre
118	%preun
119	%post
120
121	/sbin/e-smith/expand-template /etc/rc.d/init.d/masq
122	/sbin/e-smith/expand-template /etc/inittab
123	/sbin/init q
124
125
126	echo "see http://wiki.contribs.org/IPSEC"
127
128	%postun
129	/sbin/e-smith/expand-template /etc/rc.d/init.d/masq
130	/sbin/e-smith/expand-template /etc/inittab
131	/sbin/init q