1 |
%define name smeserver-openswan |
2 |
%define version 0.6 |
3 |
%define release 2 |
4 |
Summary: Plugin to enable IPSEC connections |
5 |
Name: %{name} |
6 |
Version: %{version} |
7 |
Release: %{release}%{?dist} |
8 |
License: GNU GPL version 2 |
9 |
URL: http://libreswan.org/ |
10 |
Group: SMEserver/addon |
11 |
Source: %{name}-%{version}.tar.gz |
12 |
BuildRoot: /var/tmp/%{name}-%{version} |
13 |
BuildArchitectures: noarch |
14 |
BuildRequires: e-smith-devtools |
15 |
Requires: e-smith-release >= 8.0 |
16 |
Requires: openswan >= 2.6.38 |
17 |
AutoReqProv: no |
18 |
|
19 |
%description |
20 |
Openswan is a free software implementation of the most widely supported and standarised VPN protocol based on ("IPsec") and the Internet Key Exchange ("IKE") |
21 |
|
22 |
%changelog |
23 |
* Wed Mar 09 2016 JP Pialasse <tests@pialasse.com> 0.6-2.sme |
24 |
- first import in SME buildsys |
25 |
|
26 |
* Sat Dec 05 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.6-1 |
27 |
- New Branch for openswan on v8 |
28 |
|
29 |
* Wed Nov 25 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-9 |
30 |
- Copied code to openswan contrib as libreswan contrib is now LibreSwan specific |
31 |
|
32 |
* Wed Nov 25 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-8 |
33 |
- Revised masq templates - disable on ipsec disable |
34 |
- Template ipsec.secrets so Terry won't break it again |
35 |
- Set requires e-smith >=9 and libreswan >=3.14 |
36 |
|
37 |
* Wed Nov 18 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-7 |
38 |
- add 90adjustESP |
39 |
|
40 |
* Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-6 |
41 |
- more update to masq firewalls - change -p 50 to -p ESP |
42 |
|
43 |
* Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-5 |
44 |
- update masq firewall rules |
45 |
- document clean up |
46 |
|
47 |
* Wed May 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-4 |
48 |
- set dpd actions off if ipsec is 'add' |
49 |
- add salifetime key and rename ikelifetime and keylife |
50 |
- change defaults for salifetime and ikelifetime |
51 |
- add in rsasig support |
52 |
|
53 |
* Wed Apr 22 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-3 |
54 |
- change default ike from aes-sha to aes-sha1 |
55 |
|
56 |
* Tue Mar 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-2 |
57 |
- More minor fixes - should work OK with xl2tpd |
58 |
|
59 |
* Thu Mar 19 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-1 |
60 |
- Remove templates2expand and added to createlinks |
61 |
- modified ipsec.secret template |
62 |
- various other fixes |
63 |
|
64 |
* Fri Mar 13 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-5 |
65 |
- Big changes again - now have PreviousState to detect changes |
66 |
- Createlinks to S10 to run after expand-templates |
67 |
|
68 |
* Thu Mar 5 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-4 |
69 |
- Changed lots. Removed sysctl.conf template |
70 |
- Changed firewall template |
71 |
|
72 |
* Tue Mar 3 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-3 |
73 |
- Load of code tidying and prep from xl2tpd |
74 |
|
75 |
* Fri Feb 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-2 |
76 |
- Update action script and allow for system not in gateway mode |
77 |
- add ike and phase2alg db settings |
78 |
|
79 |
* Tue Feb 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-1 |
80 |
- New ipsec-action script |
81 |
- Numerous template changes |
82 |
|
83 |
* Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-1 |
84 |
- remove debugging lines |
85 |
- remove expand templates from spec file |
86 |
- add status check for ipsec.conf |
87 |
- add comment to masq template |
88 |
- updated db defaults |
89 |
- ipsec.conf not expanded on install |
90 |
- missed auto=start |
91 |
|
92 |
* Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.2-1 |
93 |
- remove rc.local modifications |
94 |
- add /etc/sysctl.conf patches |
95 |
|
96 |
* Thu Jan 15 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-1 |
97 |
- initial release |
98 |
|
99 |
%prep |
100 |
%setup |
101 |
|
102 |
%build |
103 |
perl createlinks |
104 |
|
105 |
%install |
106 |
rm -rf $RPM_BUILD_ROOT |
107 |
(cd root ; find . -depth -print | cpio -dump $RPM_BUILD_ROOT) |
108 |
rm -f %{name}-%{version}-filelist |
109 |
/sbin/e-smith/genfilelist $RPM_BUILD_ROOT > %{name}-%{version}-filelist |
110 |
echo "%doc COPYING" >> %{name}-%{version}-filelist |
111 |
|
112 |
|
113 |
%clean |
114 |
cd .. |
115 |
rm -rf %{name}-%{version} |
116 |
|
117 |
%files -f %{name}-%{version}-filelist |
118 |
%defattr(-,root,root) |
119 |
|
120 |
%pre |
121 |
%preun |
122 |
%post |
123 |
|
124 |
/sbin/e-smith/expand-template /etc/rc.d/init.d/masq |
125 |
/sbin/e-smith/expand-template /etc/inittab |
126 |
/sbin/init q |
127 |
|
128 |
|
129 |
echo "see http://wiki.contribs.org/IPSEC" |
130 |
|
131 |
%postun |
132 |
/sbin/e-smith/expand-template /etc/rc.d/init.d/masq |
133 |
/sbin/e-smith/expand-template /etc/inittab |
134 |
/sbin/init q |