1 |
%define name smeserver-openswan |
2 |
%define version 0.6 |
3 |
%define release 3 |
4 |
Summary: Plugin to enable IPSEC connections |
5 |
Name: %{name} |
6 |
Version: %{version} |
7 |
Release: %{release}%{?dist} |
8 |
License: GNU GPL version 2 |
9 |
URL: http://libreswan.org/ |
10 |
Group: SMEserver/addon |
11 |
Source: %{name}-%{version}.tar.gz |
12 |
Patch1: smeserver-openswan-fix-masq-templates.patch |
13 |
BuildRoot: /var/tmp/%{name}-%{version} |
14 |
BuildArchitectures: noarch |
15 |
BuildRequires: e-smith-devtools |
16 |
Requires: e-smith-release >= 8.0 |
17 |
Requires: openswan >= 2.6.38 |
18 |
AutoReqProv: no |
19 |
|
20 |
%description |
21 |
Openswan is a free software implementation of the most widely supported and standarised VPN protocol based on ("IPsec") and the Internet Key Exchange ("IKE") |
22 |
|
23 |
%changelog |
24 |
* Tue Mar 22 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.6-3.sme |
25 |
- Fix masq templates for missing db keys on install |
26 |
- Move pluto.log to /var/log/pluto |
27 |
- regenerate masq template on ipsec-update |
28 |
- change wiki location page |
29 |
- add sysctl.conf template |
30 |
- modify masq templates for ipsec status enabled/disabled |
31 |
- only load ipsec.conf rather than *.conf to avoid loading v6neighbor-hole.conf |
32 |
|
33 |
* Wed Mar 09 2016 JP Pialasse <tests@pialasse.com> 0.6-2.sme |
34 |
- first import in SME buildsys |
35 |
|
36 |
* Sat Dec 05 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.6-1 |
37 |
- New Branch for openswan on v8 |
38 |
|
39 |
* Wed Nov 25 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-9 |
40 |
- Copied code to openswan contrib as libreswan contrib is now LibreSwan specific |
41 |
|
42 |
* Wed Nov 25 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-8 |
43 |
- Revised masq templates - disable on ipsec disable |
44 |
- Template ipsec.secrets so Terry won't break it again |
45 |
- Set requires e-smith >=9 and libreswan >=3.14 |
46 |
|
47 |
* Wed Nov 18 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-7 |
48 |
- add 90adjustESP |
49 |
|
50 |
* Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-6 |
51 |
- more update to masq firewalls - change -p 50 to -p ESP |
52 |
|
53 |
* Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-5 |
54 |
- update masq firewall rules |
55 |
- document clean up |
56 |
|
57 |
* Wed May 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-4 |
58 |
- set dpd actions off if ipsec is 'add' |
59 |
- add salifetime key and rename ikelifetime and keylife |
60 |
- change defaults for salifetime and ikelifetime |
61 |
- add in rsasig support |
62 |
|
63 |
* Wed Apr 22 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-3 |
64 |
- change default ike from aes-sha to aes-sha1 |
65 |
|
66 |
* Tue Mar 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-2 |
67 |
- More minor fixes - should work OK with xl2tpd |
68 |
|
69 |
* Thu Mar 19 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-1 |
70 |
- Remove templates2expand and added to createlinks |
71 |
- modified ipsec.secret template |
72 |
- various other fixes |
73 |
|
74 |
* Fri Mar 13 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-5 |
75 |
- Big changes again - now have PreviousState to detect changes |
76 |
- Createlinks to S10 to run after expand-templates |
77 |
|
78 |
* Thu Mar 5 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-4 |
79 |
- Changed lots. Removed sysctl.conf template |
80 |
- Changed firewall template |
81 |
|
82 |
* Tue Mar 3 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-3 |
83 |
- Load of code tidying and prep from xl2tpd |
84 |
|
85 |
* Fri Feb 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-2 |
86 |
- Update action script and allow for system not in gateway mode |
87 |
- add ike and phase2alg db settings |
88 |
|
89 |
* Tue Feb 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-1 |
90 |
- New ipsec-action script |
91 |
- Numerous template changes |
92 |
|
93 |
* Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-1 |
94 |
- remove debugging lines |
95 |
- remove expand templates from spec file |
96 |
- add status check for ipsec.conf |
97 |
- add comment to masq template |
98 |
- updated db defaults |
99 |
- ipsec.conf not expanded on install |
100 |
- missed auto=start |
101 |
|
102 |
* Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.2-1 |
103 |
- remove rc.local modifications |
104 |
- add /etc/sysctl.conf patches |
105 |
|
106 |
* Thu Jan 15 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-1 |
107 |
- initial release |
108 |
|
109 |
%prep |
110 |
%setup |
111 |
%patch1 -p1 |
112 |
|
113 |
%build |
114 |
perl createlinks |
115 |
|
116 |
%install |
117 |
rm -rf $RPM_BUILD_ROOT |
118 |
(cd root ; find . -depth -print | cpio -dump $RPM_BUILD_ROOT) |
119 |
rm -f %{name}-%{version}-filelist |
120 |
/sbin/e-smith/genfilelist $RPM_BUILD_ROOT > %{name}-%{version}-filelist |
121 |
echo "%doc COPYING" >> %{name}-%{version}-filelist |
122 |
|
123 |
|
124 |
%clean |
125 |
cd .. |
126 |
rm -rf %{name}-%{version} |
127 |
|
128 |
%files -f %{name}-%{version}-filelist |
129 |
%defattr(-,root,root) |
130 |
|
131 |
%pre |
132 |
%preun |
133 |
%post |
134 |
|
135 |
/sbin/e-smith/expand-template /etc/rc.d/init.d/masq |
136 |
/sbin/e-smith/expand-template /etc/inittab |
137 |
/sbin/init q |
138 |
|
139 |
|
140 |
echo "see http://wiki.contribs.org/IPSEC" |
141 |
|
142 |
%postun |
143 |
/sbin/e-smith/expand-template /etc/rc.d/init.d/masq |
144 |
/sbin/e-smith/expand-template /etc/inittab |
145 |
/sbin/init q |