smeserver-openswan/contribs8/smeserver-openswan.spec

%define name smeserver-openswan
%define version 0.6
%define release 7
Summary: Plugin to enable IPSEC connections
Name: %{name}
Version: %{version}
Release: %{release}%{?dist}
License: GNU GPL version 2
URL: http://libreswan.org/
Group: SMEserver/addon
Source: %{name}-%{version}.tar.gz
Patch1: smeserver-openswan-fix-masq-templates.patch
Patch2: smeserver-openswan-move-logfile.patch
Patch3: smeserver-openswan-add-debug-key.patch
Patch4: smeserver-openswan-fix-rsa-id.patch
Patch5: smeserver-openswan-fix-createlinks.patch
BuildRoot: /var/tmp/%{name}-%{version}
BuildArchitectures: noarch
BuildRequires: e-smith-devtools
Requires:  e-smith-release >= 8.0
Requires:  openswan >= 2.6.38
AutoReqProv: no

%description
Openswan is a free software implementation of the most widely supported and standarised VPN protocol based on ("IPsec") and the Internet Key Exchange ("IKE")

%changelog
* Sat Apr 23 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.6-7.sme
- Fix typo in createlinks for sysctl.conf

* Mon Apr 04 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.6-6.sme
- Fix ID in ipsec.secrets if ID is set
- Fix xfrm_larval_drop setting in ipsec-update

* Thu Mar 24 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.6-5.sme
- Add debug db key to /etc/ipsec.conf
- Remove setting public/private keys as they won't affect unless templates are re-expanded
- Set xfrm_larval_drop drop correctly
- minor formatting

* Thu Mar 24 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.6-4.sme
- split patch file to match libreswan

* Tue Mar 22 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.6-3.sme
- Fix masq templates for missing db keys on install
- Move pluto.log to /var/log/pluto
- regenerate masq template on ipsec-update
- change wiki location page
- add sysctl.conf template
- modify masq templates for ipsec status enabled/disabled
- only load ipsec.conf rather than *.conf to avoid loading v6neighbor-hole.conf

* Wed Mar 09 2016 JP Pialasse <tests@pialasse.com> 0.6-2.sme
- first import in SME buildsys

* Sat Dec 05 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.6-1
- New Branch for openswan on v8

* Wed Nov 25 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-9
- Copied code to openswan contrib as libreswan contrib is now LibreSwan specific

* Wed Nov 25 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-8
- Revised masq templates - disable on ipsec disable
- Template ipsec.secrets so Terry won't break it again
- Set requires e-smith >=9 and libreswan >=3.14

* Wed Nov 18 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-7
- add 90adjustESP

* Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-6
- more update to masq firewalls - change -p 50 to -p ESP

* Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-5
- update masq firewall rules
- document clean up

* Wed May 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-4
- set dpd actions off if ipsec is 'add'
- add salifetime key and rename ikelifetime and keylife
- change defaults for salifetime and ikelifetime
- add in rsasig support

* Wed Apr 22 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-3
- change default ike from aes-sha to aes-sha1

* Tue Mar 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-2
- More minor fixes - should work OK with xl2tpd

* Thu Mar 19 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-1
- Remove templates2expand and added to createlinks
- modified ipsec.secret template
- various other fixes

* Fri Mar 13 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-5
- Big changes again - now have PreviousState to detect changes
- Createlinks to S10 to run after expand-templates

* Thu Mar 5 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-4
- Changed lots. Removed sysctl.conf template
- Changed firewall template

* Tue Mar 3 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-3
- Load of code tidying and prep from xl2tpd

* Fri Feb 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-2
- Update action script and allow for system not in gateway mode
- add ike and phase2alg db settings

* Tue Feb 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-1
- New ipsec-action script
- Numerous template changes

* Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-1
- remove debugging lines
- remove expand templates from spec file
- add status check for ipsec.conf
- add comment to masq template
- updated db defaults
- ipsec.conf not expanded on install
- missed auto=start

* Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.2-1
- remove rc.local modifications
- add /etc/sysctl.conf patches

* Thu Jan 15 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-1
- initial release

%prep
%setup
%patch1 -p1
%patch2 -p1
%patch3 -p1
%patch4 -p1
%patch5 -p1

%build
perl createlinks

%install
rm -rf $RPM_BUILD_ROOT
(cd root ; find . -depth -print | cpio -dump $RPM_BUILD_ROOT)
rm -f %{name}-%{version}-filelist
/sbin/e-smith/genfilelist $RPM_BUILD_ROOT > %{name}-%{version}-filelist
echo "%doc COPYING" >> %{name}-%{version}-filelist


%clean
cd ..
rm -rf %{name}-%{version}

%files -f %{name}-%{version}-filelist
%defattr(-,root,root)

%pre
%preun
%post

/sbin/e-smith/expand-template /etc/rc.d/init.d/masq
/sbin/e-smith/expand-template /etc/inittab
/sbin/init q


echo "see http://wiki.contribs.org/VPN"

%postun
/sbin/e-smith/expand-template /etc/rc.d/init.d/masq
/sbin/e-smith/expand-template /etc/inittab
/sbin/init q
1	%define name smeserver-openswan
2	%define version 0.6
3	%define release 7
4	Summary: Plugin to enable IPSEC connections
5	Name: %{name}
6	Version: %{version}
7	Release: %{release}%{?dist}
8	License: GNU GPL version 2
9	URL: http://libreswan.org/
10	Group: SMEserver/addon
11	Source: %{name}-%{version}.tar.gz
12	Patch1: smeserver-openswan-fix-masq-templates.patch
13	Patch2: smeserver-openswan-move-logfile.patch
14	Patch3: smeserver-openswan-add-debug-key.patch
15	Patch4: smeserver-openswan-fix-rsa-id.patch
16	Patch5: smeserver-openswan-fix-createlinks.patch
17	BuildRoot: /var/tmp/%{name}-%{version}
18	BuildArchitectures: noarch
19	BuildRequires: e-smith-devtools
20	Requires: e-smith-release >= 8.0
21	Requires: openswan >= 2.6.38
22	AutoReqProv: no
23
24	%description
25	Openswan is a free software implementation of the most widely supported and standarised VPN protocol based on ("IPsec") and the Internet Key Exchange ("IKE")
26
27	%changelog
28	* Sat Apr 23 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.6-7.sme
29	- Fix typo in createlinks for sysctl.conf
30
31	* Mon Apr 04 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.6-6.sme
32	- Fix ID in ipsec.secrets if ID is set
33	- Fix xfrm_larval_drop setting in ipsec-update
34
35	* Thu Mar 24 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.6-5.sme
36	- Add debug db key to /etc/ipsec.conf
37	- Remove setting public/private keys as they won't affect unless templates are re-expanded
38	- Set xfrm_larval_drop drop correctly
39	- minor formatting
40
41	* Thu Mar 24 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.6-4.sme
42	- split patch file to match libreswan
43
44	* Tue Mar 22 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.6-3.sme
45	- Fix masq templates for missing db keys on install
46	- Move pluto.log to /var/log/pluto
47	- regenerate masq template on ipsec-update
48	- change wiki location page
49	- add sysctl.conf template
50	- modify masq templates for ipsec status enabled/disabled
51	- only load ipsec.conf rather than *.conf to avoid loading v6neighbor-hole.conf
52
53	* Wed Mar 09 2016 JP Pialasse <tests@pialasse.com> 0.6-2.sme
54	- first import in SME buildsys
55
56	* Sat Dec 05 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.6-1
57	- New Branch for openswan on v8
58
59	* Wed Nov 25 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-9
60	- Copied code to openswan contrib as libreswan contrib is now LibreSwan specific
61
62	* Wed Nov 25 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-8
63	- Revised masq templates - disable on ipsec disable
64	- Template ipsec.secrets so Terry won't break it again
65	- Set requires e-smith >=9 and libreswan >=3.14
66
67	* Wed Nov 18 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-7
68	- add 90adjustESP
69
70	* Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-6
71	- more update to masq firewalls - change -p 50 to -p ESP
72
73	* Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-5
74	- update masq firewall rules
75	- document clean up
76
77	* Wed May 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-4
78	- set dpd actions off if ipsec is 'add'
79	- add salifetime key and rename ikelifetime and keylife
80	- change defaults for salifetime and ikelifetime
81	- add in rsasig support
82
83	* Wed Apr 22 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-3
84	- change default ike from aes-sha to aes-sha1
85
86	* Tue Mar 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-2
87	- More minor fixes - should work OK with xl2tpd
88
89	* Thu Mar 19 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-1
90	- Remove templates2expand and added to createlinks
91	- modified ipsec.secret template
92	- various other fixes
93
94	* Fri Mar 13 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-5
95	- Big changes again - now have PreviousState to detect changes
96	- Createlinks to S10 to run after expand-templates
97
98	* Thu Mar 5 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-4
99	- Changed lots. Removed sysctl.conf template
100	- Changed firewall template
101
102	* Tue Mar 3 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-3
103	- Load of code tidying and prep from xl2tpd
104
105	* Fri Feb 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-2
106	- Update action script and allow for system not in gateway mode
107	- add ike and phase2alg db settings
108
109	* Tue Feb 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-1
110	- New ipsec-action script
111	- Numerous template changes
112
113	* Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-1
114	- remove debugging lines
115	- remove expand templates from spec file
116	- add status check for ipsec.conf
117	- add comment to masq template
118	- updated db defaults
119	- ipsec.conf not expanded on install
120	- missed auto=start
121
122	* Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.2-1
123	- remove rc.local modifications
124	- add /etc/sysctl.conf patches
125
126	* Thu Jan 15 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-1
127	- initial release
128
129	%prep
130	%setup
131	%patch1 -p1
132	%patch2 -p1
133	%patch3 -p1
134	%patch4 -p1
135	%patch5 -p1
136
137	%build
138	perl createlinks
139
140	%install
141	rm -rf $RPM_BUILD_ROOT
142	(cd root ; find . -depth -print \| cpio -dump $RPM_BUILD_ROOT)
143	rm -f %{name}-%{version}-filelist
144	/sbin/e-smith/genfilelist $RPM_BUILD_ROOT > %{name}-%{version}-filelist
145	echo "%doc COPYING" >> %{name}-%{version}-filelist
146
147
148	%clean
149	cd ..
150	rm -rf %{name}-%{version}
151
152	%files -f %{name}-%{version}-filelist
153	%defattr(-,root,root)
154
155	%pre
156	%preun
157	%post
158
159	/sbin/e-smith/expand-template /etc/rc.d/init.d/masq
160	/sbin/e-smith/expand-template /etc/inittab
161	/sbin/init q
162
163
164	echo "see http://wiki.contribs.org/VPN"
165
166	%postun
167	/sbin/e-smith/expand-template /etc/rc.d/init.d/masq
168	/sbin/e-smith/expand-template /etc/inittab
169	/sbin/init q