/[smecontribs]/rpms/smeserver-openvpn-bridge/contribs10/smeserver-openvpn-bridge.spec
ViewVC logotype

Annotation of /rpms/smeserver-openvpn-bridge/contribs10/smeserver-openvpn-bridge.spec

Parent Directory Parent Directory | Revision Log Revision Log | View Revision Graph Revision Graph


Revision 1.10 - (hide annotations) (download)
Sun Jul 24 02:59:29 2022 UTC (2 years, 3 months ago) by jpp
Branch: MAIN
Changes since 1.9: +2 -2 lines
* Sat Jul 23 2022 Jean-Philippe Pialasse <tests@pialasse.com> 2.1-16.sme
- add to core backup [SME: 12018]

1 jpp 1.10 # $Id: smeserver-openvpn-bridge.spec,v 1.9 2022/07/24 02:57:57 jpp Exp $
2 brianr 1.1 # Authority: vip-ire
3     # Name: Daniel Berteaud
4    
5     Summary: OpenVPN, a strong VPN solution build over SSL, pre-configured for bridge mode
6     %define name smeserver-openvpn-bridge
7     Name: %{name}
8     %define version 2.1
9 jpp 1.8 %define release 16
10 brianr 1.1 Version: %{version}
11     Release: %{release}%{?dist}
12     License: GPL
13     Group: Networking/Remote access
14     Source: %{name}-%{version}.tar.xz
15    
16     Patch0: smeserver-openvpn-bridge-2.1-locale-2015-02-17.patch
17     Patch1: smeserver-openvpn-bridge-2.1-add_routes_for_s2s_virtual_ip.patch
18     Patch2: smeserver-openvpn-bridge-2.1-remove_obsolete_libpam_symlink.patch
19     Patch3: smeserver-openvpn-bridge-2.1-typo_in_en_locale.patch
20     Patch4: smeserver-openvpn-bridge-2.1-locale-2017-02-02.patch
21     Patch5: smeserver-openvpn-bridge-2.1-locale-2017-12-02.patch
22     Patch6: smeserver-openvpn-bridge-2.1-push-routes.patch
23     Patch7: smeserver-openvpn-bridge-2.1-locale-2019-12-07.patch
24 brianr 1.2 Patch8: smeserver-openvpn-bridge-2.1-Add-in-systemd-startup.patch
25 jpp 1.3 Patch9: smeserver-openvpn-bridge-2.1-bz11335.patch
26 jpp 1.5 Patch10: smeserver-openvpn-bridge-2.1-bz11335-sme10bis.patch
27 terryfage 1.6 Patch11: smeserver-openvpn-bridge-2.1-locale-2021-08-23.patch
28 terryfage 1.7 Patch12: smeserver-openvpn-bridge-2.1-locale-2021-09-08.patch
29 jpp 1.8 Patch13: smeserver-openvpn-bridge-2.1-bz12018-backup.patch
30 brianr 1.1
31     BuildRoot: /var/tmp/%{name}-%{version}-%{release}-buildroot
32     BuildArchitectures: noarch
33    
34     BuildRequires: e-smith-devtools
35    
36     Requires: e-smith-base
37     Requires: openvpn
38     Requires: smeserver-bridge-interface
39     Requires: perl(Net::OpenVPN::Manage)
40     Obsoletes: smeserver-openvpn-bridge-fws
41     Obsoletes: smeserver-openvpn-bridge.fws
42    
43     %description
44     This package contains all the needed scripts and templates
45     to have a full working openvpn server running in bridge mode.
46    
47     %changelog
48 jpp 1.8 * Sat Jul 23 2022 Jean-Philippe Pialasse <tests@pialasse.com> 2.1-16.sme
49     - add to core backup [SME: 12018]
50    
51 terryfage 1.7 * Wed Sep 08 2021 Terry Fage <terry.fage@gmail.com> 2.1-15.sme
52     - apply locale 2021-09-08 patch
53    
54 terryfage 1.6 * Mon Aug 23 2021 Terry Fage <terry.fage@gmail.com> 2.1-14.sme
55     - apply locale 2021-08-23 patch
56    
57 jpp 1.5 * Wed Mar 31 2021 Jean-Philippe Pialasse <tests@pialasse.com> 2.1-13.sme
58     - default AES-128-CBC and SHA256 fix [SME: 11335]
59     - better frist screen with information on link and hnac and cipher
60     - better client default configuration with embded shared key and CAcert
61     - migrate cipher to Cipher like routed and s2s usage
62     - HMAC and Cipher are accessible to change using the manager.
63     - fix typos in translations [SME: 6647]
64    
65 jpp 1.3 * Tue Mar 23 2021 Jean-Philippe Pialasse <tests@pialasse.com> 2.1-12.sme
66     - fix permisison issue on private keys [SME: 11335]
67     - rework unit file
68     avoid failure, add ncp cipher, add loging status
69     - add default cipher AES-256-CBC - if issue with older clients < 2.4
70     it is advised to set it to 'auto' or BF-CBC
71    
72 brianr 1.2 * Thu Feb 04 2021 Brian Read <brianr@bjsystems.co.uk> 2.1-11.sme
73     - Initial import to SME10 [SME: 11335]
74     - Add-in-systemd-startup
75    
76 brianr 1.1 * Sat Dec 07 2019 SME Translation Server <translations@contribs.org> 2.1-10.sme
77     - apply locale 2019-12-07 patch
78    
79     * Thu Nov 15 2018 John Crisp <jcrisp@safeandsoundit.co.uk> 2.1-9.sme
80     - Add option to enable/doisable PushRoute [SME: 10547]
81    
82     * Sat Dec 02 2017 SME Translation Server <translations@contribs.org> 2.1-8.sme
83     - apply locale 2017-12-02 patch
84    
85     * Wed Feb 01 2017 Jean-Philipe Pialasse <tests@pialasse.com> 2.1-7.sme
86     - apply locale 2017-02-02.patch
87    
88     * Sat May 7 2016 Daniel Berteaud <daniel@firewall-services.com> 2.1-6.sme
89     - Typo in en-us locale for the panel [SME: 9301]
90    
91     * Wed Feb 10 2016 Daniel Berteaud <daniel@firewall-services.com> 2.1-5.sme
92     - Remove obsolete libpam.so symlink so AutoReqProv do not add a dep on i686
93     pam
94    
95     * Mon Feb 8 2016 Daniel Berteaud <daniel@firewall-services.com> 2.1-4.sme
96     - Create /etc/openvpn/bridge/dev/urandom [SME: 9238]
97    
98     * Thu Aug 6 2015 Daniel Berteaud <daniel@firewall-services.com> 2.1-3.sme
99     - Add routes for s2s virtual IP
100    
101     * Tue Feb 17 2015 Daniel Berteaud <daniel@firewall-services.com> 2.1-2.sme
102     - Apply locale 2015-02-17 patch
103    
104     * Mon Nov 11 2013 Daniel B. <daniel@firewall-services.com> 2.1-1.sme
105     - Rebuild for SME9
106    
107     * Sun Jul 14 2013 JP Pialasse <tests@pialasse.com> 2.0-50.sme
108     - apply locale 2013-07-14 patch
109    
110     * Thu Jun 6 2013 Daniel B. <daniel@firewall-services.com> 2.0-49.sme
111     - Fix plugin directory for x86_64 [SME: 7658]
112    
113     * Fri Mar 22 2013 Daniel B. <daniel@firewall-services.com> 2.0-48.sme
114     - Fix spelling in en-us panel [SME: 7507]
115    
116     * Mon Oct 08 2012 Daniel B. <daniel@firewall-services.com> 2.0-47.sme
117     - Create a tmp dir (needed for openvpn 2.2.2)
118    
119     * Tue Mar 20 2012 SME Translation Server <translations@contribs.org> 2.0-46.el6
120     - apply locale 2012-03-20 patch
121    
122     * Wed Apr 27 2011 SME Translation Server <translations@contribs.org> 2.0-45.sme
123     - apply locale 2011-04-27 patch
124    
125     * Sun Mar 06 2011 SME Translation Server <translations@contribs.org> 2.0-44.sme
126     - apply locale 2011-03-06 patch
127    
128     * Thu Feb 17 2011 Daniel B. <daniel@firewall-services.com> 2.0-43.sme
129     - Fix a typo in the panel [SME: 6509]
130    
131     * Tue Jan 25 2011 Daniel B. <daniel@firewall-services.com> 2.0-42.sme
132     - Stop disabling service on rpm removal (spec change only)
133    
134     * Tue Jan 25 2011 Daniel B. <daniel@firewall-services.com> 2.0-41.sme
135     - Add comp-lzo option back into client conf file
136    
137     * Tue Oct 26 2010 Daniel B. <daniel@firewall-services.com> 2.0-40.sme
138     - Add PassTOS DB key to enable/disable passtos
139     - Enhance routes push (work with s2s contrib)
140    
141     * Tue Oct 19 2010 Daniel B. <daniel@firewall-services.com> 2.0-39.sme
142     - templates cleanup
143     - DB prop to disable local networks routes push to client
144    
145     * Mon Jul 19 2010 Daniel B. <daniel@firewall-services.com> 2.0-38.sme
146     - apply locale 2010-07-19 patc
147    
148     * Wed Jun 02 2010 Daniel B. <daniel@firewall-services.com> 2.0-37.sme
149     - apply locale 2010-06-02 patch
150     - use multilog timestamp
151    
152     * Wed May 12 2010 Daniel B. <daniel@firewall-services.com> 2.0-36.sme
153     - Comment the passtos option as it's not supported on Windows
154    
155     * Fri Apr 30 2010 Daniel B. <daniel@firewall-services.com> 2.0-35.sme
156     - add the passtos option
157     - push the comp-lzo option to the client
158     - apply locale 2010-04-29 patch
159    
160     * Tue Mar 02 2010 SME Translation Server <translations@contribs.org> 2.0-34.sme
161     - apply locale 2010-03-02 patch
162    
163     * Wed Nov 18 2009 Daniel B. <daniel@firewall-services.com> 2.0-33.sme
164     - code cleanup
165    
166     * Tue Nov 17 2009 Daniel B. <daniel@firewall-services.com> 2.0-32.sme
167     - apply locale 2009-11-17 patch
168     - Fix CRL update on event (openvpn-bridge-update)
169    
170     * Tue Oct 27 2009 SME Translation Server <translations@contribs.org> 2.0-31.sme
171     - apply locale 2009-10-27 patch
172    
173     * Wed Oct 21 2009 Daniel B. <daniel@firewall-services.com> 2.0-30.sme
174     - apply locale 2009-10-21 patch
175    
176     * Tue Sep 29 2009 Daniel B. <daniel@firewall-services.com> 2.0-29.sme
177     - Put tls-client directive in client config file even when additional TLS
178     auth is disabled (required for the main TLS auth) [SME: 5495]
179     - apply locale 2009-09-28 patch
180    
181     * Mon Aug 24 2009 SME Translation Server <translations@contribs.org> 2.0-28.sme
182     - apply locale 2009-08-24 patch
183    
184     * Wed Jul 22 2009 Daniel B. <daniel@firewall-services.com> 2.0-27.sme
185     - apply locale 2009-07-22 patch
186    
187     * Thu Jun 25 2009 Daniel B. <daniel@firewall-services.com> 2.0-26.sme
188     - expand config and restart the service when local networks are added
189     or removed so the new routes are pushed
190    
191     * Tue May 26 2009 Daniel B. <daniel@firewall-services.com> 2.0-25.sme
192     - apply locale 2009-05-26 patch
193    
194     * Sun May 24 2009 Daniel B. <daniel@firewall-services.com> 2.0-24.sme
195     - apply locale 2009-05-24 patch
196    
197     * Thu Apr 30 2009 Daniel B. <daniel@firewall-services.com> 2.0-23.sme
198     - apply local 2009-04-30 patch
199    
200     * Mon Apr 27 2009 SME Translation Server <translations@contribs.org> 2.0-22.sme
201     - apply locale 2009-04-27 patch
202    
203     * Tue Apr 14 2009 Daniel B. <daniel@firewall-services.com> [2.0-21]
204     - Fixe permissions on public directory (pub and ccd) which must be readable
205     by everyone (especially user nobody)
206    
207     * Sun Apr 12 2009 Daniel B. <daniel@firewall-services.com> [2.0-20]
208     - remove obsolete init scripts reset-openvpn and openvpn-bridge
209    
210     * Wed Mar 18 2009 Daniel B. <daniel@firewall-services.com> [2.0-19]
211     - Do not add cipher directive in client configuration file if set to 'auto'
212    
213     * Wed Mar 11 2009 Daniel B. <daniel@firewall-services.com> [2.0-18]
214     - Compatibility with openvpn 2.1 (detect plugin dir location) [SME: 5060]
215    
216     * Mon Mar 09 2009 Daniel B. <daniel@firewall-services.com> [2.0-17]
217     - Add smeserver-bridge-interface as dependency
218     - Update spec description
219    
220     * Tue Mar 03 2009 SME Translation Server [2.0-16]
221     - apply locale 2009-03-03 patch
222    
223     * Tue Mar 03 2009 Jonathan Martens <smeserver-contribs@snetram.nl> [2.0-15]
224     - Fix some more errors in the en-us locale
225     - Remove tabs from SPEC file as some editors act weird with them, e.g. nano
226    
227     * Tue Mar 03 2009 Jonathan Martens <smeserver-contribs@snetram.nl> [2.0-14]
228     - Fix some grammar errors in the en-us locale
229    
230     * Tue Mar 03 2009 Jonathan Martens <smeserver-contribs@snetram.nl> [2.0-13]
231     - Fix a typo in the en-us locale
232    
233     * Tue Mar 03 2009 Shad L. Lords <slords@mail.com> [2.0-12]
234     - Fix xml language tag to be correct
235    
236     * Tue Mar 03 2009 Shad L. Lords <slords@mail.com> [2.0-11]
237     - Remove duplicate translations that break pootle
238    
239     * Tue Mar 03 2009 Shad L. Lords <slords@mail.com> [2.0-10]
240     - Rename locale/en to locale/en-us to pootle works
241    
242     * Tue Mar 03 2009 Daniel B. <daniel@firewall-services.com> [2.0-9]
243     - Apply locale patch fr 1
244     - Add e-smith-devtools as a build dependency
245    
246     * Thu Jan 29 2009 Daniel B. <daniel@firewall-services.com> [2.0-8]
247     - Fix an error with the creation of the db
248    
249     * Wed Jan 28 2009 Daniel B. <daniel@firewall-services.com> [2.0-7]
250     - Cleanly create openvpn-bridge db
251    
252     * Fri Jan 16 2009 Daniel B. <daniel@firewall-services.com> [2.0-6]
253     - Just warn if openvpn db is missing
254     - Fix certificates check
255     - Warn if bridge service isn't enabled
256     - Configure the CRL update URL
257    
258     * Mon Jan 12 2009 Daniel B. <daniel@firewall-services.com> [2.0-5]
259     - localization patch
260    
261     * Mon Dec 22 2008 Daniel B. <daniel@firewall-services.com> [2.0-4]
262     - Add validate_common_name routine
263    
264 jpp 1.9 * Fri Dec 19 2008 Daniel B. <daniel@firewall-services.com> [2.0-3]
265 brianr 1.1 - Added option configRequired (accept only certificate listed in the rules section)
266     - Clean config templates
267    
268     * Tue Dec 16 2008 Daniel B. <daniel@firewall-services.com> [2.0-2]
269     - Add missing pull directive in client config
270    
271     * Fri Dec 12 2008 Daniel B. <daniel@firewall-services.com> [2.0-1]
272     - Remove useless migrate fragment (now handled by the bridge package)
273    
274     * Thu Dec 04 2008 Daniel B. <daniel@firewall-services.com> [2.0-0]
275     - The bridge stuff is now in a separated rpm
276     - Restarting the service doesn't cut the InternalInterface
277     as the bridge isn't restarted
278     - Correct (truely this time) the bug with dhcpd looping
279     - Panel re-writen in FormMagick (much more simple now)
280     - Removed the certificate manager, now handled by phpki
281     - Real-time clients info using Net::OpenVPN::Manage
282     - Routes to local networks are pushed to clients
283    
284     * Tue Feb 06 2007 Daniel Berteaud <daniel@firewall-services.com>
285     - [1.1-1]
286     - Bugs fixes (repported by Stephan Braunstein)
287     - corrections in the en language
288    
289     * Tue Feb 06 2007 Daniel Berteaud <daniel@firewall-services.com>
290     - [1.1-0]
291     - panel enhancement
292     - little correction in the local file
293    
294 jpp 1.9 * Mon Dec 11 2006 Daniel Berteaud <daniel@firewall-services.com>
295 brianr 1.1 - [1.0-3]
296     - correction of permissions on startup and shutdown scripts
297     - little correction in the local file
298    
299     * Fri Dec 08 2006 Daniel Berteaud <daniel@firewall-services.com>
300     - [1.0-2]
301     - Added missing directory keys/bridge
302    
303 jpp 1.10 * Wed Dec 06 2006 Daniel Berteaud <daniel@firewall-services.com>
304 brianr 1.1 - [1.0-1]
305     - Removed useless parameters from the panel (tap, br and localInf)
306     - Added a stop script (k20openvpn-bridge)
307     - panel renamed to openvpn-bridge for futur compatibility
308    
309     %prep
310    
311     %setup -q -n %{name}-%{version}
312     %patch0 -p1
313     %patch1 -p1
314     %patch2 -p1
315     %patch3 -p1
316     %patch4 -p1
317     %patch5 -p1
318     %patch6 -p1
319     %patch7 -p1
320 brianr 1.2 %patch8 -p1
321 jpp 1.3 %patch9 -p1
322 terryfage 1.6 %patch10 -p1
323     %patch11 -p1
324 terryfage 1.7 %patch12 -p1
325 jpp 1.8 %patch13 -p1
326 terryfage 1.6
327 jpp 1.3 rm -rf root/usr/sbin/systemd/
328     rm -rf root/var/service/
329 brianr 1.1
330     %build
331     perl createlinks
332    
333     %{__mkdir_p} root/etc/openvpn/bridge/ccd
334     %{__mkdir_p} root/etc/openvpn/bridge/priv
335     %{__mkdir_p} root/etc/openvpn/bridge/pub
336     %{__mkdir_p} root/etc/openvpn/bridge/tmp
337     %{__mkdir_p} root/etc/openvpn/bridge/dev
338     %{__mkdir_p} root/var/log/openvpn-bridge
339    
340     %install
341     /bin/rm -rf $RPM_BUILD_ROOT
342     (cd root ; /usr/bin/find . -depth -print | /bin/cpio -dump $RPM_BUILD_ROOT)
343     /bin/rm -f %{name}-%{version}-filelist
344     /sbin/e-smith/genfilelist $RPM_BUILD_ROOT \
345 jpp 1.3 --dir /var/log/openvpn-bridge 'attr(0750,root,root)' \
346 brianr 1.1 --dir /etc/openvpn/bridge/pub 'attr(0755,root,root)' \
347     --dir /etc/openvpn/bridge/priv 'attr(0750,root,root)' \
348     --dir /etc/openvpn/bridge/ccd 'attr(0755,root,root)' \
349     --dir /etc/openvpn/bridge/tmp 'attr(0770,root,nobody)' \
350     --file /usr/bin/ovpn-bridge-update-crl 'attr(0750,root,root)' \
351     > %{name}-%{version}-filelist
352    
353     %files -f %{name}-%{version}-filelist
354     %defattr(-,root,root)
355    
356     %clean
357     rm -rf $RPM_BUILD_ROOT
358    
359     %post
360     if [ \! -c /etc/openvpn/bridge/dev/urandom ]; then
361     mknod -m 0444 /etc/openvpn/bridge/dev/urandom c 1 9
362     fi
363    
364     %preun

admin@koozali.org
ViewVC Help
Powered by ViewVC 1.2.1 RSS 2.0 feed