/[smecontribs]/rpms/smeserver-openvpn-bridge/contribs10/smeserver-openvpn-bridge.spec
ViewVC logotype

Annotation of /rpms/smeserver-openvpn-bridge/contribs10/smeserver-openvpn-bridge.spec

Parent Directory Parent Directory | Revision Log Revision Log | View Revision Graph Revision Graph


Revision 1.11 - (hide annotations) (download)
Sat Jul 30 17:48:02 2022 UTC (2 years, 4 months ago) by brianr
Branch: MAIN
CVS Tags: smeserver-openvpn-bridge-2_1-17_el7_sme
Changes since 1.10: +7 -4 lines
* Sat Jul 30 2022 Brian Read <brianr@bjsystems.co.uk> 2.1-17.sme
- Re-build and link to latest devtools [SME: 11997]

1 brianr 1.11 # $Id: smeserver-openvpn-bridge.spec,v 1.10 2022/07/24 02:59:29 jpp Exp $
2 brianr 1.1 # Authority: vip-ire
3     # Name: Daniel Berteaud
4    
5     Summary: OpenVPN, a strong VPN solution build over SSL, pre-configured for bridge mode
6     %define name smeserver-openvpn-bridge
7     Name: %{name}
8     %define version 2.1
9 brianr 1.11 %define release 17
10 brianr 1.1 Version: %{version}
11     Release: %{release}%{?dist}
12     License: GPL
13     Group: Networking/Remote access
14     Source: %{name}-%{version}.tar.xz
15    
16     Patch0: smeserver-openvpn-bridge-2.1-locale-2015-02-17.patch
17     Patch1: smeserver-openvpn-bridge-2.1-add_routes_for_s2s_virtual_ip.patch
18     Patch2: smeserver-openvpn-bridge-2.1-remove_obsolete_libpam_symlink.patch
19     Patch3: smeserver-openvpn-bridge-2.1-typo_in_en_locale.patch
20     Patch4: smeserver-openvpn-bridge-2.1-locale-2017-02-02.patch
21     Patch5: smeserver-openvpn-bridge-2.1-locale-2017-12-02.patch
22     Patch6: smeserver-openvpn-bridge-2.1-push-routes.patch
23     Patch7: smeserver-openvpn-bridge-2.1-locale-2019-12-07.patch
24 brianr 1.2 Patch8: smeserver-openvpn-bridge-2.1-Add-in-systemd-startup.patch
25 jpp 1.3 Patch9: smeserver-openvpn-bridge-2.1-bz11335.patch
26 jpp 1.5 Patch10: smeserver-openvpn-bridge-2.1-bz11335-sme10bis.patch
27 terryfage 1.6 Patch11: smeserver-openvpn-bridge-2.1-locale-2021-08-23.patch
28 terryfage 1.7 Patch12: smeserver-openvpn-bridge-2.1-locale-2021-09-08.patch
29 jpp 1.8 Patch13: smeserver-openvpn-bridge-2.1-bz12018-backup.patch
30 brianr 1.1
31     BuildRoot: /var/tmp/%{name}-%{version}-%{release}-buildroot
32     BuildArchitectures: noarch
33    
34     BuildRequires: e-smith-devtools
35    
36     Requires: e-smith-base
37     Requires: openvpn
38     Requires: smeserver-bridge-interface
39     Requires: perl(Net::OpenVPN::Manage)
40     Obsoletes: smeserver-openvpn-bridge-fws
41     Obsoletes: smeserver-openvpn-bridge.fws
42    
43     %description
44     This package contains all the needed scripts and templates
45     to have a full working openvpn server running in bridge mode.
46    
47     %changelog
48 brianr 1.11 * Sat Jul 30 2022 Brian Read <brianr@bjsystems.co.uk> 2.1-17.sme
49     - Re-build and link to latest devtools [SME: 11997]
50    
51 jpp 1.8 * Sat Jul 23 2022 Jean-Philippe Pialasse <tests@pialasse.com> 2.1-16.sme
52     - add to core backup [SME: 12018]
53    
54 terryfage 1.7 * Wed Sep 08 2021 Terry Fage <terry.fage@gmail.com> 2.1-15.sme
55     - apply locale 2021-09-08 patch
56    
57 terryfage 1.6 * Mon Aug 23 2021 Terry Fage <terry.fage@gmail.com> 2.1-14.sme
58     - apply locale 2021-08-23 patch
59    
60 jpp 1.5 * Wed Mar 31 2021 Jean-Philippe Pialasse <tests@pialasse.com> 2.1-13.sme
61     - default AES-128-CBC and SHA256 fix [SME: 11335]
62     - better frist screen with information on link and hnac and cipher
63     - better client default configuration with embded shared key and CAcert
64     - migrate cipher to Cipher like routed and s2s usage
65     - HMAC and Cipher are accessible to change using the manager.
66 brianr 1.11 - Re-build and link to latest devtools typos in translations [SME: 6647]
67 jpp 1.5
68 jpp 1.3 * Tue Mar 23 2021 Jean-Philippe Pialasse <tests@pialasse.com> 2.1-12.sme
69 brianr 1.11 - Re-build and link to latest devtools permisison issue on private keys [SME: 11335]
70 jpp 1.3 - rework unit file
71     avoid failure, add ncp cipher, add loging status
72     - add default cipher AES-256-CBC - if issue with older clients < 2.4
73     it is advised to set it to 'auto' or BF-CBC
74    
75 brianr 1.2 * Thu Feb 04 2021 Brian Read <brianr@bjsystems.co.uk> 2.1-11.sme
76     - Initial import to SME10 [SME: 11335]
77     - Add-in-systemd-startup
78    
79 brianr 1.1 * Sat Dec 07 2019 SME Translation Server <translations@contribs.org> 2.1-10.sme
80     - apply locale 2019-12-07 patch
81    
82     * Thu Nov 15 2018 John Crisp <jcrisp@safeandsoundit.co.uk> 2.1-9.sme
83     - Add option to enable/doisable PushRoute [SME: 10547]
84    
85     * Sat Dec 02 2017 SME Translation Server <translations@contribs.org> 2.1-8.sme
86     - apply locale 2017-12-02 patch
87    
88     * Wed Feb 01 2017 Jean-Philipe Pialasse <tests@pialasse.com> 2.1-7.sme
89     - apply locale 2017-02-02.patch
90    
91     * Sat May 7 2016 Daniel Berteaud <daniel@firewall-services.com> 2.1-6.sme
92     - Typo in en-us locale for the panel [SME: 9301]
93    
94     * Wed Feb 10 2016 Daniel Berteaud <daniel@firewall-services.com> 2.1-5.sme
95     - Remove obsolete libpam.so symlink so AutoReqProv do not add a dep on i686
96     pam
97    
98     * Mon Feb 8 2016 Daniel Berteaud <daniel@firewall-services.com> 2.1-4.sme
99     - Create /etc/openvpn/bridge/dev/urandom [SME: 9238]
100    
101     * Thu Aug 6 2015 Daniel Berteaud <daniel@firewall-services.com> 2.1-3.sme
102     - Add routes for s2s virtual IP
103    
104     * Tue Feb 17 2015 Daniel Berteaud <daniel@firewall-services.com> 2.1-2.sme
105     - Apply locale 2015-02-17 patch
106    
107     * Mon Nov 11 2013 Daniel B. <daniel@firewall-services.com> 2.1-1.sme
108     - Rebuild for SME9
109    
110     * Sun Jul 14 2013 JP Pialasse <tests@pialasse.com> 2.0-50.sme
111     - apply locale 2013-07-14 patch
112    
113     * Thu Jun 6 2013 Daniel B. <daniel@firewall-services.com> 2.0-49.sme
114     - Fix plugin directory for x86_64 [SME: 7658]
115    
116     * Fri Mar 22 2013 Daniel B. <daniel@firewall-services.com> 2.0-48.sme
117     - Fix spelling in en-us panel [SME: 7507]
118    
119     * Mon Oct 08 2012 Daniel B. <daniel@firewall-services.com> 2.0-47.sme
120     - Create a tmp dir (needed for openvpn 2.2.2)
121    
122     * Tue Mar 20 2012 SME Translation Server <translations@contribs.org> 2.0-46.el6
123     - apply locale 2012-03-20 patch
124    
125     * Wed Apr 27 2011 SME Translation Server <translations@contribs.org> 2.0-45.sme
126     - apply locale 2011-04-27 patch
127    
128     * Sun Mar 06 2011 SME Translation Server <translations@contribs.org> 2.0-44.sme
129     - apply locale 2011-03-06 patch
130    
131     * Thu Feb 17 2011 Daniel B. <daniel@firewall-services.com> 2.0-43.sme
132     - Fix a typo in the panel [SME: 6509]
133    
134     * Tue Jan 25 2011 Daniel B. <daniel@firewall-services.com> 2.0-42.sme
135     - Stop disabling service on rpm removal (spec change only)
136    
137     * Tue Jan 25 2011 Daniel B. <daniel@firewall-services.com> 2.0-41.sme
138     - Add comp-lzo option back into client conf file
139    
140     * Tue Oct 26 2010 Daniel B. <daniel@firewall-services.com> 2.0-40.sme
141     - Add PassTOS DB key to enable/disable passtos
142     - Enhance routes push (work with s2s contrib)
143    
144     * Tue Oct 19 2010 Daniel B. <daniel@firewall-services.com> 2.0-39.sme
145     - templates cleanup
146     - DB prop to disable local networks routes push to client
147    
148     * Mon Jul 19 2010 Daniel B. <daniel@firewall-services.com> 2.0-38.sme
149     - apply locale 2010-07-19 patc
150    
151     * Wed Jun 02 2010 Daniel B. <daniel@firewall-services.com> 2.0-37.sme
152     - apply locale 2010-06-02 patch
153     - use multilog timestamp
154    
155     * Wed May 12 2010 Daniel B. <daniel@firewall-services.com> 2.0-36.sme
156     - Comment the passtos option as it's not supported on Windows
157    
158     * Fri Apr 30 2010 Daniel B. <daniel@firewall-services.com> 2.0-35.sme
159     - add the passtos option
160     - push the comp-lzo option to the client
161     - apply locale 2010-04-29 patch
162    
163     * Tue Mar 02 2010 SME Translation Server <translations@contribs.org> 2.0-34.sme
164     - apply locale 2010-03-02 patch
165    
166     * Wed Nov 18 2009 Daniel B. <daniel@firewall-services.com> 2.0-33.sme
167     - code cleanup
168    
169     * Tue Nov 17 2009 Daniel B. <daniel@firewall-services.com> 2.0-32.sme
170     - apply locale 2009-11-17 patch
171     - Fix CRL update on event (openvpn-bridge-update)
172    
173     * Tue Oct 27 2009 SME Translation Server <translations@contribs.org> 2.0-31.sme
174     - apply locale 2009-10-27 patch
175    
176     * Wed Oct 21 2009 Daniel B. <daniel@firewall-services.com> 2.0-30.sme
177     - apply locale 2009-10-21 patch
178    
179     * Tue Sep 29 2009 Daniel B. <daniel@firewall-services.com> 2.0-29.sme
180     - Put tls-client directive in client config file even when additional TLS
181     auth is disabled (required for the main TLS auth) [SME: 5495]
182     - apply locale 2009-09-28 patch
183    
184     * Mon Aug 24 2009 SME Translation Server <translations@contribs.org> 2.0-28.sme
185     - apply locale 2009-08-24 patch
186    
187     * Wed Jul 22 2009 Daniel B. <daniel@firewall-services.com> 2.0-27.sme
188     - apply locale 2009-07-22 patch
189    
190     * Thu Jun 25 2009 Daniel B. <daniel@firewall-services.com> 2.0-26.sme
191     - expand config and restart the service when local networks are added
192     or removed so the new routes are pushed
193    
194     * Tue May 26 2009 Daniel B. <daniel@firewall-services.com> 2.0-25.sme
195     - apply locale 2009-05-26 patch
196    
197     * Sun May 24 2009 Daniel B. <daniel@firewall-services.com> 2.0-24.sme
198     - apply locale 2009-05-24 patch
199    
200     * Thu Apr 30 2009 Daniel B. <daniel@firewall-services.com> 2.0-23.sme
201     - apply local 2009-04-30 patch
202    
203     * Mon Apr 27 2009 SME Translation Server <translations@contribs.org> 2.0-22.sme
204     - apply locale 2009-04-27 patch
205    
206     * Tue Apr 14 2009 Daniel B. <daniel@firewall-services.com> [2.0-21]
207     - Fixe permissions on public directory (pub and ccd) which must be readable
208     by everyone (especially user nobody)
209    
210     * Sun Apr 12 2009 Daniel B. <daniel@firewall-services.com> [2.0-20]
211     - remove obsolete init scripts reset-openvpn and openvpn-bridge
212    
213     * Wed Mar 18 2009 Daniel B. <daniel@firewall-services.com> [2.0-19]
214     - Do not add cipher directive in client configuration file if set to 'auto'
215    
216     * Wed Mar 11 2009 Daniel B. <daniel@firewall-services.com> [2.0-18]
217     - Compatibility with openvpn 2.1 (detect plugin dir location) [SME: 5060]
218    
219     * Mon Mar 09 2009 Daniel B. <daniel@firewall-services.com> [2.0-17]
220     - Add smeserver-bridge-interface as dependency
221     - Update spec description
222    
223     * Tue Mar 03 2009 SME Translation Server [2.0-16]
224     - apply locale 2009-03-03 patch
225    
226     * Tue Mar 03 2009 Jonathan Martens <smeserver-contribs@snetram.nl> [2.0-15]
227     - Fix some more errors in the en-us locale
228     - Remove tabs from SPEC file as some editors act weird with them, e.g. nano
229    
230     * Tue Mar 03 2009 Jonathan Martens <smeserver-contribs@snetram.nl> [2.0-14]
231     - Fix some grammar errors in the en-us locale
232    
233     * Tue Mar 03 2009 Jonathan Martens <smeserver-contribs@snetram.nl> [2.0-13]
234     - Fix a typo in the en-us locale
235    
236     * Tue Mar 03 2009 Shad L. Lords <slords@mail.com> [2.0-12]
237     - Fix xml language tag to be correct
238    
239     * Tue Mar 03 2009 Shad L. Lords <slords@mail.com> [2.0-11]
240     - Remove duplicate translations that break pootle
241    
242     * Tue Mar 03 2009 Shad L. Lords <slords@mail.com> [2.0-10]
243     - Rename locale/en to locale/en-us to pootle works
244    
245     * Tue Mar 03 2009 Daniel B. <daniel@firewall-services.com> [2.0-9]
246     - Apply locale patch fr 1
247     - Add e-smith-devtools as a build dependency
248    
249     * Thu Jan 29 2009 Daniel B. <daniel@firewall-services.com> [2.0-8]
250     - Fix an error with the creation of the db
251    
252     * Wed Jan 28 2009 Daniel B. <daniel@firewall-services.com> [2.0-7]
253     - Cleanly create openvpn-bridge db
254    
255     * Fri Jan 16 2009 Daniel B. <daniel@firewall-services.com> [2.0-6]
256     - Just warn if openvpn db is missing
257     - Fix certificates check
258     - Warn if bridge service isn't enabled
259     - Configure the CRL update URL
260    
261     * Mon Jan 12 2009 Daniel B. <daniel@firewall-services.com> [2.0-5]
262     - localization patch
263    
264     * Mon Dec 22 2008 Daniel B. <daniel@firewall-services.com> [2.0-4]
265     - Add validate_common_name routine
266    
267 jpp 1.9 * Fri Dec 19 2008 Daniel B. <daniel@firewall-services.com> [2.0-3]
268 brianr 1.1 - Added option configRequired (accept only certificate listed in the rules section)
269     - Clean config templates
270    
271     * Tue Dec 16 2008 Daniel B. <daniel@firewall-services.com> [2.0-2]
272     - Add missing pull directive in client config
273    
274     * Fri Dec 12 2008 Daniel B. <daniel@firewall-services.com> [2.0-1]
275     - Remove useless migrate fragment (now handled by the bridge package)
276    
277     * Thu Dec 04 2008 Daniel B. <daniel@firewall-services.com> [2.0-0]
278     - The bridge stuff is now in a separated rpm
279     - Restarting the service doesn't cut the InternalInterface
280     as the bridge isn't restarted
281     - Correct (truely this time) the bug with dhcpd looping
282     - Panel re-writen in FormMagick (much more simple now)
283     - Removed the certificate manager, now handled by phpki
284     - Real-time clients info using Net::OpenVPN::Manage
285     - Routes to local networks are pushed to clients
286    
287     * Tue Feb 06 2007 Daniel Berteaud <daniel@firewall-services.com>
288     - [1.1-1]
289     - Bugs fixes (repported by Stephan Braunstein)
290     - corrections in the en language
291    
292     * Tue Feb 06 2007 Daniel Berteaud <daniel@firewall-services.com>
293     - [1.1-0]
294     - panel enhancement
295     - little correction in the local file
296    
297 jpp 1.9 * Mon Dec 11 2006 Daniel Berteaud <daniel@firewall-services.com>
298 brianr 1.1 - [1.0-3]
299     - correction of permissions on startup and shutdown scripts
300     - little correction in the local file
301    
302     * Fri Dec 08 2006 Daniel Berteaud <daniel@firewall-services.com>
303     - [1.0-2]
304     - Added missing directory keys/bridge
305    
306 jpp 1.10 * Wed Dec 06 2006 Daniel Berteaud <daniel@firewall-services.com>
307 brianr 1.1 - [1.0-1]
308     - Removed useless parameters from the panel (tap, br and localInf)
309     - Added a stop script (k20openvpn-bridge)
310     - panel renamed to openvpn-bridge for futur compatibility
311    
312     %prep
313    
314     %setup -q -n %{name}-%{version}
315     %patch0 -p1
316     %patch1 -p1
317     %patch2 -p1
318     %patch3 -p1
319     %patch4 -p1
320     %patch5 -p1
321     %patch6 -p1
322     %patch7 -p1
323 brianr 1.2 %patch8 -p1
324 jpp 1.3 %patch9 -p1
325 terryfage 1.6 %patch10 -p1
326     %patch11 -p1
327 terryfage 1.7 %patch12 -p1
328 jpp 1.8 %patch13 -p1
329 terryfage 1.6
330 jpp 1.3 rm -rf root/usr/sbin/systemd/
331     rm -rf root/var/service/
332 brianr 1.1
333     %build
334     perl createlinks
335    
336     %{__mkdir_p} root/etc/openvpn/bridge/ccd
337     %{__mkdir_p} root/etc/openvpn/bridge/priv
338     %{__mkdir_p} root/etc/openvpn/bridge/pub
339     %{__mkdir_p} root/etc/openvpn/bridge/tmp
340     %{__mkdir_p} root/etc/openvpn/bridge/dev
341     %{__mkdir_p} root/var/log/openvpn-bridge
342    
343     %install
344     /bin/rm -rf $RPM_BUILD_ROOT
345     (cd root ; /usr/bin/find . -depth -print | /bin/cpio -dump $RPM_BUILD_ROOT)
346     /bin/rm -f %{name}-%{version}-filelist
347     /sbin/e-smith/genfilelist $RPM_BUILD_ROOT \
348 jpp 1.3 --dir /var/log/openvpn-bridge 'attr(0750,root,root)' \
349 brianr 1.1 --dir /etc/openvpn/bridge/pub 'attr(0755,root,root)' \
350     --dir /etc/openvpn/bridge/priv 'attr(0750,root,root)' \
351     --dir /etc/openvpn/bridge/ccd 'attr(0755,root,root)' \
352     --dir /etc/openvpn/bridge/tmp 'attr(0770,root,nobody)' \
353     --file /usr/bin/ovpn-bridge-update-crl 'attr(0750,root,root)' \
354     > %{name}-%{version}-filelist
355    
356     %files -f %{name}-%{version}-filelist
357     %defattr(-,root,root)
358    
359     %clean
360     rm -rf $RPM_BUILD_ROOT
361    
362     %post
363     if [ \! -c /etc/openvpn/bridge/dev/urandom ]; then
364     mknod -m 0444 /etc/openvpn/bridge/dev/urandom c 1 9
365     fi
366    
367     %preun

admin@koozali.org
ViewVC Help
Powered by ViewVC 1.2.1 RSS 2.0 feed