/[smecontribs]/rpms/smeserver-openvpn-bridge/contribs10/smeserver-openvpn-bridge.spec
ViewVC logotype

Annotation of /rpms/smeserver-openvpn-bridge/contribs10/smeserver-openvpn-bridge.spec

Parent Directory Parent Directory | Revision Log Revision Log | View Revision Graph Revision Graph


Revision 1.5 - (hide annotations) (download)
Thu Apr 1 01:43:12 2021 UTC (3 years, 8 months ago) by jpp
Branch: MAIN
CVS Tags: smeserver-openvpn-bridge-2_1-13_el7_sme
Changes since 1.4: +12 -3 lines
* Wed Mar 31 2021 Jean-Philippe Pialasse <tests@pialasse.com> 2.1-13.sme
- default AES-128-CBC and SHA256 fix [SME: 11335]
- better frist screen with information on link and hnac and cipher
- better client default configuration with embded shared key and CAcert
- migrate cipher to Cipher like routed and s2s usage
- HMAC and Cipher are accessible to change using the manager.
- fix typos in translations [SME: 6647]

1 jpp 1.5 # $Id: smeserver-openvpn-bridge.spec,v 1.4 2021/03/23 20:51:59 jpp Exp $
2 brianr 1.1 # Authority: vip-ire
3     # Name: Daniel Berteaud
4    
5     Summary: OpenVPN, a strong VPN solution build over SSL, pre-configured for bridge mode
6     %define name smeserver-openvpn-bridge
7     Name: %{name}
8     %define version 2.1
9 jpp 1.5 %define release 13
10 brianr 1.1 Version: %{version}
11     Release: %{release}%{?dist}
12     License: GPL
13     Group: Networking/Remote access
14     Source: %{name}-%{version}.tar.xz
15    
16     Patch0: smeserver-openvpn-bridge-2.1-locale-2015-02-17.patch
17     Patch1: smeserver-openvpn-bridge-2.1-add_routes_for_s2s_virtual_ip.patch
18     Patch2: smeserver-openvpn-bridge-2.1-remove_obsolete_libpam_symlink.patch
19     Patch3: smeserver-openvpn-bridge-2.1-typo_in_en_locale.patch
20     Patch4: smeserver-openvpn-bridge-2.1-locale-2017-02-02.patch
21     Patch5: smeserver-openvpn-bridge-2.1-locale-2017-12-02.patch
22     Patch6: smeserver-openvpn-bridge-2.1-push-routes.patch
23     Patch7: smeserver-openvpn-bridge-2.1-locale-2019-12-07.patch
24 brianr 1.2 Patch8: smeserver-openvpn-bridge-2.1-Add-in-systemd-startup.patch
25 jpp 1.3 Patch9: smeserver-openvpn-bridge-2.1-bz11335.patch
26 jpp 1.5 Patch10: smeserver-openvpn-bridge-2.1-bz11335-sme10bis.patch
27 brianr 1.1
28     BuildRoot: /var/tmp/%{name}-%{version}-%{release}-buildroot
29     BuildArchitectures: noarch
30    
31     BuildRequires: e-smith-devtools
32    
33     Requires: e-smith-base
34     Requires: openvpn
35     Requires: smeserver-bridge-interface
36     Requires: perl(Net::OpenVPN::Manage)
37     Obsoletes: smeserver-openvpn-bridge-fws
38     Obsoletes: smeserver-openvpn-bridge.fws
39    
40     %description
41     This package contains all the needed scripts and templates
42     to have a full working openvpn server running in bridge mode.
43    
44     %changelog
45 jpp 1.5 * Wed Mar 31 2021 Jean-Philippe Pialasse <tests@pialasse.com> 2.1-13.sme
46     - default AES-128-CBC and SHA256 fix [SME: 11335]
47     - better frist screen with information on link and hnac and cipher
48     - better client default configuration with embded shared key and CAcert
49     - migrate cipher to Cipher like routed and s2s usage
50     - HMAC and Cipher are accessible to change using the manager.
51     - fix typos in translations [SME: 6647]
52    
53 jpp 1.3 * Tue Mar 23 2021 Jean-Philippe Pialasse <tests@pialasse.com> 2.1-12.sme
54     - fix permisison issue on private keys [SME: 11335]
55     - rework unit file
56     avoid failure, add ncp cipher, add loging status
57     - add default cipher AES-256-CBC - if issue with older clients < 2.4
58     it is advised to set it to 'auto' or BF-CBC
59    
60 brianr 1.2 * Thu Feb 04 2021 Brian Read <brianr@bjsystems.co.uk> 2.1-11.sme
61     - Initial import to SME10 [SME: 11335]
62     - Add-in-systemd-startup
63    
64 brianr 1.1 * Sat Dec 07 2019 SME Translation Server <translations@contribs.org> 2.1-10.sme
65     - apply locale 2019-12-07 patch
66    
67     * Thu Nov 15 2018 John Crisp <jcrisp@safeandsoundit.co.uk> 2.1-9.sme
68     - Add option to enable/doisable PushRoute [SME: 10547]
69    
70     * Sat Dec 02 2017 SME Translation Server <translations@contribs.org> 2.1-8.sme
71     - apply locale 2017-12-02 patch
72    
73     * Wed Feb 01 2017 Jean-Philipe Pialasse <tests@pialasse.com> 2.1-7.sme
74     - apply locale 2017-02-02.patch
75    
76     * Sat May 7 2016 Daniel Berteaud <daniel@firewall-services.com> 2.1-6.sme
77     - Typo in en-us locale for the panel [SME: 9301]
78    
79     * Wed Feb 10 2016 Daniel Berteaud <daniel@firewall-services.com> 2.1-5.sme
80     - Remove obsolete libpam.so symlink so AutoReqProv do not add a dep on i686
81     pam
82    
83     * Mon Feb 8 2016 Daniel Berteaud <daniel@firewall-services.com> 2.1-4.sme
84     - Create /etc/openvpn/bridge/dev/urandom [SME: 9238]
85    
86     * Thu Aug 6 2015 Daniel Berteaud <daniel@firewall-services.com> 2.1-3.sme
87     - Add routes for s2s virtual IP
88    
89     * Tue Feb 17 2015 Daniel Berteaud <daniel@firewall-services.com> 2.1-2.sme
90     - Apply locale 2015-02-17 patch
91    
92     * Mon Nov 11 2013 Daniel B. <daniel@firewall-services.com> 2.1-1.sme
93     - Rebuild for SME9
94    
95     * Sun Jul 14 2013 JP Pialasse <tests@pialasse.com> 2.0-50.sme
96     - apply locale 2013-07-14 patch
97    
98     * Thu Jun 6 2013 Daniel B. <daniel@firewall-services.com> 2.0-49.sme
99     - Fix plugin directory for x86_64 [SME: 7658]
100    
101     * Fri Mar 22 2013 Daniel B. <daniel@firewall-services.com> 2.0-48.sme
102     - Fix spelling in en-us panel [SME: 7507]
103    
104     * Mon Oct 08 2012 Daniel B. <daniel@firewall-services.com> 2.0-47.sme
105     - Create a tmp dir (needed for openvpn 2.2.2)
106    
107     * Tue Mar 20 2012 SME Translation Server <translations@contribs.org> 2.0-46.el6
108     - apply locale 2012-03-20 patch
109    
110     * Wed Apr 27 2011 SME Translation Server <translations@contribs.org> 2.0-45.sme
111     - apply locale 2011-04-27 patch
112    
113     * Sun Mar 06 2011 SME Translation Server <translations@contribs.org> 2.0-44.sme
114     - apply locale 2011-03-06 patch
115    
116     * Thu Feb 17 2011 Daniel B. <daniel@firewall-services.com> 2.0-43.sme
117     - Fix a typo in the panel [SME: 6509]
118    
119     * Tue Jan 25 2011 Daniel B. <daniel@firewall-services.com> 2.0-42.sme
120     - Stop disabling service on rpm removal (spec change only)
121    
122     * Tue Jan 25 2011 Daniel B. <daniel@firewall-services.com> 2.0-41.sme
123     - Add comp-lzo option back into client conf file
124    
125     * Tue Oct 26 2010 Daniel B. <daniel@firewall-services.com> 2.0-40.sme
126     - Add PassTOS DB key to enable/disable passtos
127     - Enhance routes push (work with s2s contrib)
128    
129     * Tue Oct 19 2010 Daniel B. <daniel@firewall-services.com> 2.0-39.sme
130     - templates cleanup
131     - DB prop to disable local networks routes push to client
132    
133     * Mon Jul 19 2010 Daniel B. <daniel@firewall-services.com> 2.0-38.sme
134     - apply locale 2010-07-19 patc
135    
136     * Wed Jun 02 2010 Daniel B. <daniel@firewall-services.com> 2.0-37.sme
137     - apply locale 2010-06-02 patch
138     - use multilog timestamp
139    
140     * Wed May 12 2010 Daniel B. <daniel@firewall-services.com> 2.0-36.sme
141     - Comment the passtos option as it's not supported on Windows
142    
143     * Fri Apr 30 2010 Daniel B. <daniel@firewall-services.com> 2.0-35.sme
144     - add the passtos option
145     - push the comp-lzo option to the client
146     - apply locale 2010-04-29 patch
147    
148     * Tue Mar 02 2010 SME Translation Server <translations@contribs.org> 2.0-34.sme
149     - apply locale 2010-03-02 patch
150    
151     * Wed Nov 18 2009 Daniel B. <daniel@firewall-services.com> 2.0-33.sme
152     - code cleanup
153    
154     * Tue Nov 17 2009 Daniel B. <daniel@firewall-services.com> 2.0-32.sme
155     - apply locale 2009-11-17 patch
156     - Fix CRL update on event (openvpn-bridge-update)
157    
158     * Tue Oct 27 2009 SME Translation Server <translations@contribs.org> 2.0-31.sme
159     - apply locale 2009-10-27 patch
160    
161     * Wed Oct 21 2009 Daniel B. <daniel@firewall-services.com> 2.0-30.sme
162     - apply locale 2009-10-21 patch
163    
164     * Tue Sep 29 2009 Daniel B. <daniel@firewall-services.com> 2.0-29.sme
165     - Put tls-client directive in client config file even when additional TLS
166     auth is disabled (required for the main TLS auth) [SME: 5495]
167     - apply locale 2009-09-28 patch
168    
169     * Mon Aug 24 2009 SME Translation Server <translations@contribs.org> 2.0-28.sme
170     - apply locale 2009-08-24 patch
171    
172     * Wed Jul 22 2009 Daniel B. <daniel@firewall-services.com> 2.0-27.sme
173     - apply locale 2009-07-22 patch
174    
175     * Thu Jun 25 2009 Daniel B. <daniel@firewall-services.com> 2.0-26.sme
176     - expand config and restart the service when local networks are added
177     or removed so the new routes are pushed
178    
179     * Tue May 26 2009 Daniel B. <daniel@firewall-services.com> 2.0-25.sme
180     - apply locale 2009-05-26 patch
181    
182     * Sun May 24 2009 Daniel B. <daniel@firewall-services.com> 2.0-24.sme
183     - apply locale 2009-05-24 patch
184    
185     * Thu Apr 30 2009 Daniel B. <daniel@firewall-services.com> 2.0-23.sme
186     - apply local 2009-04-30 patch
187    
188     * Mon Apr 27 2009 SME Translation Server <translations@contribs.org> 2.0-22.sme
189     - apply locale 2009-04-27 patch
190    
191     * Tue Apr 14 2009 Daniel B. <daniel@firewall-services.com> [2.0-21]
192     - Fixe permissions on public directory (pub and ccd) which must be readable
193     by everyone (especially user nobody)
194    
195     * Sun Apr 12 2009 Daniel B. <daniel@firewall-services.com> [2.0-20]
196     - remove obsolete init scripts reset-openvpn and openvpn-bridge
197    
198     * Wed Mar 18 2009 Daniel B. <daniel@firewall-services.com> [2.0-19]
199     - Do not add cipher directive in client configuration file if set to 'auto'
200    
201     * Wed Mar 11 2009 Daniel B. <daniel@firewall-services.com> [2.0-18]
202     - Compatibility with openvpn 2.1 (detect plugin dir location) [SME: 5060]
203    
204     * Mon Mar 09 2009 Daniel B. <daniel@firewall-services.com> [2.0-17]
205     - Add smeserver-bridge-interface as dependency
206     - Update spec description
207    
208     * Tue Mar 03 2009 SME Translation Server [2.0-16]
209     - apply locale 2009-03-03 patch
210    
211     * Tue Mar 03 2009 Jonathan Martens <smeserver-contribs@snetram.nl> [2.0-15]
212     - Fix some more errors in the en-us locale
213     - Remove tabs from SPEC file as some editors act weird with them, e.g. nano
214    
215     * Tue Mar 03 2009 Jonathan Martens <smeserver-contribs@snetram.nl> [2.0-14]
216     - Fix some grammar errors in the en-us locale
217    
218     * Tue Mar 03 2009 Jonathan Martens <smeserver-contribs@snetram.nl> [2.0-13]
219     - Fix a typo in the en-us locale
220    
221     * Tue Mar 03 2009 Shad L. Lords <slords@mail.com> [2.0-12]
222     - Fix xml language tag to be correct
223    
224     * Tue Mar 03 2009 Shad L. Lords <slords@mail.com> [2.0-11]
225     - Remove duplicate translations that break pootle
226    
227     * Tue Mar 03 2009 Shad L. Lords <slords@mail.com> [2.0-10]
228     - Rename locale/en to locale/en-us to pootle works
229    
230     * Tue Mar 03 2009 Daniel B. <daniel@firewall-services.com> [2.0-9]
231     - Apply locale patch fr 1
232     - Add e-smith-devtools as a build dependency
233    
234     * Thu Jan 29 2009 Daniel B. <daniel@firewall-services.com> [2.0-8]
235     - Fix an error with the creation of the db
236    
237     * Wed Jan 28 2009 Daniel B. <daniel@firewall-services.com> [2.0-7]
238     - Cleanly create openvpn-bridge db
239    
240     * Fri Jan 16 2009 Daniel B. <daniel@firewall-services.com> [2.0-6]
241     - Just warn if openvpn db is missing
242     - Fix certificates check
243     - Warn if bridge service isn't enabled
244     - Configure the CRL update URL
245    
246     * Mon Jan 12 2009 Daniel B. <daniel@firewall-services.com> [2.0-5]
247     - localization patch
248    
249     * Mon Dec 22 2008 Daniel B. <daniel@firewall-services.com> [2.0-4]
250     - Add validate_common_name routine
251    
252     * Wed Dec 19 2008 Daniel B. <daniel@firewall-services.com> [2.0-3]
253     - Added option configRequired (accept only certificate listed in the rules section)
254     - Clean config templates
255    
256     * Tue Dec 16 2008 Daniel B. <daniel@firewall-services.com> [2.0-2]
257     - Add missing pull directive in client config
258    
259     * Fri Dec 12 2008 Daniel B. <daniel@firewall-services.com> [2.0-1]
260     - Remove useless migrate fragment (now handled by the bridge package)
261    
262     * Thu Dec 04 2008 Daniel B. <daniel@firewall-services.com> [2.0-0]
263     - The bridge stuff is now in a separated rpm
264     - Restarting the service doesn't cut the InternalInterface
265     as the bridge isn't restarted
266     - Correct (truely this time) the bug with dhcpd looping
267     - Panel re-writen in FormMagick (much more simple now)
268     - Removed the certificate manager, now handled by phpki
269     - Real-time clients info using Net::OpenVPN::Manage
270     - Routes to local networks are pushed to clients
271    
272     * Tue Feb 06 2007 Daniel Berteaud <daniel@firewall-services.com>
273     - [1.1-1]
274     - Bugs fixes (repported by Stephan Braunstein)
275     - corrections in the en language
276    
277     * Tue Feb 06 2007 Daniel Berteaud <daniel@firewall-services.com>
278     - [1.1-0]
279     - panel enhancement
280     - little correction in the local file
281    
282     * Fri Dec 11 2006 Daniel Berteaud <daniel@firewall-services.com>
283     - [1.0-3]
284     - correction of permissions on startup and shutdown scripts
285     - little correction in the local file
286    
287     * Fri Dec 08 2006 Daniel Berteaud <daniel@firewall-services.com>
288     - [1.0-2]
289     - Added missing directory keys/bridge
290    
291     * Fri Dec 06 2006 Daniel Berteaud <daniel@firewall-services.com>
292     - [1.0-1]
293     - Removed useless parameters from the panel (tap, br and localInf)
294     - Added a stop script (k20openvpn-bridge)
295     - panel renamed to openvpn-bridge for futur compatibility
296    
297     %prep
298    
299     %setup -q -n %{name}-%{version}
300     %patch0 -p1
301     %patch1 -p1
302     %patch2 -p1
303     %patch3 -p1
304     %patch4 -p1
305     %patch5 -p1
306     %patch6 -p1
307     %patch7 -p1
308 brianr 1.2 %patch8 -p1
309 jpp 1.3 %patch9 -p1
310     rm -rf root/usr/sbin/systemd/
311     rm -rf root/var/service/
312 jpp 1.5 %patch10 -p1
313 brianr 1.1
314     %build
315     perl createlinks
316    
317     %{__mkdir_p} root/etc/openvpn/bridge/ccd
318     %{__mkdir_p} root/etc/openvpn/bridge/priv
319     %{__mkdir_p} root/etc/openvpn/bridge/pub
320     %{__mkdir_p} root/etc/openvpn/bridge/tmp
321     %{__mkdir_p} root/etc/openvpn/bridge/dev
322     %{__mkdir_p} root/var/log/openvpn-bridge
323    
324     %install
325     /bin/rm -rf $RPM_BUILD_ROOT
326     (cd root ; /usr/bin/find . -depth -print | /bin/cpio -dump $RPM_BUILD_ROOT)
327     /bin/rm -f %{name}-%{version}-filelist
328     /sbin/e-smith/genfilelist $RPM_BUILD_ROOT \
329 jpp 1.3 --dir /var/log/openvpn-bridge 'attr(0750,root,root)' \
330 brianr 1.1 --dir /etc/openvpn/bridge/pub 'attr(0755,root,root)' \
331     --dir /etc/openvpn/bridge/priv 'attr(0750,root,root)' \
332     --dir /etc/openvpn/bridge/ccd 'attr(0755,root,root)' \
333     --dir /etc/openvpn/bridge/tmp 'attr(0770,root,nobody)' \
334     --file /usr/bin/ovpn-bridge-update-crl 'attr(0750,root,root)' \
335     > %{name}-%{version}-filelist
336    
337     %files -f %{name}-%{version}-filelist
338     %defattr(-,root,root)
339    
340     %clean
341     rm -rf $RPM_BUILD_ROOT
342    
343     %post
344     if [ \! -c /etc/openvpn/bridge/dev/urandom ]; then
345     mknod -m 0444 /etc/openvpn/bridge/dev/urandom c 1 9
346     fi
347    
348     %preun

admin@koozali.org
ViewVC Help
Powered by ViewVC 1.2.1 RSS 2.0 feed