/[smecontribs]/rpms/smeserver-openvpn-bridge/contribs10/smeserver-openvpn-bridge.spec
ViewVC logotype

Annotation of /rpms/smeserver-openvpn-bridge/contribs10/smeserver-openvpn-bridge.spec

Parent Directory Parent Directory | Revision Log Revision Log | View Revision Graph Revision Graph


Revision 1.6 - (hide annotations) (download)
Mon Aug 23 01:43:47 2021 UTC (3 years, 3 months ago) by terryfage
Branch: MAIN
CVS Tags: smeserver-openvpn-bridge-2_1-14_el7_sme
Changes since 1.5: +9 -3 lines
* Mon Aug 23 2021 Terry Fage <terry.fage@gmail.com> 2.1-14.sme
- apply locale 2021-08-23 patch

1 terryfage 1.6 # $Id: smeserver-openvpn-bridge.spec,v 1.5 2021/04/01 01:43:12 jpp Exp $
2 brianr 1.1 # Authority: vip-ire
3     # Name: Daniel Berteaud
4    
5     Summary: OpenVPN, a strong VPN solution build over SSL, pre-configured for bridge mode
6     %define name smeserver-openvpn-bridge
7     Name: %{name}
8     %define version 2.1
9 terryfage 1.6 %define release 14
10 brianr 1.1 Version: %{version}
11     Release: %{release}%{?dist}
12     License: GPL
13     Group: Networking/Remote access
14     Source: %{name}-%{version}.tar.xz
15    
16     Patch0: smeserver-openvpn-bridge-2.1-locale-2015-02-17.patch
17     Patch1: smeserver-openvpn-bridge-2.1-add_routes_for_s2s_virtual_ip.patch
18     Patch2: smeserver-openvpn-bridge-2.1-remove_obsolete_libpam_symlink.patch
19     Patch3: smeserver-openvpn-bridge-2.1-typo_in_en_locale.patch
20     Patch4: smeserver-openvpn-bridge-2.1-locale-2017-02-02.patch
21     Patch5: smeserver-openvpn-bridge-2.1-locale-2017-12-02.patch
22     Patch6: smeserver-openvpn-bridge-2.1-push-routes.patch
23     Patch7: smeserver-openvpn-bridge-2.1-locale-2019-12-07.patch
24 brianr 1.2 Patch8: smeserver-openvpn-bridge-2.1-Add-in-systemd-startup.patch
25 jpp 1.3 Patch9: smeserver-openvpn-bridge-2.1-bz11335.patch
26 jpp 1.5 Patch10: smeserver-openvpn-bridge-2.1-bz11335-sme10bis.patch
27 terryfage 1.6 Patch11: smeserver-openvpn-bridge-2.1-locale-2021-08-23.patch
28 brianr 1.1
29     BuildRoot: /var/tmp/%{name}-%{version}-%{release}-buildroot
30     BuildArchitectures: noarch
31    
32     BuildRequires: e-smith-devtools
33    
34     Requires: e-smith-base
35     Requires: openvpn
36     Requires: smeserver-bridge-interface
37     Requires: perl(Net::OpenVPN::Manage)
38     Obsoletes: smeserver-openvpn-bridge-fws
39     Obsoletes: smeserver-openvpn-bridge.fws
40    
41     %description
42     This package contains all the needed scripts and templates
43     to have a full working openvpn server running in bridge mode.
44    
45     %changelog
46 terryfage 1.6 * Mon Aug 23 2021 Terry Fage <terry.fage@gmail.com> 2.1-14.sme
47     - apply locale 2021-08-23 patch
48    
49 jpp 1.5 * Wed Mar 31 2021 Jean-Philippe Pialasse <tests@pialasse.com> 2.1-13.sme
50     - default AES-128-CBC and SHA256 fix [SME: 11335]
51     - better frist screen with information on link and hnac and cipher
52     - better client default configuration with embded shared key and CAcert
53     - migrate cipher to Cipher like routed and s2s usage
54     - HMAC and Cipher are accessible to change using the manager.
55     - fix typos in translations [SME: 6647]
56    
57 jpp 1.3 * Tue Mar 23 2021 Jean-Philippe Pialasse <tests@pialasse.com> 2.1-12.sme
58     - fix permisison issue on private keys [SME: 11335]
59     - rework unit file
60     avoid failure, add ncp cipher, add loging status
61     - add default cipher AES-256-CBC - if issue with older clients < 2.4
62     it is advised to set it to 'auto' or BF-CBC
63    
64 brianr 1.2 * Thu Feb 04 2021 Brian Read <brianr@bjsystems.co.uk> 2.1-11.sme
65     - Initial import to SME10 [SME: 11335]
66     - Add-in-systemd-startup
67    
68 brianr 1.1 * Sat Dec 07 2019 SME Translation Server <translations@contribs.org> 2.1-10.sme
69     - apply locale 2019-12-07 patch
70    
71     * Thu Nov 15 2018 John Crisp <jcrisp@safeandsoundit.co.uk> 2.1-9.sme
72     - Add option to enable/doisable PushRoute [SME: 10547]
73    
74     * Sat Dec 02 2017 SME Translation Server <translations@contribs.org> 2.1-8.sme
75     - apply locale 2017-12-02 patch
76    
77     * Wed Feb 01 2017 Jean-Philipe Pialasse <tests@pialasse.com> 2.1-7.sme
78     - apply locale 2017-02-02.patch
79    
80     * Sat May 7 2016 Daniel Berteaud <daniel@firewall-services.com> 2.1-6.sme
81     - Typo in en-us locale for the panel [SME: 9301]
82    
83     * Wed Feb 10 2016 Daniel Berteaud <daniel@firewall-services.com> 2.1-5.sme
84     - Remove obsolete libpam.so symlink so AutoReqProv do not add a dep on i686
85     pam
86    
87     * Mon Feb 8 2016 Daniel Berteaud <daniel@firewall-services.com> 2.1-4.sme
88     - Create /etc/openvpn/bridge/dev/urandom [SME: 9238]
89    
90     * Thu Aug 6 2015 Daniel Berteaud <daniel@firewall-services.com> 2.1-3.sme
91     - Add routes for s2s virtual IP
92    
93     * Tue Feb 17 2015 Daniel Berteaud <daniel@firewall-services.com> 2.1-2.sme
94     - Apply locale 2015-02-17 patch
95    
96     * Mon Nov 11 2013 Daniel B. <daniel@firewall-services.com> 2.1-1.sme
97     - Rebuild for SME9
98    
99     * Sun Jul 14 2013 JP Pialasse <tests@pialasse.com> 2.0-50.sme
100     - apply locale 2013-07-14 patch
101    
102     * Thu Jun 6 2013 Daniel B. <daniel@firewall-services.com> 2.0-49.sme
103     - Fix plugin directory for x86_64 [SME: 7658]
104    
105     * Fri Mar 22 2013 Daniel B. <daniel@firewall-services.com> 2.0-48.sme
106     - Fix spelling in en-us panel [SME: 7507]
107    
108     * Mon Oct 08 2012 Daniel B. <daniel@firewall-services.com> 2.0-47.sme
109     - Create a tmp dir (needed for openvpn 2.2.2)
110    
111     * Tue Mar 20 2012 SME Translation Server <translations@contribs.org> 2.0-46.el6
112     - apply locale 2012-03-20 patch
113    
114     * Wed Apr 27 2011 SME Translation Server <translations@contribs.org> 2.0-45.sme
115     - apply locale 2011-04-27 patch
116    
117     * Sun Mar 06 2011 SME Translation Server <translations@contribs.org> 2.0-44.sme
118     - apply locale 2011-03-06 patch
119    
120     * Thu Feb 17 2011 Daniel B. <daniel@firewall-services.com> 2.0-43.sme
121     - Fix a typo in the panel [SME: 6509]
122    
123     * Tue Jan 25 2011 Daniel B. <daniel@firewall-services.com> 2.0-42.sme
124     - Stop disabling service on rpm removal (spec change only)
125    
126     * Tue Jan 25 2011 Daniel B. <daniel@firewall-services.com> 2.0-41.sme
127     - Add comp-lzo option back into client conf file
128    
129     * Tue Oct 26 2010 Daniel B. <daniel@firewall-services.com> 2.0-40.sme
130     - Add PassTOS DB key to enable/disable passtos
131     - Enhance routes push (work with s2s contrib)
132    
133     * Tue Oct 19 2010 Daniel B. <daniel@firewall-services.com> 2.0-39.sme
134     - templates cleanup
135     - DB prop to disable local networks routes push to client
136    
137     * Mon Jul 19 2010 Daniel B. <daniel@firewall-services.com> 2.0-38.sme
138     - apply locale 2010-07-19 patc
139    
140     * Wed Jun 02 2010 Daniel B. <daniel@firewall-services.com> 2.0-37.sme
141     - apply locale 2010-06-02 patch
142     - use multilog timestamp
143    
144     * Wed May 12 2010 Daniel B. <daniel@firewall-services.com> 2.0-36.sme
145     - Comment the passtos option as it's not supported on Windows
146    
147     * Fri Apr 30 2010 Daniel B. <daniel@firewall-services.com> 2.0-35.sme
148     - add the passtos option
149     - push the comp-lzo option to the client
150     - apply locale 2010-04-29 patch
151    
152     * Tue Mar 02 2010 SME Translation Server <translations@contribs.org> 2.0-34.sme
153     - apply locale 2010-03-02 patch
154    
155     * Wed Nov 18 2009 Daniel B. <daniel@firewall-services.com> 2.0-33.sme
156     - code cleanup
157    
158     * Tue Nov 17 2009 Daniel B. <daniel@firewall-services.com> 2.0-32.sme
159     - apply locale 2009-11-17 patch
160     - Fix CRL update on event (openvpn-bridge-update)
161    
162     * Tue Oct 27 2009 SME Translation Server <translations@contribs.org> 2.0-31.sme
163     - apply locale 2009-10-27 patch
164    
165     * Wed Oct 21 2009 Daniel B. <daniel@firewall-services.com> 2.0-30.sme
166     - apply locale 2009-10-21 patch
167    
168     * Tue Sep 29 2009 Daniel B. <daniel@firewall-services.com> 2.0-29.sme
169     - Put tls-client directive in client config file even when additional TLS
170     auth is disabled (required for the main TLS auth) [SME: 5495]
171     - apply locale 2009-09-28 patch
172    
173     * Mon Aug 24 2009 SME Translation Server <translations@contribs.org> 2.0-28.sme
174     - apply locale 2009-08-24 patch
175    
176     * Wed Jul 22 2009 Daniel B. <daniel@firewall-services.com> 2.0-27.sme
177     - apply locale 2009-07-22 patch
178    
179     * Thu Jun 25 2009 Daniel B. <daniel@firewall-services.com> 2.0-26.sme
180     - expand config and restart the service when local networks are added
181     or removed so the new routes are pushed
182    
183     * Tue May 26 2009 Daniel B. <daniel@firewall-services.com> 2.0-25.sme
184     - apply locale 2009-05-26 patch
185    
186     * Sun May 24 2009 Daniel B. <daniel@firewall-services.com> 2.0-24.sme
187     - apply locale 2009-05-24 patch
188    
189     * Thu Apr 30 2009 Daniel B. <daniel@firewall-services.com> 2.0-23.sme
190     - apply local 2009-04-30 patch
191    
192     * Mon Apr 27 2009 SME Translation Server <translations@contribs.org> 2.0-22.sme
193     - apply locale 2009-04-27 patch
194    
195     * Tue Apr 14 2009 Daniel B. <daniel@firewall-services.com> [2.0-21]
196     - Fixe permissions on public directory (pub and ccd) which must be readable
197     by everyone (especially user nobody)
198    
199     * Sun Apr 12 2009 Daniel B. <daniel@firewall-services.com> [2.0-20]
200     - remove obsolete init scripts reset-openvpn and openvpn-bridge
201    
202     * Wed Mar 18 2009 Daniel B. <daniel@firewall-services.com> [2.0-19]
203     - Do not add cipher directive in client configuration file if set to 'auto'
204    
205     * Wed Mar 11 2009 Daniel B. <daniel@firewall-services.com> [2.0-18]
206     - Compatibility with openvpn 2.1 (detect plugin dir location) [SME: 5060]
207    
208     * Mon Mar 09 2009 Daniel B. <daniel@firewall-services.com> [2.0-17]
209     - Add smeserver-bridge-interface as dependency
210     - Update spec description
211    
212     * Tue Mar 03 2009 SME Translation Server [2.0-16]
213     - apply locale 2009-03-03 patch
214    
215     * Tue Mar 03 2009 Jonathan Martens <smeserver-contribs@snetram.nl> [2.0-15]
216     - Fix some more errors in the en-us locale
217     - Remove tabs from SPEC file as some editors act weird with them, e.g. nano
218    
219     * Tue Mar 03 2009 Jonathan Martens <smeserver-contribs@snetram.nl> [2.0-14]
220     - Fix some grammar errors in the en-us locale
221    
222     * Tue Mar 03 2009 Jonathan Martens <smeserver-contribs@snetram.nl> [2.0-13]
223     - Fix a typo in the en-us locale
224    
225     * Tue Mar 03 2009 Shad L. Lords <slords@mail.com> [2.0-12]
226     - Fix xml language tag to be correct
227    
228     * Tue Mar 03 2009 Shad L. Lords <slords@mail.com> [2.0-11]
229     - Remove duplicate translations that break pootle
230    
231     * Tue Mar 03 2009 Shad L. Lords <slords@mail.com> [2.0-10]
232     - Rename locale/en to locale/en-us to pootle works
233    
234     * Tue Mar 03 2009 Daniel B. <daniel@firewall-services.com> [2.0-9]
235     - Apply locale patch fr 1
236     - Add e-smith-devtools as a build dependency
237    
238     * Thu Jan 29 2009 Daniel B. <daniel@firewall-services.com> [2.0-8]
239     - Fix an error with the creation of the db
240    
241     * Wed Jan 28 2009 Daniel B. <daniel@firewall-services.com> [2.0-7]
242     - Cleanly create openvpn-bridge db
243    
244     * Fri Jan 16 2009 Daniel B. <daniel@firewall-services.com> [2.0-6]
245     - Just warn if openvpn db is missing
246     - Fix certificates check
247     - Warn if bridge service isn't enabled
248     - Configure the CRL update URL
249    
250     * Mon Jan 12 2009 Daniel B. <daniel@firewall-services.com> [2.0-5]
251     - localization patch
252    
253     * Mon Dec 22 2008 Daniel B. <daniel@firewall-services.com> [2.0-4]
254     - Add validate_common_name routine
255    
256     * Wed Dec 19 2008 Daniel B. <daniel@firewall-services.com> [2.0-3]
257     - Added option configRequired (accept only certificate listed in the rules section)
258     - Clean config templates
259    
260     * Tue Dec 16 2008 Daniel B. <daniel@firewall-services.com> [2.0-2]
261     - Add missing pull directive in client config
262    
263     * Fri Dec 12 2008 Daniel B. <daniel@firewall-services.com> [2.0-1]
264     - Remove useless migrate fragment (now handled by the bridge package)
265    
266     * Thu Dec 04 2008 Daniel B. <daniel@firewall-services.com> [2.0-0]
267     - The bridge stuff is now in a separated rpm
268     - Restarting the service doesn't cut the InternalInterface
269     as the bridge isn't restarted
270     - Correct (truely this time) the bug with dhcpd looping
271     - Panel re-writen in FormMagick (much more simple now)
272     - Removed the certificate manager, now handled by phpki
273     - Real-time clients info using Net::OpenVPN::Manage
274     - Routes to local networks are pushed to clients
275    
276     * Tue Feb 06 2007 Daniel Berteaud <daniel@firewall-services.com>
277     - [1.1-1]
278     - Bugs fixes (repported by Stephan Braunstein)
279     - corrections in the en language
280    
281     * Tue Feb 06 2007 Daniel Berteaud <daniel@firewall-services.com>
282     - [1.1-0]
283     - panel enhancement
284     - little correction in the local file
285    
286     * Fri Dec 11 2006 Daniel Berteaud <daniel@firewall-services.com>
287     - [1.0-3]
288     - correction of permissions on startup and shutdown scripts
289     - little correction in the local file
290    
291     * Fri Dec 08 2006 Daniel Berteaud <daniel@firewall-services.com>
292     - [1.0-2]
293     - Added missing directory keys/bridge
294    
295     * Fri Dec 06 2006 Daniel Berteaud <daniel@firewall-services.com>
296     - [1.0-1]
297     - Removed useless parameters from the panel (tap, br and localInf)
298     - Added a stop script (k20openvpn-bridge)
299     - panel renamed to openvpn-bridge for futur compatibility
300    
301     %prep
302    
303     %setup -q -n %{name}-%{version}
304     %patch0 -p1
305     %patch1 -p1
306     %patch2 -p1
307     %patch3 -p1
308     %patch4 -p1
309     %patch5 -p1
310     %patch6 -p1
311     %patch7 -p1
312 brianr 1.2 %patch8 -p1
313 jpp 1.3 %patch9 -p1
314 terryfage 1.6 %patch10 -p1
315     %patch11 -p1
316    
317 jpp 1.3 rm -rf root/usr/sbin/systemd/
318     rm -rf root/var/service/
319 brianr 1.1
320     %build
321     perl createlinks
322    
323     %{__mkdir_p} root/etc/openvpn/bridge/ccd
324     %{__mkdir_p} root/etc/openvpn/bridge/priv
325     %{__mkdir_p} root/etc/openvpn/bridge/pub
326     %{__mkdir_p} root/etc/openvpn/bridge/tmp
327     %{__mkdir_p} root/etc/openvpn/bridge/dev
328     %{__mkdir_p} root/var/log/openvpn-bridge
329    
330     %install
331     /bin/rm -rf $RPM_BUILD_ROOT
332     (cd root ; /usr/bin/find . -depth -print | /bin/cpio -dump $RPM_BUILD_ROOT)
333     /bin/rm -f %{name}-%{version}-filelist
334     /sbin/e-smith/genfilelist $RPM_BUILD_ROOT \
335 jpp 1.3 --dir /var/log/openvpn-bridge 'attr(0750,root,root)' \
336 brianr 1.1 --dir /etc/openvpn/bridge/pub 'attr(0755,root,root)' \
337     --dir /etc/openvpn/bridge/priv 'attr(0750,root,root)' \
338     --dir /etc/openvpn/bridge/ccd 'attr(0755,root,root)' \
339     --dir /etc/openvpn/bridge/tmp 'attr(0770,root,nobody)' \
340     --file /usr/bin/ovpn-bridge-update-crl 'attr(0750,root,root)' \
341     > %{name}-%{version}-filelist
342    
343     %files -f %{name}-%{version}-filelist
344     %defattr(-,root,root)
345    
346     %clean
347     rm -rf $RPM_BUILD_ROOT
348    
349     %post
350     if [ \! -c /etc/openvpn/bridge/dev/urandom ]; then
351     mknod -m 0444 /etc/openvpn/bridge/dev/urandom c 1 9
352     fi
353    
354     %preun

admin@koozali.org
ViewVC Help
Powered by ViewVC 1.2.1 RSS 2.0 feed