1 |
# Authority: vip-ire |
2 |
# Name: Daniel Berteaud |
3 |
|
4 |
Summary: OpenVPN, a strong VPN solution build over SSL, pre-configured for routed mode |
5 |
Name: smeserver-openvpn-routed |
6 |
%define version 0.1.6 |
7 |
%define release 6 |
8 |
Version: %{version} |
9 |
Release: %{release}%{?dist} |
10 |
License: GPL |
11 |
Group: Networking/Remote access |
12 |
Source: %{name}-%{version}.tar.gz |
13 |
|
14 |
BuildRoot: /var/tmp/%{name}-%{version}-%{release}-buildroot |
15 |
BuildArchitectures: noarch |
16 |
|
17 |
BuildRequires: e-smith-devtools |
18 |
|
19 |
Requires: e-smith-base |
20 |
Requires: openvpn |
21 |
#Requires: perl(Net::OpenVPN::Manage) |
22 |
Patch0:smeserver-openvpn-routed-0.1.6-Add-in-systemd-startup.patch |
23 |
Patch1: smeserver-openvpn-routed-0.1.6-bz11336-sme10compatible.patch |
24 |
Patch2: smeserver-openvpn-routed-0.1.6-bz12020-backup.patch |
25 |
|
26 |
%description |
27 |
This package contains all the needed scripts and templates |
28 |
to have a full working openvpn server running in routed mode. |
29 |
|
30 |
|
31 |
%changelog |
32 |
* Sat Jul 30 2022 Brian Read <brianr@bjsystems.co.uk> 0.1.6-6.sme |
33 |
- Re-build and link to latest devtools [SME: 11997] |
34 |
|
35 |
* Sat Jul 23 2022 Jean-Philippe Pialasse <tests@pialasse.com> 0.1.6-5.sme |
36 |
- add to core backup [SME: 11997] |
37 |
|
38 |
* Thu Apr 01 2021 Jean-Philippe Pialasse <tests@pialasse.com> 0.1.6-4.sme |
39 |
- autoconfiguration if openvpn-bridge is isntalled and configured [SME: 11336] |
40 |
- reworked systemd unit and scripts |
41 |
- new property HMAC forced to SHA256, instead of insecure default SHA1 [SME: 9925] |
42 |
- Cipher now enforced to AES-128-CBC, instead of insecure default Blowfish [SME: 9919] |
43 |
- possibility to exclude networks to push [SME: 10548] |
44 |
|
45 |
* Thu Feb 04 2021 Brian Read <brianr@bjsystems.co.uk> 0.1.6-2.sme |
46 |
- Initial import to SME10 [SME: 11336] |
47 |
- Add-in-systemd-startup |
48 |
|
49 |
* Mon Apr 10 2017 Daniel Berteaud <daniel@firewall-services.com> 0.1.6-1 |
50 |
- Update pam plugin path [SME: 10220] |
51 |
|
52 |
* Mon Feb 8 2016 Daniel Berteaud <daniel@firewall-services.com> 0.1.5-1 |
53 |
- Create /etc/openvpn/routed/dev/urandom [SME: 9238] |
54 |
|
55 |
* Tue Sep 29 2015 Daniel Berteaud <daniel@firewall-services.com> 0.1.4-1 |
56 |
- Make crl verification optional |
57 |
- Set a default Network if none is set |
58 |
- restrict permission on the management-pass.txt file |
59 |
|
60 |
* Wed Dec 3 2014 Daniel Berteaud <daniel@firewall-services.com> 0.1.3-1 |
61 |
- Correctly push route to local network when not redirecting gw |
62 |
|
63 |
* Mon Jun 23 2014 Daniel Berteaud <daniel@firewall-services.com> 0.1.2-1 |
64 |
- Fix plugin path on x86_64 |
65 |
|
66 |
* Wed Aug 21 2013 Daniel Berteaud <daniel@firewall-services.com> 0.1.1-1 |
67 |
- Use full path to the up script |
68 |
|
69 |
* Tue Jun 11 2013 Daniel Berteaud <daniel@firewall-services.com> 0.1.0-1 |
70 |
- initial release |
71 |
|
72 |
%prep |
73 |
%setup -q -n %{name}-%{version} |
74 |
%patch0 -p1 |
75 |
%patch1 -p1 |
76 |
%patch2 -p1 |
77 |
|
78 |
%build |
79 |
perl createlinks |
80 |
|
81 |
%{__mkdir_p} root/etc/openvpn/routed/ccd |
82 |
%{__mkdir_p} root/etc/openvpn/routed/priv |
83 |
%{__mkdir_p} root/etc/openvpn/routed/pub |
84 |
%{__mkdir_p} root/etc/openvpn/routed/tmp |
85 |
%{__mkdir_p} root/etc/openvpn/routed/dev |
86 |
%{__mkdir_p} root/var/log/openvpn-routed |
87 |
|
88 |
%install |
89 |
/bin/rm -rf $RPM_BUILD_ROOT |
90 |
(cd root ; /usr/bin/find . -depth -print | /bin/cpio -dump $RPM_BUILD_ROOT) |
91 |
/bin/rm -f %{name}-%{version}-filelist |
92 |
/sbin/e-smith/genfilelist $RPM_BUILD_ROOT \ |
93 |
--file /sbin/e-smith/systemd/openvpn-routed 'attr(0755,root,root)' \ |
94 |
--file /var/service/openvpn-routed/run 'attr(0755,root,root)' \ |
95 |
--file /var/service/openvpn-routed/log/run 'attr(0755,root,root)' \ |
96 |
--dir /var/log/openvpn-routed 'attr(0750,smelog,smelog)' \ |
97 |
--dir /etc/openvpn/routed/pub 'attr(0755,root,root)' \ |
98 |
--dir /etc/openvpn/routed/priv 'attr(0750,root,root)' \ |
99 |
--dir /etc/openvpn/routed/ccd 'attr(0755,root,root)' \ |
100 |
--dir /etc/openvpn/routed/tmp 'attr(0770,root,openvpn)' \ |
101 |
--file /usr/bin/ovpn-routed-update-crl 'attr(0750,root,root)' \ |
102 |
--file /etc/openvpn/routed/bin/up 'attr(755,root,root)' \ |
103 |
> %{name}-%{version}-filelist |
104 |
|
105 |
%files -f %{name}-%{version}-filelist |
106 |
%defattr(-,root,root) |
107 |
|
108 |
%clean |
109 |
rm -rf $RPM_BUILD_ROOT |
110 |
|
111 |
%post |
112 |
if [ \! -c /etc/openvpn/routed/dev/urandom ]; then |
113 |
mknod -m 0444 /etc/openvpn/routed/dev/urandom c 1 9 |
114 |
fi |
115 |
|
116 |
%preun |
117 |
|