/[smecontribs]/rpms/smeserver-openvpn-s2s/contribs10/smeserver-openvpn-s2s.spec
ViewVC logotype

Annotation of /rpms/smeserver-openvpn-s2s/contribs10/smeserver-openvpn-s2s.spec

Parent Directory Parent Directory | Revision Log Revision Log | View Revision Graph Revision Graph

Revision 1.13 - (hide annotations) (download)
Fri Sep 6 01:30:08 2024 UTC (6 days, 1 hour ago) by terryfage
Branch: MAIN
CVS Tags: smeserver-openvpn-s2s-0_2-20_el7_sme, HEAD
Changes since 1.12: +7 -2 lines 
* Fri Sep 06 2024 Terry Fage <terry@fage.id.au> 0.2-20.sme
- apply locale 2024-09-06.patch
1 terryfage 1.13 # $Id: smeserver-openvpn-s2s.spec,v 1.12 2022/11/29 20:30:06 jpp Exp $
2 brianr 1.1 # Authority: vip-ire
3     # Name: Daniel Berteaud
4    
5     Summary: OpenVPN, a strong VPN solution built over SSL, for site to site tunnels
6     %define name smeserver-openvpn-s2s
7     Name: %{name}
8     %define version 0.2
9 terryfage 1.13 %define release 20
10 brianr 1.1 Version: %{version}
11     Release: %{release}%{?dist}
12     License: GPL
13     Group: Networking/Remote access
14     Source: %{name}-%{version}.tar.xz
15    
16     Patch0: smeserver-openvpn-s2s-0.2-use_verify_x509_name.patch
17     Patch1: smeserver-openvpn-s2s-0.2-locale-2015-02-17.patch
18     Patch2: smeserver-openvpn-s2s-0.2-locale-2015-07-01.patch
19     Patch3: smeserver-openvpn-s2s-0.2-fix_daemon_id_validation.patch
20     Patch4: smeserver-openvpn-s2s-0.2-locale-2017-12-02.patch
21 brianr 1.2 Patch5: smeserver-openvpn-s2s-0.2-Alter-for-systemd-startup.patch
22 jpp 1.3 Patch6: smeserver-openvpn-s2s-0.2-sme10.patch
23 terryfage 1.7 Patch7: smeserver-openvpn-s2s-0.2-locale-2021-08-23.patch
24 terryfage 1.8 Patch8: smeserver-openvpn-s2s-0.2-locale-2021-09-08.patch
25 jpp 1.9 Patch9: smeserver-openvpn-s2s-0.2-bz12019-backup.patch
26 jpp 1.11 Patch10: smeserver-openvpn-s2s-0.2-bz12224.patch
27 jpp 1.12 Patch11: smeserver-openvpn-s2s-0.2-bz12244-log.patch
28 terryfage 1.13 Patch12: smeserver-openvpn-s2s-0.2-locale-2024-09-06.patch
29 brianr 1.1
30     BuildArchitectures: noarch
31    
32     BuildRequires: e-smith-devtools
33     BuildRoot: /var/tmp/%{name}-%{version}-%{release}-buildroot
34    
35     Requires: e-smith-base
36     Requires: openvpn >= 2.1
37    
38     %description
39     This package contains all the needed scripts and templates
40     to run openvpn in client or server mode for site to site tunnels
41    
42     %changelog
43 terryfage 1.13 * Fri Sep 06 2024 Terry Fage <terry@fage.id.au> 0.2-20.sme
44     - apply locale 2024-09-06.patch
45    
46 jpp 1.12 * Tue Nov 29 2022 Jean-Philippe Pialasse <tests@pialasse.com> 0.2-19.sme
47     - log in locale time [SME: 12244]
48    
49 jpp 1.11 * Fri Nov 18 2022 Jean-Philippe Pialasse <tests@pialasse.com> 0.2-18.sme
50     - improve panel display [SME: 12224]
51    
52 brianr 1.10 * Sat Jul 30 2022 Brian Read <brianr@bjsystems.co.uk> 0.2-17.sme
53     - Re-build and link to latest devtools [SME: 11997]
54    
55 jpp 1.9 * Sat Jul 23 2022 Jean-Philippe Pialasse <tests@pialasse.com> 0.2-16.sme
56     - add to core backup [SME: 12019]
57    
58 terryfage 1.8 * Wed Sep 08 2021 Terry Fage <terry.fage@gmail.com> 0.2-14.sme
59     - apply locale 2021-09-08 patch
60    
61 terryfage 1.7 * Mon Aug 23 2021 Terry Fage <terry.fage@gmail.com> 0.2-14.sme
62     - apply locale 2021-08-23 patch
63    
64 jpp 1.6 * Thu Apr 01 2021 Jean-Philippe Pialasse <tests@pialasse.com> 0.2-13.sme
65 brianr 1.10 - Re-build and link to latest devtools permission on log dir [SME: 11516]
66 jpp 1.6
67 jpp 1.5 * Wed Mar 31 2021 Jean-Philippe Pialasse <tests@pialasse.com> 0.2-12.sme
68 brianr 1.10 - Re-build and link to latest devtools typos [SME: 11498]
69 jpp 1.5
70 jpp 1.4 * Tue Mar 30 2021 Jean-Philippe Pialasse <tests@pialasse.com> 0.2-11.sme
71 jpp 1.3 - enforce better cipher with settings [SME: 11498]
72     - enforce better HMAC with setting [SME: 11498]
73     - enforce TLS 1.2 or better with setting [SME: 11498]
74     - enforce strong TLS ciphers with setting [SME: 11498]
75     - better list of vpn connections [SME: 11337]
76     - allow soft reload of individual connection [SME: 11337]
77 brianr 1.10 - Re-build and link to latest devtools incorect permission on private keys [SME: 11337]
78 jpp 1.3
79 brianr 1.2 * Thu Feb 04 2021 Brian Read <brianr@bjsystems.co.uk> 0.2-9.sme
80     - Initial import to SME10 [SME: 11337]
81     - Alter-for-systemd-startup
82    
83 brianr 1.1 * Sat Dec 02 2017 SME Translation Server <translations@contribs.org> 0.2-8.sme
84     - apply locale 2017-12-02 patch
85    
86     * Wed Oct 25 2017 Daniel Berteaud <daniel@firewall-services.com> 0.2-7.sme
87     - Fix daemon ID validation [SME: 10446]
88    
89     * Mon Feb 8 2016 Daniel Berteaud <daniel@firewall-services.com> 0.2-6.sme
90     - Create /etc/openvpn/s2s/dev/urandom [SME: 9238]
91    
92     * Wed Jul 1 2015 stephane de Labrusse <stephdl@de-labrusse.fr> 0.2-5.sme
93     - Apply smeserver-openvpn-s2s-0.2-locale-2015-07-01.patch [SME: 8967]
94    
95     * Tue Feb 17 2015 Daniel Berteaud <daniel@firewall-services.com> 0.2-4.sme
96     - Apply locale 2015-02-17 patch
97    
98     * Thu Dec 18 2014 Daniel Berteaud <daniel@firewall-services.com> 0.2-3.sme
99     - Create required (but unused) /etc/openvpn/s2s/tmp dir
100    
101     * Thu Nov 14 2013 Daniel Berteaud <daniel@firewall-services.com> 0.2-2.sme
102     - Use verify-x509-name instead of tls-remote
103    
104     * Mon Nov 11 2013 Daniel Berteaud <daniel@firewall-services.com> 0.2-1.sme
105     - Rebuild for SME9
106    
107     * Sun Jul 14 2013 JP Pialasse <tests@pialasse.com> 0.1-22.sme
108     - apply locale 2013-07-14 patch
109    
110     * Thu Oct 13 2011 Daniel Berteaud <daniel@firewall-services.com> 0.1-21.sme
111     - Apply locale 2011-10-13 patch
112    
113     * Thu Jun 2 2011 Daniel Berteaud <daniel@firewall-services.com> 0.1-20.sme
114     - Fix remote host description
115    
116     * Wed Jun 1 2011 Daniel Berteaud <daniel@firewall-services.com> 0.1-19.sme
117     - SNAT outbound connexions to use the local IP as source
118    
119     * Tue Apr 19 2011 Daniel Berteaud <daniel@firewall-services.com> 0.1-18.sme
120     - Reduce inactivity timeout
121    
122     * Sun Mar 06 2011 SME Translation Server <translations@contribs.org> 0.1-17.sme
123     - apply locale 2011-03-06 patch
124    
125     * Tue Jan 25 2011 Daniel Berteaud <daniel@firewall-services.com> 0.1-16.sme
126     - Stop disabling service on rpm removal (spec change only)
127    
128     * Tue Dec 7 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-15.sme
129     - Remove useless smb.conf template
130    
131     * Tue Dec 7 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-14.sme
132     - Fix type variable (thks M. Doerner)
133    
134     * Mon Nov 8 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-13.sme
135     - Apply locale 2010-11-08 patch
136    
137     * Thu Nov 4 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-12.sme
138     - Apply locale 2010-11-04 patch
139    
140     * Tue Nov 02 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-11.sme
141     - Remove the nice directive
142    
143     * Mon Oct 18 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-10.sme
144     - Expand smb.conf and restart samba services
145    
146     * Mon Oct 18 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-9.sme
147     - Fix typo in up script
148    
149     * Mon Oct 18 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-8.sme
150     - Various enhancement in templates
151     - Set wget timeout
152     - Fix crontab templates
153    
154     * Sun Oct 17 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-7.sme
155     - Implement CRL updates and verification
156     - Fix masq template
157    
158     * Sun Oct 17 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-6.sme
159     - Set VPN networks non removable
160    
161     * Sun Oct 17 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-5.sme
162     - Rename logrotate configuration file
163     - Add missingok to logrotate conf
164     - Support per configuration customization
165     - Add TLS auth support
166    
167     * Mon Oct 4 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-4.sme
168     - Fix adding routes in up script
169     - Log drop trafic
170     - Fix multiple net validation
171    
172     * Mon Oct 4 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-3.sme
173     - allow one-way VPN with AllowInbound prop
174    
175     * Mon Oct 4 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-3.sme
176     - Various fixes
177    
178     * Mon Oct 4 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-1.sme
179     - initiale release (based on work from Florian Dejan)
180    
181     %prep
182    
183     %setup -q -n %{name}-%{version}
184     %patch0 -p1
185     %patch1 -p1
186     %patch2 -p1
187     %patch3 -p1
188     %patch4 -p1
189 brianr 1.2 %patch5 -p1
190 jpp 1.3 %patch6 -p1
191 terryfage 1.7 %patch7 -p1
192 terryfage 1.8 %patch8 -p1
193 jpp 1.9 %patch9 -p1
194 jpp 1.11 %patch10 -p1
195 jpp 1.12 %patch11 -p1
196 terryfage 1.13 %patch12 -p1
197 brianr 1.1
198     %build
199     perl createlinks
200    
201     %{__mkdir_p} root/etc/openvpn/s2s/priv
202     %{__mkdir_p} root/etc/openvpn/s2s/pub
203     %{__mkdir_p} root/etc/openvpn/s2s/tmp
204     %{__mkdir_p} root/etc/openvpn/s2s/dev
205 jpp 1.12 %{__mkdir_p} root/etc/openvpn/s2s/etc
206 brianr 1.1 %{__mkdir_p} root/var/run/openvpn-s2s
207     %{__mkdir_p} root/var/log/openvpn-s2s
208    
209     %install
210     /bin/rm -rf $RPM_BUILD_ROOT
211     (cd root ; /usr/bin/find . -depth -print | /bin/cpio -dump $RPM_BUILD_ROOT)
212 brianr 1.2 /bin/chmod +x $RPM_BUILD_ROOT/usr/sbin/systemd/openvpn-s2s
213 brianr 1.1 /bin/rm -f %{name}-%{version}-filelist
214     /sbin/e-smith/genfilelist $RPM_BUILD_ROOT \
215     --dir /etc/openvpn/s2s/pub 'attr(0755,root,root)' \
216     --dir /etc/openvpn/s2s/priv 'attr(0750,root,root)' \
217     --dir /etc/openvpn/s2s/tmp 'attr(0750,root,root)' \
218 jpp 1.12 --dir /etc/openvpn/s2s/etc 'attr(0750,root,root)' \
219 jpp 1.6 --dir /var/log/openvpn-s2s 'attr(0770,root,root)' \
220 brianr 1.1 --file /etc/openvpn/s2s/bin/up 'attr(4750,root,openvpn)' \
221     > %{name}-%{version}-filelist
222    
223     %files -f %{name}-%{version}-filelist
224     %defattr(-,root,root)
225    
226     %clean
227     rm -rf $RPM_BUILD_ROOT
228    
229     %post
230     if [ \! -c /etc/openvpn/s2s/dev/urandom ]; then
231     mknod -m 0444 /etc/openvpn/s2s/dev/urandom c 1 9
232     fi
233 jpp 1.6 #chown root:root /var/log/openvpn-s2s
234 brianr 1.1 %preun
admin@koozali.org
 ViewVC Help
Powered by ViewVC 1.2.1 RSS 2.0 feed