1 |
# $Id: smeserver-openvpn-s2s.spec,v 1.2 2021/02/05 12:17:48 brianr Exp $ |
# $Id: smeserver-openvpn-s2s.spec,v 1.11 2022/11/18 06:24:45 jpp Exp $ |
2 |
# Authority: vip-ire |
# Authority: vip-ire |
3 |
# Name: Daniel Berteaud |
# Name: Daniel Berteaud |
4 |
|
|
6 |
%define name smeserver-openvpn-s2s |
%define name smeserver-openvpn-s2s |
7 |
Name: %{name} |
Name: %{name} |
8 |
%define version 0.2 |
%define version 0.2 |
9 |
%define release 10 |
%define release 19 |
10 |
Version: %{version} |
Version: %{version} |
11 |
Release: %{release}%{?dist} |
Release: %{release}%{?dist} |
12 |
License: GPL |
License: GPL |
20 |
Patch4: smeserver-openvpn-s2s-0.2-locale-2017-12-02.patch |
Patch4: smeserver-openvpn-s2s-0.2-locale-2017-12-02.patch |
21 |
Patch5: smeserver-openvpn-s2s-0.2-Alter-for-systemd-startup.patch |
Patch5: smeserver-openvpn-s2s-0.2-Alter-for-systemd-startup.patch |
22 |
Patch6: smeserver-openvpn-s2s-0.2-sme10.patch |
Patch6: smeserver-openvpn-s2s-0.2-sme10.patch |
23 |
|
Patch7: smeserver-openvpn-s2s-0.2-locale-2021-08-23.patch |
24 |
|
Patch8: smeserver-openvpn-s2s-0.2-locale-2021-09-08.patch |
25 |
|
Patch9: smeserver-openvpn-s2s-0.2-bz12019-backup.patch |
26 |
|
Patch10: smeserver-openvpn-s2s-0.2-bz12224.patch |
27 |
|
Patch11: smeserver-openvpn-s2s-0.2-bz12244-log.patch |
28 |
|
|
29 |
BuildArchitectures: noarch |
BuildArchitectures: noarch |
30 |
|
|
39 |
to run openvpn in client or server mode for site to site tunnels |
to run openvpn in client or server mode for site to site tunnels |
40 |
|
|
41 |
%changelog |
%changelog |
42 |
* Tue Mar 30 2021 Jean-Philippe Pialasse <tests@pialasse.com> 0.2-10.sme |
* Tue Nov 29 2022 Jean-Philippe Pialasse <tests@pialasse.com> 0.2-19.sme |
43 |
|
- log in locale time [SME: 12244] |
44 |
|
|
45 |
|
* Fri Nov 18 2022 Jean-Philippe Pialasse <tests@pialasse.com> 0.2-18.sme |
46 |
|
- improve panel display [SME: 12224] |
47 |
|
|
48 |
|
* Sat Jul 30 2022 Brian Read <brianr@bjsystems.co.uk> 0.2-17.sme |
49 |
|
- Re-build and link to latest devtools [SME: 11997] |
50 |
|
|
51 |
|
* Sat Jul 23 2022 Jean-Philippe Pialasse <tests@pialasse.com> 0.2-16.sme |
52 |
|
- add to core backup [SME: 12019] |
53 |
|
|
54 |
|
* Wed Sep 08 2021 Terry Fage <terry.fage@gmail.com> 0.2-14.sme |
55 |
|
- apply locale 2021-09-08 patch |
56 |
|
|
57 |
|
* Mon Aug 23 2021 Terry Fage <terry.fage@gmail.com> 0.2-14.sme |
58 |
|
- apply locale 2021-08-23 patch |
59 |
|
|
60 |
|
* Thu Apr 01 2021 Jean-Philippe Pialasse <tests@pialasse.com> 0.2-13.sme |
61 |
|
- Re-build and link to latest devtools permission on log dir [SME: 11516] |
62 |
|
|
63 |
|
* Wed Mar 31 2021 Jean-Philippe Pialasse <tests@pialasse.com> 0.2-12.sme |
64 |
|
- Re-build and link to latest devtools typos [SME: 11498] |
65 |
|
|
66 |
|
* Tue Mar 30 2021 Jean-Philippe Pialasse <tests@pialasse.com> 0.2-11.sme |
67 |
- enforce better cipher with settings [SME: 11498] |
- enforce better cipher with settings [SME: 11498] |
68 |
- enforce better HMAC with setting [SME: 11498] |
- enforce better HMAC with setting [SME: 11498] |
69 |
- enforce TLS 1.2 or better with setting [SME: 11498] |
- enforce TLS 1.2 or better with setting [SME: 11498] |
70 |
- enforce strong TLS ciphers with setting [SME: 11498] |
- enforce strong TLS ciphers with setting [SME: 11498] |
71 |
- better list of vpn connections [SME: 11337] |
- better list of vpn connections [SME: 11337] |
72 |
- allow soft reload of individual connection [SME: 11337] |
- allow soft reload of individual connection [SME: 11337] |
73 |
- fix incorect permission on private keys [SME: 11337] |
- Re-build and link to latest devtools incorect permission on private keys [SME: 11337] |
74 |
|
|
75 |
* Thu Feb 04 2021 Brian Read <brianr@bjsystems.co.uk> 0.2-9.sme |
* Thu Feb 04 2021 Brian Read <brianr@bjsystems.co.uk> 0.2-9.sme |
76 |
- Initial import to SME10 [SME: 11337] |
- Initial import to SME10 [SME: 11337] |
184 |
%patch4 -p1 |
%patch4 -p1 |
185 |
%patch5 -p1 |
%patch5 -p1 |
186 |
%patch6 -p1 |
%patch6 -p1 |
187 |
|
%patch7 -p1 |
188 |
|
%patch8 -p1 |
189 |
|
%patch9 -p1 |
190 |
|
%patch10 -p1 |
191 |
|
%patch11 -p1 |
192 |
|
|
193 |
%build |
%build |
194 |
perl createlinks |
perl createlinks |
197 |
%{__mkdir_p} root/etc/openvpn/s2s/pub |
%{__mkdir_p} root/etc/openvpn/s2s/pub |
198 |
%{__mkdir_p} root/etc/openvpn/s2s/tmp |
%{__mkdir_p} root/etc/openvpn/s2s/tmp |
199 |
%{__mkdir_p} root/etc/openvpn/s2s/dev |
%{__mkdir_p} root/etc/openvpn/s2s/dev |
200 |
|
%{__mkdir_p} root/etc/openvpn/s2s/etc |
201 |
%{__mkdir_p} root/var/run/openvpn-s2s |
%{__mkdir_p} root/var/run/openvpn-s2s |
202 |
%{__mkdir_p} root/var/log/openvpn-s2s |
%{__mkdir_p} root/var/log/openvpn-s2s |
203 |
|
|
210 |
--dir /etc/openvpn/s2s/pub 'attr(0755,root,root)' \ |
--dir /etc/openvpn/s2s/pub 'attr(0755,root,root)' \ |
211 |
--dir /etc/openvpn/s2s/priv 'attr(0750,root,root)' \ |
--dir /etc/openvpn/s2s/priv 'attr(0750,root,root)' \ |
212 |
--dir /etc/openvpn/s2s/tmp 'attr(0750,root,root)' \ |
--dir /etc/openvpn/s2s/tmp 'attr(0750,root,root)' \ |
213 |
--dir /var/log/openvpn-s2s 'attr(0770,root,nobody)' \ |
--dir /etc/openvpn/s2s/etc 'attr(0750,root,root)' \ |
214 |
|
--dir /var/log/openvpn-s2s 'attr(0770,root,root)' \ |
215 |
--file /etc/openvpn/s2s/bin/up 'attr(4750,root,openvpn)' \ |
--file /etc/openvpn/s2s/bin/up 'attr(4750,root,openvpn)' \ |
216 |
> %{name}-%{version}-filelist |
> %{name}-%{version}-filelist |
217 |
|
|
218 |
%files -f %{name}-%{version}-filelist |
%files -f %{name}-%{version}-filelist |
219 |
%defattr(-,root,root) |
%defattr(-,root,root) |
220 |
|
|
|
|
|
221 |
%clean |
%clean |
222 |
rm -rf $RPM_BUILD_ROOT |
rm -rf $RPM_BUILD_ROOT |
223 |
|
|
225 |
if [ \! -c /etc/openvpn/s2s/dev/urandom ]; then |
if [ \! -c /etc/openvpn/s2s/dev/urandom ]; then |
226 |
mknod -m 0444 /etc/openvpn/s2s/dev/urandom c 1 9 |
mknod -m 0444 /etc/openvpn/s2s/dev/urandom c 1 9 |
227 |
fi |
fi |
228 |
|
#chown root:root /var/log/openvpn-s2s |
229 |
%preun |
%preun |
|
|
|