1 |
# $Id: smeserver-openvpn-s2s.spec,v 1.1 2021/02/04 16:21:25 brianr Exp $ |
# $Id: smeserver-openvpn-s2s.spec,v 1.5 2021/03/31 20:54:55 jpp Exp $ |
2 |
# Authority: vip-ire |
# Authority: vip-ire |
3 |
# Name: Daniel Berteaud |
# Name: Daniel Berteaud |
4 |
|
|
6 |
%define name smeserver-openvpn-s2s |
%define name smeserver-openvpn-s2s |
7 |
Name: %{name} |
Name: %{name} |
8 |
%define version 0.2 |
%define version 0.2 |
9 |
%define release 9 |
%define release 13 |
10 |
Version: %{version} |
Version: %{version} |
11 |
Release: %{release}%{?dist} |
Release: %{release}%{?dist} |
12 |
License: GPL |
License: GPL |
19 |
Patch3: smeserver-openvpn-s2s-0.2-fix_daemon_id_validation.patch |
Patch3: smeserver-openvpn-s2s-0.2-fix_daemon_id_validation.patch |
20 |
Patch4: smeserver-openvpn-s2s-0.2-locale-2017-12-02.patch |
Patch4: smeserver-openvpn-s2s-0.2-locale-2017-12-02.patch |
21 |
Patch5: smeserver-openvpn-s2s-0.2-Alter-for-systemd-startup.patch |
Patch5: smeserver-openvpn-s2s-0.2-Alter-for-systemd-startup.patch |
22 |
|
Patch6: smeserver-openvpn-s2s-0.2-sme10.patch |
23 |
|
|
24 |
BuildArchitectures: noarch |
BuildArchitectures: noarch |
25 |
|
|
34 |
to run openvpn in client or server mode for site to site tunnels |
to run openvpn in client or server mode for site to site tunnels |
35 |
|
|
36 |
%changelog |
%changelog |
37 |
|
* Thu Apr 01 2021 Jean-Philippe Pialasse <tests@pialasse.com> 0.2-13.sme |
38 |
|
- fix permission on log dir [SME: 11516] |
39 |
|
|
40 |
|
* Wed Mar 31 2021 Jean-Philippe Pialasse <tests@pialasse.com> 0.2-12.sme |
41 |
|
- fix typos [SME: 11498] |
42 |
|
|
43 |
|
* Tue Mar 30 2021 Jean-Philippe Pialasse <tests@pialasse.com> 0.2-11.sme |
44 |
|
- enforce better cipher with settings [SME: 11498] |
45 |
|
- enforce better HMAC with setting [SME: 11498] |
46 |
|
- enforce TLS 1.2 or better with setting [SME: 11498] |
47 |
|
- enforce strong TLS ciphers with setting [SME: 11498] |
48 |
|
- better list of vpn connections [SME: 11337] |
49 |
|
- allow soft reload of individual connection [SME: 11337] |
50 |
|
- fix incorect permission on private keys [SME: 11337] |
51 |
|
|
52 |
* Thu Feb 04 2021 Brian Read <brianr@bjsystems.co.uk> 0.2-9.sme |
* Thu Feb 04 2021 Brian Read <brianr@bjsystems.co.uk> 0.2-9.sme |
53 |
- Initial import to SME10 [SME: 11337] |
- Initial import to SME10 [SME: 11337] |
54 |
- Alter-for-systemd-startup |
- Alter-for-systemd-startup |
160 |
%patch3 -p1 |
%patch3 -p1 |
161 |
%patch4 -p1 |
%patch4 -p1 |
162 |
%patch5 -p1 |
%patch5 -p1 |
163 |
|
%patch6 -p1 |
164 |
|
|
165 |
%build |
%build |
166 |
perl createlinks |
perl createlinks |
181 |
--dir /etc/openvpn/s2s/pub 'attr(0755,root,root)' \ |
--dir /etc/openvpn/s2s/pub 'attr(0755,root,root)' \ |
182 |
--dir /etc/openvpn/s2s/priv 'attr(0750,root,root)' \ |
--dir /etc/openvpn/s2s/priv 'attr(0750,root,root)' \ |
183 |
--dir /etc/openvpn/s2s/tmp 'attr(0750,root,root)' \ |
--dir /etc/openvpn/s2s/tmp 'attr(0750,root,root)' \ |
184 |
--dir /var/log/openvpn-s2s 'attr(0770,root,nobody)' \ |
--dir /var/log/openvpn-s2s 'attr(0770,root,root)' \ |
185 |
--file /etc/openvpn/s2s/bin/up 'attr(4750,root,openvpn)' \ |
--file /etc/openvpn/s2s/bin/up 'attr(4750,root,openvpn)' \ |
186 |
> %{name}-%{version}-filelist |
> %{name}-%{version}-filelist |
187 |
|
|
196 |
if [ \! -c /etc/openvpn/s2s/dev/urandom ]; then |
if [ \! -c /etc/openvpn/s2s/dev/urandom ]; then |
197 |
mknod -m 0444 /etc/openvpn/s2s/dev/urandom c 1 9 |
mknod -m 0444 /etc/openvpn/s2s/dev/urandom c 1 9 |
198 |
fi |
fi |
199 |
|
#chown root:root /var/log/openvpn-s2s |
200 |
%preun |
%preun |
201 |
|
|