1 |
# $Id: smeserver-openvpn-s2s.spec,v 1.9 2017/12/02 06:28:56 cvsuser Exp $ |
# $Id: smeserver-openvpn-s2s.spec,v 1.6 2021/04/02 02:12:09 jpp Exp $ |
2 |
# Authority: vip-ire |
# Authority: vip-ire |
3 |
# Name: Daniel Berteaud |
# Name: Daniel Berteaud |
4 |
|
|
6 |
%define name smeserver-openvpn-s2s |
%define name smeserver-openvpn-s2s |
7 |
Name: %{name} |
Name: %{name} |
8 |
%define version 0.2 |
%define version 0.2 |
9 |
%define release 8 |
%define release 14 |
10 |
Version: %{version} |
Version: %{version} |
11 |
Release: %{release}%{?dist} |
Release: %{release}%{?dist} |
12 |
License: GPL |
License: GPL |
18 |
Patch2: smeserver-openvpn-s2s-0.2-locale-2015-07-01.patch |
Patch2: smeserver-openvpn-s2s-0.2-locale-2015-07-01.patch |
19 |
Patch3: smeserver-openvpn-s2s-0.2-fix_daemon_id_validation.patch |
Patch3: smeserver-openvpn-s2s-0.2-fix_daemon_id_validation.patch |
20 |
Patch4: smeserver-openvpn-s2s-0.2-locale-2017-12-02.patch |
Patch4: smeserver-openvpn-s2s-0.2-locale-2017-12-02.patch |
21 |
|
Patch5: smeserver-openvpn-s2s-0.2-Alter-for-systemd-startup.patch |
22 |
|
Patch6: smeserver-openvpn-s2s-0.2-sme10.patch |
23 |
|
Patch7: smeserver-openvpn-s2s-0.2-locale-2021-08-23.patch |
24 |
|
|
25 |
BuildArchitectures: noarch |
BuildArchitectures: noarch |
26 |
|
|
35 |
to run openvpn in client or server mode for site to site tunnels |
to run openvpn in client or server mode for site to site tunnels |
36 |
|
|
37 |
%changelog |
%changelog |
38 |
|
* Mon Aug 23 2021 Terry Fage <terry.fage@gmail.com> 0.2-14.sme |
39 |
|
- apply locale 2021-08-23 patch |
40 |
|
|
41 |
|
* Thu Apr 01 2021 Jean-Philippe Pialasse <tests@pialasse.com> 0.2-13.sme |
42 |
|
- fix permission on log dir [SME: 11516] |
43 |
|
|
44 |
|
* Wed Mar 31 2021 Jean-Philippe Pialasse <tests@pialasse.com> 0.2-12.sme |
45 |
|
- fix typos [SME: 11498] |
46 |
|
|
47 |
|
* Tue Mar 30 2021 Jean-Philippe Pialasse <tests@pialasse.com> 0.2-11.sme |
48 |
|
- enforce better cipher with settings [SME: 11498] |
49 |
|
- enforce better HMAC with setting [SME: 11498] |
50 |
|
- enforce TLS 1.2 or better with setting [SME: 11498] |
51 |
|
- enforce strong TLS ciphers with setting [SME: 11498] |
52 |
|
- better list of vpn connections [SME: 11337] |
53 |
|
- allow soft reload of individual connection [SME: 11337] |
54 |
|
- fix incorect permission on private keys [SME: 11337] |
55 |
|
|
56 |
|
* Thu Feb 04 2021 Brian Read <brianr@bjsystems.co.uk> 0.2-9.sme |
57 |
|
- Initial import to SME10 [SME: 11337] |
58 |
|
- Alter-for-systemd-startup |
59 |
|
|
60 |
* Sat Dec 02 2017 SME Translation Server <translations@contribs.org> 0.2-8.sme |
* Sat Dec 02 2017 SME Translation Server <translations@contribs.org> 0.2-8.sme |
61 |
- apply locale 2017-12-02 patch |
- apply locale 2017-12-02 patch |
62 |
|
|
163 |
%patch2 -p1 |
%patch2 -p1 |
164 |
%patch3 -p1 |
%patch3 -p1 |
165 |
%patch4 -p1 |
%patch4 -p1 |
166 |
|
%patch5 -p1 |
167 |
|
%patch6 -p1 |
168 |
|
%patch7 -p1 |
169 |
|
|
170 |
%build |
%build |
171 |
perl createlinks |
perl createlinks |
180 |
%install |
%install |
181 |
/bin/rm -rf $RPM_BUILD_ROOT |
/bin/rm -rf $RPM_BUILD_ROOT |
182 |
(cd root ; /usr/bin/find . -depth -print | /bin/cpio -dump $RPM_BUILD_ROOT) |
(cd root ; /usr/bin/find . -depth -print | /bin/cpio -dump $RPM_BUILD_ROOT) |
183 |
|
/bin/chmod +x $RPM_BUILD_ROOT/usr/sbin/systemd/openvpn-s2s |
184 |
/bin/rm -f %{name}-%{version}-filelist |
/bin/rm -f %{name}-%{version}-filelist |
185 |
/sbin/e-smith/genfilelist $RPM_BUILD_ROOT \ |
/sbin/e-smith/genfilelist $RPM_BUILD_ROOT \ |
186 |
--dir /etc/openvpn/s2s/pub 'attr(0755,root,root)' \ |
--dir /etc/openvpn/s2s/pub 'attr(0755,root,root)' \ |
187 |
--dir /etc/openvpn/s2s/priv 'attr(0750,root,root)' \ |
--dir /etc/openvpn/s2s/priv 'attr(0750,root,root)' \ |
188 |
--dir /etc/openvpn/s2s/tmp 'attr(0750,root,root)' \ |
--dir /etc/openvpn/s2s/tmp 'attr(0750,root,root)' \ |
189 |
--dir /var/log/openvpn-s2s 'attr(0770,root,nobody)' \ |
--dir /var/log/openvpn-s2s 'attr(0770,root,root)' \ |
190 |
--file /etc/openvpn/s2s/bin/up 'attr(4750,root,openvpn)' \ |
--file /etc/openvpn/s2s/bin/up 'attr(4750,root,openvpn)' \ |
191 |
> %{name}-%{version}-filelist |
> %{name}-%{version}-filelist |
192 |
|
|
200 |
if [ \! -c /etc/openvpn/s2s/dev/urandom ]; then |
if [ \! -c /etc/openvpn/s2s/dev/urandom ]; then |
201 |
mknod -m 0444 /etc/openvpn/s2s/dev/urandom c 1 9 |
mknod -m 0444 /etc/openvpn/s2s/dev/urandom c 1 9 |
202 |
fi |
fi |
203 |
|
#chown root:root /var/log/openvpn-s2s |
204 |
%preun |
%preun |
|
|
|