1 |
vip-ire |
1.7 |
# $Id: smeserver-openvpn-s2s.spec,v 1.6 2010/12/07 19:35:25 vip-ire Exp $ |
2 |
slords |
1.1 |
# Authority: vip-ire |
3 |
|
|
# Name: Daniel Berteaud |
4 |
|
|
|
5 |
|
|
Summary: OpenVPN, a strong VPN solution built over SSL, for site to site tunnels |
6 |
|
|
%define name smeserver-openvpn-s2s |
7 |
|
|
Name: %{name} |
8 |
|
|
%define version 0.1 |
9 |
vip-ire |
1.7 |
%define release 16 |
10 |
slords |
1.1 |
Version: %{version} |
11 |
|
|
Release: %{release}%{?dist} |
12 |
|
|
License: GPL |
13 |
|
|
Group: Networking/Remote access |
14 |
|
|
Source: %{name}-%{version}.tar.gz |
15 |
|
|
|
16 |
|
|
Patch0: smeserver-openvpn-s2s-0.1-default_to_enabled.patch |
17 |
|
|
Patch1: smeserver-openvpn-s2s-0.1-limit_network_delete_and_create.patch |
18 |
|
|
Patch2: smeserver-openvpn-s2s-0.1-fix_validation_on_update.patch |
19 |
|
|
Patch3: smeserver-openvpn-s2s-0.1-check_for_local_nets.patch |
20 |
|
|
Patch4: smeserver-openvpn-s2s-0.1-update_templates_on_boostrap.patch |
21 |
|
|
Patch5: smeserver-openvpn-s2s-0.1-default_to_enabled_on_create.patch |
22 |
|
|
Patch6: smeserver-openvpn-s2s-0.1-allow_inbound_prop.patch |
23 |
|
|
Patch7: smeserver-openvpn-s2s-0.1-fix_add_route.patch |
24 |
|
|
Patch8: smeserver-openvpn-s2s-0.1-denylog_instead_of_drop.patch |
25 |
|
|
Patch9: smeserver-openvpn-s2s-0.1-check_multiple_networks.patch |
26 |
|
|
Patch10: smeserver-openvpn-s2s-0.1-add_net_is_local_lexicon.patch |
27 |
|
|
Patch11: smeserver-openvpn-s2s-0.1-rename_logrotate_conf.patch |
28 |
|
|
Patch12: smeserver-openvpn-s2s-0.1-support_per_conf_customization.patch |
29 |
|
|
Patch13: smeserver-openvpn-s2s-0.1-tls_auth_1.patch |
30 |
|
|
Patch14: smeserver-openvpn-s2s-0.1-tls_locale_1.patch |
31 |
|
|
Patch15: smeserver-openvpn-s2s-0.1-tls_locale_2.patch |
32 |
|
|
Patch16: smeserver-openvpn-s2s-0.1-tls_locale_3.patch |
33 |
|
|
Patch17: smeserver-openvpn-s2s-0.1-set_network_non_removable.patch |
34 |
|
|
Patch18: smeserver-openvpn-s2s-0.1-implement_crl_verification.patch |
35 |
|
|
Patch19: smeserver-openvpn-s2s-0.1-fix_masq_templates.patch |
36 |
|
|
Patch20: smeserver-openvpn-s2s-0.1-various_conf_optimization.patch |
37 |
|
|
Patch21: smeserver-openvpn-s2s-0.1-set_wget_timeout.patch |
38 |
|
|
Patch22: smeserver-openvpn-s2s-0.1-fix_crontab_template.patch |
39 |
|
|
Patch23: smeserver-openvpn-s2s-0.1-fix_removable_typo.patch |
40 |
|
|
Patch24: smeserver-openvpn-s2s-0.1-expand_and_restart_smb.patch |
41 |
|
|
Patch25: smeserver-openvpn-s2s-0.1-remove_nice.patch |
42 |
vip-ire |
1.2 |
Patch26: smeserver-openvpn-s2s-0.1-locale-2010-11-04.patch |
43 |
vip-ire |
1.4 |
Patch27: smeserver-openvpn-s2s-0.1-locale-2010-11-08.patch |
44 |
vip-ire |
1.5 |
Patch28: smeserver-openvpn-s2s-0.1-fix_type_variable.patch |
45 |
vip-ire |
1.6 |
Patch29: smeserver-openvpn-s2s-0.1-remove_useless_samba_template.patch |
46 |
slords |
1.1 |
|
47 |
|
|
BuildArchitectures: noarch |
48 |
|
|
|
49 |
|
|
BuildRequires: e-smith-devtools |
50 |
vip-ire |
1.2 |
BuildRoot: /var/tmp/%{name}-%{version}-%{release}-buildroot |
51 |
slords |
1.1 |
|
52 |
|
|
Requires: e-smith-base |
53 |
|
|
Requires: openvpn >= 2.1 |
54 |
|
|
|
55 |
|
|
%description |
56 |
|
|
This package contains all the needed scripts and templates |
57 |
|
|
to run openvpn in client or server mode for site to site tunnels |
58 |
|
|
|
59 |
|
|
%changelog |
60 |
vip-ire |
1.7 |
* Tue Jan 25 2011 Daniel Berteaud <daniel@firewall-services.com> 0.1-16.sme |
61 |
|
|
- Stop disabling service on rpm removal (spec change only) |
62 |
|
|
|
63 |
vip-ire |
1.6 |
* Tue Dec 7 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-15.sme |
64 |
|
|
- Remove useless smb.conf template |
65 |
|
|
|
66 |
vip-ire |
1.5 |
* Tue Dec 7 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-14.sme |
67 |
|
|
- Fix type variable (thks M. Doerner) |
68 |
|
|
|
69 |
vip-ire |
1.4 |
* Mon Nov 8 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-13.sme |
70 |
|
|
- Apply locale 2010-11-08 patch |
71 |
|
|
|
72 |
vip-ire |
1.2 |
* Thu Nov 4 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-12.sme |
73 |
vip-ire |
1.3 |
- Apply locale 2010-11-04 patch |
74 |
vip-ire |
1.2 |
|
75 |
slords |
1.1 |
* Tue Nov 02 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-11.sme |
76 |
|
|
- Remove the nice directive |
77 |
|
|
|
78 |
|
|
* Mon Oct 18 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-10.sme |
79 |
|
|
- Expand smb.conf and restart samba services |
80 |
|
|
|
81 |
|
|
* Mon Oct 18 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-9.sme |
82 |
|
|
- Fix typo in up script |
83 |
|
|
|
84 |
|
|
* Mon Oct 18 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-8.sme |
85 |
|
|
- Various enhancement in templates |
86 |
|
|
- Set wget timeout |
87 |
|
|
- Fix crontab templates |
88 |
|
|
|
89 |
|
|
* Sun Oct 17 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-7.sme |
90 |
|
|
- Implement CRL updates and verification |
91 |
|
|
- Fix masq template |
92 |
|
|
|
93 |
|
|
* Sun Oct 17 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-6.sme |
94 |
|
|
- Set VPN networks non removable |
95 |
|
|
|
96 |
|
|
* Sun Oct 17 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-5.sme |
97 |
|
|
- Rename logrotate configuration file |
98 |
|
|
- Add missingok to logrotate conf |
99 |
|
|
- Support per configuration customization |
100 |
|
|
- Add TLS auth support |
101 |
|
|
|
102 |
|
|
* Mon Oct 4 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-4.sme |
103 |
|
|
- Fix adding routes in up script |
104 |
|
|
- Log drop trafic |
105 |
|
|
- Fix multiple net validation |
106 |
|
|
|
107 |
|
|
* Mon Oct 4 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-3.sme |
108 |
|
|
- allow one-way VPN with AllowInbound prop |
109 |
|
|
|
110 |
|
|
* Mon Oct 4 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-3.sme |
111 |
|
|
- Various fixes |
112 |
|
|
|
113 |
|
|
* Mon Oct 4 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-1.sme |
114 |
|
|
- initiale release (based on work from Florian Dejan) |
115 |
|
|
|
116 |
|
|
%prep |
117 |
|
|
|
118 |
|
|
%setup -q -n %{name}-%{version} |
119 |
|
|
%patch0 -p1 |
120 |
|
|
%patch1 -p1 |
121 |
|
|
%patch2 -p1 |
122 |
|
|
%patch3 -p1 |
123 |
|
|
%patch4 -p1 |
124 |
|
|
%patch5 -p1 |
125 |
|
|
%patch6 -p1 |
126 |
|
|
%patch7 -p1 |
127 |
|
|
%patch8 -p1 |
128 |
|
|
%patch9 -p1 |
129 |
|
|
%patch10 -p1 |
130 |
|
|
%patch11 -p1 |
131 |
|
|
%patch12 -p1 |
132 |
|
|
%patch13 -p1 |
133 |
|
|
%patch14 -p1 |
134 |
|
|
%patch15 -p1 |
135 |
|
|
%patch16 -p1 |
136 |
|
|
%patch17 -p1 |
137 |
|
|
%patch18 -p1 |
138 |
|
|
%patch19 -p1 |
139 |
|
|
%patch20 -p1 |
140 |
|
|
%patch21 -p1 |
141 |
|
|
%patch22 -p1 |
142 |
|
|
%patch23 -p1 |
143 |
|
|
%patch24 -p1 |
144 |
|
|
%patch25 -p1 |
145 |
vip-ire |
1.2 |
%patch26 -p1 |
146 |
vip-ire |
1.4 |
%patch27 -p1 |
147 |
vip-ire |
1.5 |
%patch28 -p1 |
148 |
vip-ire |
1.6 |
%patch29 -p1 |
149 |
slords |
1.1 |
|
150 |
|
|
%build |
151 |
|
|
perl createlinks |
152 |
|
|
|
153 |
|
|
%{__mkdir_p} root/etc/openvpn/s2s/priv |
154 |
|
|
%{__mkdir_p} root/etc/openvpn/s2s/pub |
155 |
|
|
%{__mkdir_p} root/var/run/openvpn-s2s |
156 |
|
|
%{__mkdir_p} root/var/log/openvpn-s2s |
157 |
|
|
|
158 |
|
|
%install |
159 |
|
|
/bin/rm -rf $RPM_BUILD_ROOT |
160 |
|
|
(cd root ; /usr/bin/find . -depth -print | /bin/cpio -dump $RPM_BUILD_ROOT) |
161 |
|
|
/bin/rm -f %{name}-%{version}-filelist |
162 |
|
|
/sbin/e-smith/genfilelist $RPM_BUILD_ROOT \ |
163 |
|
|
--dir /etc/openvpn/s2s/pub 'attr(0755,root,root)' \ |
164 |
|
|
--dir /etc/openvpn/s2s/priv 'attr(0750,root,root)' \ |
165 |
|
|
--dir /var/log/openvpn-s2s 'attr(0770,root,nobody)' \ |
166 |
|
|
--file /etc/openvpn/s2s/bin/up 'attr(4750,root,openvpn)' \ |
167 |
|
|
> %{name}-%{version}-filelist |
168 |
|
|
|
169 |
|
|
%files -f %{name}-%{version}-filelist |
170 |
|
|
%defattr(-,root,root) |
171 |
|
|
|
172 |
|
|
%clean |
173 |
|
|
rm -rf $RPM_BUILD_ROOT |
174 |
|
|
|
175 |
|
|
|
176 |
|
|
%post |
177 |
|
|
|
178 |
|
|
%preun |
179 |
|
|
|