smeserver-openvpn-s2s/contribs7/smeserver-openvpn-s2s.spec

# $Id: smeserver-openvpn-s2s.spec,v 1.7 2011/01/25 16:56:54 vip-ire Exp $
# Authority: vip-ire
# Name: Daniel Berteaud

Summary: OpenVPN, a strong VPN solution built over SSL, for site to site tunnels
%define name smeserver-openvpn-s2s
Name: %{name}
%define version 0.1
%define release 17
Version: %{version}
Release: %{release}%{?dist}
License: GPL
Group: Networking/Remote access
Source: %{name}-%{version}.tar.gz

Patch0: smeserver-openvpn-s2s-0.1-default_to_enabled.patch
Patch1: smeserver-openvpn-s2s-0.1-limit_network_delete_and_create.patch
Patch2: smeserver-openvpn-s2s-0.1-fix_validation_on_update.patch
Patch3: smeserver-openvpn-s2s-0.1-check_for_local_nets.patch
Patch4: smeserver-openvpn-s2s-0.1-update_templates_on_boostrap.patch
Patch5: smeserver-openvpn-s2s-0.1-default_to_enabled_on_create.patch
Patch6: smeserver-openvpn-s2s-0.1-allow_inbound_prop.patch
Patch7: smeserver-openvpn-s2s-0.1-fix_add_route.patch
Patch8: smeserver-openvpn-s2s-0.1-denylog_instead_of_drop.patch
Patch9: smeserver-openvpn-s2s-0.1-check_multiple_networks.patch
Patch10: smeserver-openvpn-s2s-0.1-add_net_is_local_lexicon.patch
Patch11: smeserver-openvpn-s2s-0.1-rename_logrotate_conf.patch
Patch12: smeserver-openvpn-s2s-0.1-support_per_conf_customization.patch
Patch13: smeserver-openvpn-s2s-0.1-tls_auth_1.patch
Patch14: smeserver-openvpn-s2s-0.1-tls_locale_1.patch
Patch15: smeserver-openvpn-s2s-0.1-tls_locale_2.patch
Patch16: smeserver-openvpn-s2s-0.1-tls_locale_3.patch
Patch17: smeserver-openvpn-s2s-0.1-set_network_non_removable.patch
Patch18: smeserver-openvpn-s2s-0.1-implement_crl_verification.patch
Patch19: smeserver-openvpn-s2s-0.1-fix_masq_templates.patch
Patch20: smeserver-openvpn-s2s-0.1-various_conf_optimization.patch
Patch21: smeserver-openvpn-s2s-0.1-set_wget_timeout.patch
Patch22: smeserver-openvpn-s2s-0.1-fix_crontab_template.patch
Patch23: smeserver-openvpn-s2s-0.1-fix_removable_typo.patch
Patch24: smeserver-openvpn-s2s-0.1-expand_and_restart_smb.patch
Patch25: smeserver-openvpn-s2s-0.1-remove_nice.patch
Patch26: smeserver-openvpn-s2s-0.1-locale-2010-11-04.patch
Patch27: smeserver-openvpn-s2s-0.1-locale-2010-11-08.patch
Patch28: smeserver-openvpn-s2s-0.1-fix_type_variable.patch
Patch29: smeserver-openvpn-s2s-0.1-remove_useless_samba_template.patch
Patch30: smeserver-openvpn-s2s-0.1-locale-2011-03-06.patch

BuildArchitectures: noarch

BuildRequires: e-smith-devtools
BuildRoot: /var/tmp/%{name}-%{version}-%{release}-buildroot

Requires: e-smith-base
Requires: openvpn >= 2.1

%description
This package contains all the needed scripts and templates
to run openvpn in client or server mode for site to site tunnels

%changelog
* Sun Mar 06 2011 SME Translation Server <translations@contribs.org> 0.1-17.sme
- apply locale 2011-03-06 patch

* Tue Jan 25 2011 Daniel Berteaud <daniel@firewall-services.com> 0.1-16.sme
- Stop disabling service on rpm removal (spec change only)

* Tue Dec 7 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-15.sme
- Remove useless smb.conf template

* Tue Dec 7 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-14.sme
- Fix type variable (thks M. Doerner)

* Mon Nov 8 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-13.sme
- Apply locale 2010-11-08 patch

* Thu Nov 4 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-12.sme
- Apply locale 2010-11-04 patch 

* Tue Nov 02 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-11.sme
- Remove the nice directive

* Mon Oct 18 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-10.sme
- Expand smb.conf and restart samba services

* Mon Oct 18 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-9.sme
- Fix typo in up script

* Mon Oct 18 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-8.sme
- Various enhancement in templates
- Set wget timeout
- Fix crontab templates

* Sun Oct 17 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-7.sme
- Implement CRL updates and verification
- Fix masq template

* Sun Oct 17 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-6.sme
- Set VPN networks non removable

* Sun Oct 17 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-5.sme
- Rename logrotate configuration file
- Add missingok to logrotate conf
- Support per configuration customization
- Add TLS auth support

* Mon Oct 4 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-4.sme
- Fix adding routes in up script
- Log drop trafic
- Fix multiple net validation

* Mon Oct 4 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-3.sme
- allow one-way VPN with AllowInbound prop

* Mon Oct 4 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-3.sme
- Various fixes

* Mon Oct 4 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-1.sme
- initiale release (based on work from Florian Dejan)

%prep

%setup -q -n %{name}-%{version}
%patch0 -p1
%patch1 -p1
%patch2 -p1
%patch3 -p1
%patch4 -p1
%patch5 -p1
%patch6 -p1
%patch7 -p1
%patch8 -p1
%patch9 -p1
%patch10 -p1
%patch11 -p1
%patch12 -p1
%patch13 -p1
%patch14 -p1
%patch15 -p1
%patch16 -p1
%patch17 -p1
%patch18 -p1
%patch19 -p1
%patch20 -p1
%patch21 -p1
%patch22 -p1
%patch23 -p1
%patch24 -p1
%patch25 -p1
%patch26 -p1
%patch27 -p1
%patch28 -p1
%patch29 -p1
%patch30 -p1

%build
perl createlinks

%{__mkdir_p} root/etc/openvpn/s2s/priv
%{__mkdir_p} root/etc/openvpn/s2s/pub
%{__mkdir_p} root/var/run/openvpn-s2s
%{__mkdir_p} root/var/log/openvpn-s2s

%install
/bin/rm -rf $RPM_BUILD_ROOT
(cd root   ; /usr/bin/find . -depth -print | /bin/cpio -dump $RPM_BUILD_ROOT)
/bin/rm -f %{name}-%{version}-filelist
/sbin/e-smith/genfilelist $RPM_BUILD_ROOT \
  --dir /etc/openvpn/s2s/pub 'attr(0755,root,root)' \
  --dir /etc/openvpn/s2s/priv 'attr(0750,root,root)' \
  --dir /var/log/openvpn-s2s 'attr(0770,root,nobody)' \
  --file /etc/openvpn/s2s/bin/up 'attr(4750,root,openvpn)' \
  > %{name}-%{version}-filelist

%files -f %{name}-%{version}-filelist
%defattr(-,root,root)

%clean
rm -rf $RPM_BUILD_ROOT


%post

%preun

1	slords	1.8	# $Id: smeserver-openvpn-s2s.spec,v 1.7 2011/01/25 16:56:54 vip-ire Exp $
2	slords	1.1	# Authority: vip-ire
3			# Name: Daniel Berteaud
4
5			Summary: OpenVPN, a strong VPN solution built over SSL, for site to site tunnels
6			%define name smeserver-openvpn-s2s
7			Name: %{name}
8			%define version 0.1
9	slords	1.8	%define release 17
10	slords	1.1	Version: %{version}
11			Release: %{release}%{?dist}
12			License: GPL
13			Group: Networking/Remote access
14			Source: %{name}-%{version}.tar.gz
15
16			Patch0: smeserver-openvpn-s2s-0.1-default_to_enabled.patch
17			Patch1: smeserver-openvpn-s2s-0.1-limit_network_delete_and_create.patch
18			Patch2: smeserver-openvpn-s2s-0.1-fix_validation_on_update.patch
19			Patch3: smeserver-openvpn-s2s-0.1-check_for_local_nets.patch
20			Patch4: smeserver-openvpn-s2s-0.1-update_templates_on_boostrap.patch
21			Patch5: smeserver-openvpn-s2s-0.1-default_to_enabled_on_create.patch
22			Patch6: smeserver-openvpn-s2s-0.1-allow_inbound_prop.patch
23			Patch7: smeserver-openvpn-s2s-0.1-fix_add_route.patch
24			Patch8: smeserver-openvpn-s2s-0.1-denylog_instead_of_drop.patch
25			Patch9: smeserver-openvpn-s2s-0.1-check_multiple_networks.patch
26			Patch10: smeserver-openvpn-s2s-0.1-add_net_is_local_lexicon.patch
27			Patch11: smeserver-openvpn-s2s-0.1-rename_logrotate_conf.patch
28			Patch12: smeserver-openvpn-s2s-0.1-support_per_conf_customization.patch
29			Patch13: smeserver-openvpn-s2s-0.1-tls_auth_1.patch
30			Patch14: smeserver-openvpn-s2s-0.1-tls_locale_1.patch
31			Patch15: smeserver-openvpn-s2s-0.1-tls_locale_2.patch
32			Patch16: smeserver-openvpn-s2s-0.1-tls_locale_3.patch
33			Patch17: smeserver-openvpn-s2s-0.1-set_network_non_removable.patch
34			Patch18: smeserver-openvpn-s2s-0.1-implement_crl_verification.patch
35			Patch19: smeserver-openvpn-s2s-0.1-fix_masq_templates.patch
36			Patch20: smeserver-openvpn-s2s-0.1-various_conf_optimization.patch
37			Patch21: smeserver-openvpn-s2s-0.1-set_wget_timeout.patch
38			Patch22: smeserver-openvpn-s2s-0.1-fix_crontab_template.patch
39			Patch23: smeserver-openvpn-s2s-0.1-fix_removable_typo.patch
40			Patch24: smeserver-openvpn-s2s-0.1-expand_and_restart_smb.patch
41			Patch25: smeserver-openvpn-s2s-0.1-remove_nice.patch
42	vip-ire	1.2	Patch26: smeserver-openvpn-s2s-0.1-locale-2010-11-04.patch
43	vip-ire	1.4	Patch27: smeserver-openvpn-s2s-0.1-locale-2010-11-08.patch
44	vip-ire	1.5	Patch28: smeserver-openvpn-s2s-0.1-fix_type_variable.patch
45	vip-ire	1.6	Patch29: smeserver-openvpn-s2s-0.1-remove_useless_samba_template.patch
46	slords	1.8	Patch30: smeserver-openvpn-s2s-0.1-locale-2011-03-06.patch
47	slords	1.1
48			BuildArchitectures: noarch
49
50			BuildRequires: e-smith-devtools
51	vip-ire	1.2	BuildRoot: /var/tmp/%{name}-%{version}-%{release}-buildroot
52	slords	1.1
53			Requires: e-smith-base
54			Requires: openvpn >= 2.1
55
56			%description
57			This package contains all the needed scripts and templates
58			to run openvpn in client or server mode for site to site tunnels
59
60			%changelog
61	slords	1.8	* Sun Mar 06 2011 SME Translation Server <translations@contribs.org> 0.1-17.sme
62			- apply locale 2011-03-06 patch
63
64	vip-ire	1.7	* Tue Jan 25 2011 Daniel Berteaud <daniel@firewall-services.com> 0.1-16.sme
65			- Stop disabling service on rpm removal (spec change only)
66
67	vip-ire	1.6	* Tue Dec 7 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-15.sme
68			- Remove useless smb.conf template
69
70	vip-ire	1.5	* Tue Dec 7 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-14.sme
71			- Fix type variable (thks M. Doerner)
72
73	vip-ire	1.4	* Mon Nov 8 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-13.sme
74			- Apply locale 2010-11-08 patch
75
76	vip-ire	1.2	* Thu Nov 4 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-12.sme
77	vip-ire	1.3	- Apply locale 2010-11-04 patch
78	vip-ire	1.2
79	slords	1.1	* Tue Nov 02 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-11.sme
80			- Remove the nice directive
81
82			* Mon Oct 18 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-10.sme
83			- Expand smb.conf and restart samba services
84
85			* Mon Oct 18 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-9.sme
86			- Fix typo in up script
87
88			* Mon Oct 18 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-8.sme
89			- Various enhancement in templates
90			- Set wget timeout
91			- Fix crontab templates
92
93			* Sun Oct 17 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-7.sme
94			- Implement CRL updates and verification
95			- Fix masq template
96
97			* Sun Oct 17 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-6.sme
98			- Set VPN networks non removable
99
100			* Sun Oct 17 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-5.sme
101			- Rename logrotate configuration file
102			- Add missingok to logrotate conf
103			- Support per configuration customization
104			- Add TLS auth support
105
106			* Mon Oct 4 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-4.sme
107			- Fix adding routes in up script
108			- Log drop trafic
109			- Fix multiple net validation
110
111			* Mon Oct 4 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-3.sme
112			- allow one-way VPN with AllowInbound prop
113
114			* Mon Oct 4 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-3.sme
115			- Various fixes
116
117			* Mon Oct 4 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-1.sme
118			- initiale release (based on work from Florian Dejan)
119
120			%prep
121
122			%setup -q -n %{name}-%{version}
123			%patch0 -p1
124			%patch1 -p1
125			%patch2 -p1
126			%patch3 -p1
127			%patch4 -p1
128			%patch5 -p1
129			%patch6 -p1
130			%patch7 -p1
131			%patch8 -p1
132			%patch9 -p1
133			%patch10 -p1
134			%patch11 -p1
135			%patch12 -p1
136			%patch13 -p1
137			%patch14 -p1
138			%patch15 -p1
139			%patch16 -p1
140			%patch17 -p1
141			%patch18 -p1
142			%patch19 -p1
143			%patch20 -p1
144			%patch21 -p1
145			%patch22 -p1
146			%patch23 -p1
147			%patch24 -p1
148			%patch25 -p1
149	vip-ire	1.2	%patch26 -p1
150	vip-ire	1.4	%patch27 -p1
151	vip-ire	1.5	%patch28 -p1
152	vip-ire	1.6	%patch29 -p1
153	slords	1.8	%patch30 -p1
154	slords	1.1
155			%build
156			perl createlinks
157
158			%{__mkdir_p} root/etc/openvpn/s2s/priv
159			%{__mkdir_p} root/etc/openvpn/s2s/pub
160			%{__mkdir_p} root/var/run/openvpn-s2s
161			%{__mkdir_p} root/var/log/openvpn-s2s
162
163			%install
164			/bin/rm -rf $RPM_BUILD_ROOT
165			(cd root ; /usr/bin/find . -depth -print \| /bin/cpio -dump $RPM_BUILD_ROOT)
166			/bin/rm -f %{name}-%{version}-filelist
167			/sbin/e-smith/genfilelist $RPM_BUILD_ROOT \
168			--dir /etc/openvpn/s2s/pub 'attr(0755,root,root)' \
169			--dir /etc/openvpn/s2s/priv 'attr(0750,root,root)' \
170			--dir /var/log/openvpn-s2s 'attr(0770,root,nobody)' \
171			--file /etc/openvpn/s2s/bin/up 'attr(4750,root,openvpn)' \
172			> %{name}-%{version}-filelist
173
174			%files -f %{name}-%{version}-filelist
175			%defattr(-,root,root)
176
177			%clean
178			rm -rf $RPM_BUILD_ROOT
179
180
181			%post
182
183			%preun
184