1 |
vip-ire |
1.5 |
# $Id: smeserver-openvpn-s2s.spec,v 1.4 2014/12/18 08:30:13 vip-ire Exp $ |
2 |
vip-ire |
1.1 |
# Authority: vip-ire |
3 |
|
|
# Name: Daniel Berteaud |
4 |
|
|
|
5 |
|
|
Summary: OpenVPN, a strong VPN solution built over SSL, for site to site tunnels |
6 |
|
|
%define name smeserver-openvpn-s2s |
7 |
|
|
Name: %{name} |
8 |
|
|
%define version 0.2 |
9 |
vip-ire |
1.5 |
%define release 4 |
10 |
vip-ire |
1.1 |
Version: %{version} |
11 |
|
|
Release: %{release}%{?dist} |
12 |
|
|
License: GPL |
13 |
|
|
Group: Networking/Remote access |
14 |
vip-ire |
1.2 |
Source: %{name}-%{version}.tar.xz |
15 |
vip-ire |
1.5 |
|
16 |
vip-ire |
1.3 |
Patch0: smeserver-openvpn-s2s-0.2-use_verify_x509_name.patch |
17 |
vip-ire |
1.5 |
Patch1: smeserver-openvpn-s2s-0.2-locale-2015-02-17.patch |
18 |
|
|
|
19 |
vip-ire |
1.1 |
BuildArchitectures: noarch |
20 |
|
|
|
21 |
|
|
BuildRequires: e-smith-devtools |
22 |
|
|
BuildRoot: /var/tmp/%{name}-%{version}-%{release}-buildroot |
23 |
|
|
|
24 |
|
|
Requires: e-smith-base |
25 |
|
|
Requires: openvpn >= 2.1 |
26 |
|
|
|
27 |
|
|
%description |
28 |
|
|
This package contains all the needed scripts and templates |
29 |
|
|
to run openvpn in client or server mode for site to site tunnels |
30 |
|
|
|
31 |
|
|
%changelog |
32 |
vip-ire |
1.5 |
* Tue Feb 17 2015 Daniel Berteaud <daniel@firewall-services.com> 0.2-4.sme |
33 |
|
|
- Apply locale 2015-02-17 patch |
34 |
|
|
|
35 |
vip-ire |
1.4 |
* Thu Dec 18 2014 Daniel Berteaud <daniel@firewall-services.com> 0.2-3.sme |
36 |
|
|
- Create required (but unused) /etc/openvpn/s2s/tmp dir |
37 |
|
|
|
38 |
vip-ire |
1.3 |
* Thu Nov 14 2013 Daniel Berteaud <daniel@firewall-services.com> 0.2-2.sme |
39 |
|
|
- Use verify-x509-name instead of tls-remote |
40 |
|
|
|
41 |
vip-ire |
1.1 |
* Mon Nov 11 2013 Daniel Berteaud <daniel@firewall-services.com> 0.2-1.sme |
42 |
|
|
- Rebuild for SME9 |
43 |
|
|
|
44 |
|
|
* Sun Jul 14 2013 JP Pialasse <tests@pialasse.com> 0.1-22.sme |
45 |
|
|
- apply locale 2013-07-14 patch |
46 |
|
|
|
47 |
|
|
* Thu Oct 13 2011 Daniel Berteaud <daniel@firewall-services.com> 0.1-21.sme |
48 |
|
|
- Apply locale 2011-10-13 patch |
49 |
|
|
|
50 |
|
|
* Thu Jun 2 2011 Daniel Berteaud <daniel@firewall-services.com> 0.1-20.sme |
51 |
|
|
- Fix remote host description |
52 |
|
|
|
53 |
|
|
* Wed Jun 1 2011 Daniel Berteaud <daniel@firewall-services.com> 0.1-19.sme |
54 |
|
|
- SNAT outbound connexions to use the local IP as source |
55 |
|
|
|
56 |
|
|
* Tue Apr 19 2011 Daniel Berteaud <daniel@firewall-services.com> 0.1-18.sme |
57 |
|
|
- Reduce inactivity timeout |
58 |
|
|
|
59 |
|
|
* Sun Mar 06 2011 SME Translation Server <translations@contribs.org> 0.1-17.sme |
60 |
|
|
- apply locale 2011-03-06 patch |
61 |
|
|
|
62 |
|
|
* Tue Jan 25 2011 Daniel Berteaud <daniel@firewall-services.com> 0.1-16.sme |
63 |
|
|
- Stop disabling service on rpm removal (spec change only) |
64 |
|
|
|
65 |
|
|
* Tue Dec 7 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-15.sme |
66 |
|
|
- Remove useless smb.conf template |
67 |
|
|
|
68 |
|
|
* Tue Dec 7 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-14.sme |
69 |
|
|
- Fix type variable (thks M. Doerner) |
70 |
|
|
|
71 |
|
|
* Mon Nov 8 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-13.sme |
72 |
|
|
- Apply locale 2010-11-08 patch |
73 |
|
|
|
74 |
|
|
* Thu Nov 4 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-12.sme |
75 |
|
|
- Apply locale 2010-11-04 patch |
76 |
|
|
|
77 |
|
|
* Tue Nov 02 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-11.sme |
78 |
|
|
- Remove the nice directive |
79 |
|
|
|
80 |
|
|
* Mon Oct 18 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-10.sme |
81 |
|
|
- Expand smb.conf and restart samba services |
82 |
|
|
|
83 |
|
|
* Mon Oct 18 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-9.sme |
84 |
|
|
- Fix typo in up script |
85 |
|
|
|
86 |
|
|
* Mon Oct 18 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-8.sme |
87 |
|
|
- Various enhancement in templates |
88 |
|
|
- Set wget timeout |
89 |
|
|
- Fix crontab templates |
90 |
|
|
|
91 |
|
|
* Sun Oct 17 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-7.sme |
92 |
|
|
- Implement CRL updates and verification |
93 |
|
|
- Fix masq template |
94 |
|
|
|
95 |
|
|
* Sun Oct 17 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-6.sme |
96 |
|
|
- Set VPN networks non removable |
97 |
|
|
|
98 |
|
|
* Sun Oct 17 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-5.sme |
99 |
|
|
- Rename logrotate configuration file |
100 |
|
|
- Add missingok to logrotate conf |
101 |
|
|
- Support per configuration customization |
102 |
|
|
- Add TLS auth support |
103 |
|
|
|
104 |
|
|
* Mon Oct 4 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-4.sme |
105 |
|
|
- Fix adding routes in up script |
106 |
|
|
- Log drop trafic |
107 |
|
|
- Fix multiple net validation |
108 |
|
|
|
109 |
|
|
* Mon Oct 4 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-3.sme |
110 |
|
|
- allow one-way VPN with AllowInbound prop |
111 |
|
|
|
112 |
|
|
* Mon Oct 4 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-3.sme |
113 |
|
|
- Various fixes |
114 |
|
|
|
115 |
|
|
* Mon Oct 4 2010 Daniel Berteaud <daniel@firewall-services.com> 0.1-1.sme |
116 |
|
|
- initiale release (based on work from Florian Dejan) |
117 |
|
|
|
118 |
|
|
%prep |
119 |
|
|
|
120 |
|
|
%setup -q -n %{name}-%{version} |
121 |
vip-ire |
1.3 |
%patch0 -p1 |
122 |
vip-ire |
1.5 |
%patch1 -p1 |
123 |
vip-ire |
1.1 |
|
124 |
|
|
%build |
125 |
|
|
perl createlinks |
126 |
|
|
|
127 |
|
|
%{__mkdir_p} root/etc/openvpn/s2s/priv |
128 |
|
|
%{__mkdir_p} root/etc/openvpn/s2s/pub |
129 |
vip-ire |
1.4 |
%{__mkdir_p} root/etc/openvpn/s2s/tmp |
130 |
vip-ire |
1.1 |
%{__mkdir_p} root/var/run/openvpn-s2s |
131 |
|
|
%{__mkdir_p} root/var/log/openvpn-s2s |
132 |
|
|
|
133 |
|
|
%install |
134 |
|
|
/bin/rm -rf $RPM_BUILD_ROOT |
135 |
|
|
(cd root ; /usr/bin/find . -depth -print | /bin/cpio -dump $RPM_BUILD_ROOT) |
136 |
|
|
/bin/rm -f %{name}-%{version}-filelist |
137 |
|
|
/sbin/e-smith/genfilelist $RPM_BUILD_ROOT \ |
138 |
|
|
--dir /etc/openvpn/s2s/pub 'attr(0755,root,root)' \ |
139 |
|
|
--dir /etc/openvpn/s2s/priv 'attr(0750,root,root)' \ |
140 |
vip-ire |
1.4 |
--dir /etc/openvpn/s2s/tmp 'attr(0750,root,root)' \ |
141 |
vip-ire |
1.1 |
--dir /var/log/openvpn-s2s 'attr(0770,root,nobody)' \ |
142 |
|
|
--file /etc/openvpn/s2s/bin/up 'attr(4750,root,openvpn)' \ |
143 |
|
|
> %{name}-%{version}-filelist |
144 |
|
|
|
145 |
|
|
%files -f %{name}-%{version}-filelist |
146 |
|
|
%defattr(-,root,root) |
147 |
|
|
|
148 |
|
|
%clean |
149 |
|
|
rm -rf $RPM_BUILD_ROOT |
150 |
|
|
|
151 |
|
|
|
152 |
|
|
%post |
153 |
|
|
|
154 |
|
|
%preun |
155 |
|
|
|