1 |
slords |
1.1 |
Summary: An SSL-encrypting socket wrapper. |
2 |
|
|
Name: stunnel-tls |
3 |
|
|
Version: 3.22 |
4 |
|
|
Release: 4%{?dist} |
5 |
|
|
License: GPL |
6 |
|
|
Group: Applications/Internet |
7 |
|
|
URL: http://stunnel.mirt.net/ |
8 |
|
|
Source0: ftp://stunnel.mirt.net/stunnel/stunnel-%{version}.tar.gz |
9 |
|
|
Source1: stunnel.cnf |
10 |
|
|
Source2: Certificate-Creation |
11 |
|
|
Source3: sfinger.xinetd |
12 |
|
|
Source4: pop3-redirect.xinetd |
13 |
|
|
Source5: http://www.suspectclass.com/~sgifford/stunnel-tlsproxy/imap-tls.README |
14 |
|
|
Source6: http://www.suspectclass.com/~sgifford/stunnel-tlsproxy/smtp-tls.README |
15 |
|
|
Source7: http://www.suspectclass.com/~sgifford/stunnel-tlsproxy/pop3-tls.README |
16 |
|
|
Source8: http://www.suspectclass.com/~sgifford/stunnel-tlsproxy/makesock.c |
17 |
|
|
Patch0: stunnel-3.20-authpriv.patch |
18 |
|
|
Patch1: http://www.suspectclass.com/~sgifford/stunnel-tlsproxy/stunnel3.22-sg2.patch |
19 |
|
|
Buildroot: %{_tmppath}/stunnel-root |
20 |
|
|
BuildPrereq: openssl-devel, perl, textutils, fileutils, /usr/share/dict/words, tcp_wrappers |
21 |
|
|
Prereq: textutils, fileutils, /bin/mktemp, /sbin/ldconfig, /usr/share/dict/words, /bin/hostname, /usr/bin/id, /usr/bin/getent |
22 |
|
|
Requires: make |
23 |
|
|
Requires: stunnel >= %{version}-1 |
24 |
|
|
|
25 |
|
|
%description |
26 |
|
|
Stunnel is a socket wrapper which can provide SSL (Secure Sockets |
27 |
|
|
Layer) support to ordinary applications. For example, it can be used |
28 |
|
|
in conjunction with imapd to create an SSL secure IMAP server. |
29 |
|
|
|
30 |
|
|
This RPM contains stunnel-tls and makesock, which are created by |
31 |
|
|
Scott Gifford's patches. |
32 |
|
|
|
33 |
|
|
%prep |
34 |
|
|
# %setup -q |
35 |
|
|
%setup -q -n stunnel-%{version} |
36 |
|
|
%patch0 -p1 -b .authpriv |
37 |
|
|
%patch1 -p1 -b .sg2 |
38 |
|
|
|
39 |
|
|
%build |
40 |
|
|
%configure \ |
41 |
|
|
--with-ssl=%{_prefix} \ |
42 |
|
|
--with-pem-dir=%{_datadir}/ssl/certs \ |
43 |
|
|
--with-cert-file=%{_datadir}/ssl/cert.pem \ |
44 |
|
|
--with-cert-dir=%{_datadir}/ssl/trusted \ |
45 |
|
|
--with-tcp-wrappers |
46 |
|
|
perl -p -i -e 's:-I/usr/include:-I/usr/include -I/usr/kerberos/include:' Makefile |
47 |
|
|
|
48 |
|
|
# We have to create a certificate before the makefile asks us to. |
49 |
|
|
rm -f stunnel.pem stunnel.pem.1 stunnel.pem.2 |
50 |
|
|
(echo US |
51 |
|
|
echo . |
52 |
|
|
echo . |
53 |
|
|
echo . |
54 |
|
|
echo . |
55 |
|
|
echo . |
56 |
|
|
echo . |
57 |
|
|
echo .) | openssl req -newkey rsa:1024 -nodes -keyout stunnel.pem.1 -x509 -days 365 -out stunnel.pem.2 |
58 |
|
|
cat stunnel.pem.1 > stunnel.pem |
59 |
|
|
echo "" >> stunnel.pem |
60 |
|
|
cat stunnel.pem.2 >> stunnel.pem |
61 |
|
|
make piddir=/var/run/ |
62 |
|
|
gcc -o makesock %{SOURCE8} |
63 |
|
|
|
64 |
|
|
%install |
65 |
|
|
rm -rf $RPM_BUILD_ROOT |
66 |
|
|
mkdir -p $RPM_BUILD_ROOT/%{_sbindir} |
67 |
|
|
install -m755 stunnel $RPM_BUILD_ROOT/%{_sbindir}/stunnel-tls |
68 |
|
|
install -m755 makesock $RPM_BUILD_ROOT/%{_sbindir}/ |
69 |
|
|
mkdir -p $RPM_BUILD_ROOT/usr/share/doc |
70 |
|
|
ln -s stunnel-%{version} $RPM_BUILD_ROOT/usr/share/doc/%{name}-%{version} |
71 |
|
|
|
72 |
|
|
%post |
73 |
|
|
|
74 |
|
|
%postun |
75 |
|
|
|
76 |
|
|
%clean |
77 |
|
|
rm -rf $RPM_BUILD_ROOT |
78 |
|
|
|
79 |
|
|
%files |
80 |
|
|
%defattr(-,root,root) |
81 |
|
|
%{_sbindir}/stunnel-tls |
82 |
|
|
%{_sbindir}/makesock |
83 |
|
|
/usr/share/doc/%{name}-%{version} |
84 |
|
|
|
85 |
|
|
%changelog |
86 |
|
|
* Sun Apr 29 2007 Shad L. Lords <slords@mail.com> |
87 |
|
|
- Clean up spec so package can be built by koji/plague |
88 |
|
|
|
89 |
|
|
* Thu Dec 07 2006 Shad L. Lords <slords@mail.com> |
90 |
|
|
- Update to new release naming. No functional changes. |
91 |
|
|
- Make Packager generic |
92 |
|
|
|
93 |
|
|
* Thu Jun 23 2005 Gordon Rowell <gordonr@gormand.com.au> 3.22-3gr01 |
94 |
|
|
- Mini RPM with just stunnel-tls and makesock |
95 |
|
|
- Grr - why are RPM macros sooo broken - (percent)makeinstall |
96 |
|
|
is still executed even if # commented out in the (percent)install |
97 |
|
|
section |
98 |
|
|
|
99 |
|
|
* Fri Feb 18 2005 Charlie Brady <charlieb@e-smith.com> 3.22-2es |
100 |
|
|
- CentOS build fix and recompile |
101 |
|
|
|
102 |
|
|
* Mon Mar 10 2003 Charlie Brady <charlieb@e-smith.com> 3.22-1es |
103 |
|
|
- Add Scott Gifford's STARTTLS proxy patches and makesock program. |
104 |
|
|
|
105 |
|
|
* Wed Jan 2 2002 Nalin Dahyabhai <nalin@redhat.com> 3.22-1 |
106 |
|
|
- update to 3.22, correcting a format-string vulnerability |
107 |
|
|
|
108 |
|
|
* Wed Oct 31 2001 Nalin Dahyabhai <nalin@redhat.com> 3.21a-1 |
109 |
|
|
- update to 3.21a |
110 |
|
|
|
111 |
|
|
* Tue Aug 28 2001 Nalin Dahyabhai <nalin@redhat.com> 3.20-1 |
112 |
|
|
- log using LOG_AUTHPRIV facility by default (#47289) |
113 |
|
|
- make permissions on stunnel binary 0755 |
114 |
|
|
- implicitly trust certificates in %%{_datadir}/ssl/trusted (#24034) |
115 |
|
|
|
116 |
|
|
* Fri Aug 10 2001 Nalin Dahyabhai <nalin@redhat.com> 3.19-1 |
117 |
|
|
- update to 3.19 to avoid problems with stunnel being multithreaded, but |
118 |
|
|
tcp wrappers not being thrad-safe |
119 |
|
|
|
120 |
|
|
* Mon Jul 30 2001 Nalin Dahyabhai <nalin@redhat.com> |
121 |
|
|
- update to 3.17 |
122 |
|
|
|
123 |
|
|
* Mon Jul 23 2001 Nalin Dahyabhai <nalin@redhat.com> |
124 |
|
|
- update to 3.16 |
125 |
|
|
|
126 |
|
|
* Mon Jul 16 2001 Nalin Dahyabhai <nalin@redhat.com> |
127 |
|
|
- update to 3.15 |
128 |
|
|
- enable tcp-wrappers support |
129 |
|
|
|
130 |
|
|
* Tue May 29 2001 Nalin Dahyabhai <nalin@redhat.com> |
131 |
|
|
- remove explicit requirement on openssl (specific version isn't enough, |
132 |
|
|
we have to depend on shared library version anyway) |
133 |
|
|
|
134 |
|
|
* Fri Apr 27 2001 Nalin Dahyabhai <nalin@redhat.com> |
135 |
|
|
- update to 3.14 |
136 |
|
|
|
137 |
|
|
* Mon Mar 26 2001 Preston Brown <pbrown@redhat.com> |
138 |
|
|
- depend on make (#33148) |
139 |
|
|
|
140 |
|
|
* Fri Mar 2 2001 Nalin Dahyabhai <nalin@redhat.com> |
141 |
|
|
- rebuild in new environment |
142 |
|
|
|
143 |
|
|
* Tue Feb 6 2001 Nalin Dahyabhai <nalin@redhat.com> |
144 |
|
|
- update to 3.13 to get pthread, OOB, 64-bit fixes |
145 |
|
|
- don't need sdf any more |
146 |
|
|
|
147 |
|
|
* Thu Dec 28 2000 Nalin Dahyabhai <nalin@redhat.com> |
148 |
|
|
- pull in sdf to build the man page (#22892) |
149 |
|
|
|
150 |
|
|
* Fri Dec 22 2000 Nalin Dahyabhai <nalin@redhat.com> |
151 |
|
|
- update to 3.11 |
152 |
|
|
- chuck the SIGHUP patch (went upstream) |
153 |
|
|
- chuck parts of the 64-bit clean patch (went upstream) |
154 |
|
|
|
155 |
|
|
* Thu Dec 21 2000 Nalin Dahyabhai <nalin@redhat.com> |
156 |
|
|
- update to 3.10 |
157 |
|
|
- more 64-bit clean changes, hopefully the last bunch |
158 |
|
|
|
159 |
|
|
* Wed Dec 20 2000 Nalin Dahyabhai <nalin@redhat.com> |
160 |
|
|
- change piddir from the default /var/stunnel to /var/run |
161 |
|
|
- clean out pid file on SIGHUP |
162 |
|
|
|
163 |
|
|
* Fri Dec 15 2000 Nalin Dahyabhai <nalin@redhat.com> |
164 |
|
|
- update to 3.9 to get a security fix |
165 |
|
|
|
166 |
|
|
* Wed Oct 25 2000 Matt Wilson <msw@redhat.com> |
167 |
|
|
- change all unsigned longs to u_int32_t when dealing with network |
168 |
|
|
addresses |
169 |
|
|
|
170 |
|
|
* Fri Aug 18 2000 Nalin Dahyabhai <nalin@redhat.com> |
171 |
|
|
- make stunnel.pem also be (missingok) |
172 |
|
|
|
173 |
|
|
* Thu Jun 29 2000 Nalin Dahyabhai <nalin@redhat.com> |
174 |
|
|
- move to Applications/Internet group |
175 |
|
|
- clean up %post script |
176 |
|
|
- make stunnel.pem %ghost %config(noreplace) |
177 |
|
|
- provide a sample file for use with xinetd |
178 |
|
|
|
179 |
|
|
* Thu Jun 8 2000 Nalin Dahyabhai <nalin@redhat.com> |
180 |
|
|
- FHS compliance fixes |
181 |
|
|
- modify defaults |
182 |
|
|
|
183 |
|
|
* Tue Mar 14 2000 Florian La Roche <Florian.LaRoche@redhat.com> |
184 |
|
|
- update to 3.8 |
185 |
|
|
- do not create certificate if one already exists |
186 |
|
|
|
187 |
|
|
* Mon Feb 21 2000 Florian La Roche <Florian.LaRoche@redhat.com> |
188 |
|
|
- update to 3.7 |
189 |
|
|
- add patch to find /usr/share/ssl |
190 |
|
|
- change some perms |
191 |
|
|
|
192 |
|
|
* Sat Oct 30 1999 Bernhard Rosenkraenzer <bero@redhat.com> |
193 |
|
|
- Modify spec file to match Red Hat standards |
194 |
|
|
|
195 |
|
|
* Fri Aug 12 1999 Damien Miller <damien@ibs.com.au> |
196 |
|
|
- Updated to 3.4a |
197 |
|
|
- Patched for OpenSSL 0.9.4 |
198 |
|
|
- Cleaned up files section |
199 |
|
|
|
200 |
|
|
* Sun Jul 11 1999 Damien Miller <dmiller@ilogic.com.au> |
201 |
|
|
- Updated to 3.3 |
202 |
|
|
|
203 |
|
|
* Sat Nov 28 1998 Damien Miller <dmiller@ilogic.com.au> |
204 |
|
|
- Initial RPMification |