smeserver-ipsec/F/smeserver-ipsec.spec

Summary: IPSEC support for SME Server
%define name smeserver-ipsec
Name: %{name}
%define version 0.0.2
%define release 6
Version: %{version}
Release: %{release}%{?dist}
License: GPL
Group: Networking/Daemons
Source: %{name}-%{version}.tar.gz
Patch0: smeserver-ipsec-0.0.1-relocatemastemplates.patch
Patch1: smeserver-ipsec-0.0.1-dbdefaults.patch
Patch2: smeserver-ipsec-modulehack.patch
BuildRoot: /var/tmp/e-smith-buildroot
BuildArchitectures: noarch
Requires: e-smith-release >= 7
Requires: ipsec-tools
BuildRequires: e-smith-devtools >= 1.13.1-03
AutoReqProv: no
Obsoletes: dmc-mitel-freeswan
Obsoletes: devinfo-freeswan

%changelog
* Sun Apr 29 2007 Shad L. Lords <slords@mail.com>
- Clean up spec so package can be built by koji/plague

* Thu Dec 07 2006 Shad L. Lords <slords@mail.com>
- Update to new release naming.  No functional changes.
- Make Packager generic

* Wed Jan 4 2006 Gordon Rowell <gordonr@gormand.com.au> 0.0.2-05
- Add a hack to the local event to force loading of the af_key module
  until we work out why it isn't being loaded automatically

* Wed Jan 4 2006 Gordon Rowell <gordonr@gormand.com.au> 0.0.2-04
- Comment out createlinks in build for now, until the old freeswan 
  based ones are removed/updated. Thankfully we don't need to do most
  of this with SME7 and ipsec-tools

* Wed Jan 4 2006 Gordon Rowell <gordonr@gormand.com.au> 0.0.2-03
- Add db defaults ipsec=service|status|disabled

* Wed Jan 4 2006 Gordon Rowell <gordonr@gormand.com.au> 0.0.2-02
- Relocate masq fragments to templates from templates-custom

* Wed Jan 4 2006 Gordon Rowell <gordonr@gormand.com.au> 0.0.2-01
- Removed symlinks from imported tarball

* Wed Jan 4 2006 Gordon Rowell <gordonr@gormand.com.au> 0.0.1-01
- Package renamed to smeserver-ipsec (from devinfo-freeswan)

* Fri May 2 2003 Peter Schubert <psc@s-a-c-o.de>
- added template for /etc/sysctl.conf
- to set rp_filter to 0 as default
- added Funktion to change the PublicID of the Server

* Sat Apr 12 2003 Shad L. Lords <slords@mail.com>
- 1.99-6sme56
- fixed bug in ipsec-install script.  Thanks to Randy Brown.

* Fri Apr 11 2003 Shad L. Lords <slords@mail.com>
- 1.99-5sme56
- added ipsec devices as trusted local networks

* Fri Apr 11 2003 Shad L. Lords <slords@mail.com>
- 1.99-4sme56
- fixed many routing problems between networks
- added dependancy on e-smith-packetfilter

* Fri Apr 11 2003 Shad L. Lords <slords@mail.com>
- 1.99-3sme56
- updated info mailed to admin

* Fri Apr 11 2003 Shad L. Lords <slords@mail.com>
- 1.99-2sme56
- fixed bug in web panel

* Fri Apr 11 2003 Shad L. Lords <slords@mail.com>
- 1.99-1sme56
- bumped to v1.99
- many fixes in _updown script
- cleanup of /etc/ipsec.conf script
- cleanup web interface a little more
- added id tag to ipsec db entry

* Thu Apr 10 2003 Shad L. Lords <slords@mail.com>
- 1.98b-3sme56
- fixed masq template for external interface

* Thu Apr 10 2003 Shad L. Lords <slords@mail.com>
- 1.98b-2sme56
- fixed remoteHost and remoteID in ipsec.conv script

* Thu Apr 10 2003 Shad L. Lords <slords@mail.com>
- 1.98b-1sme56
- changed configuration to no longer need nexthop information (now user %defaultroute)
- changed connection to allow hostnames
- changed description to be identification ID
- changed masq external interface to be ! internal
- added networking information to admin email
- code cleanup

* Sat Feb 14 2003 Peter Schubert <psc@s-a-c-o.de>
- some fixes in the _updown script
- thanks to Steve Bush (steve_at_bushinc.com> for the tests and fixes 

* Thu Feb 04 2003 Peter Schubert <psc@s-a-c-o.de>
- another "cosmetic" fix in post section of the SPEC

* Mon Feb 03 2003 Peter Schubert <psc@s-a-c-o.de>
- remove expand-template masq in post section

* Mon Feb 03 2003 Peter Schubert <psc@s-a-c-o.de>
- updated for freeswan 1.98 and iptables
- [1.98-1sme56]

* Sun Oct 20 2002 Darrell May <dmay@netsourced.com>
- panel updates
- [1.97-3sme55]

* Sun Oct 20 2002 Darrell May <dmay@netsourced.com>
- added mail-ipsec-key action
- added WINS server config to panel
- [1.97-2sme55]

* Sat Oct 19 2002 Darrell May <dmay@netsourced.com>
- updated for freeswan 1.97-07 and SME 5.5
- [1.97-1sme55]

* Sun Dec 23 2001 Darrell May <dmay@netsourced.com>
- changed ipsec InitscriptOrder from 47 to 99
- 0.4-12

* Fri Nov 9 2001 Darrell May <dmay@netsourced.com>
- release to 0.4-11
- added compress=yes to /etc/e-smith/templates/etc/ipsec.conf/20Default

* Wed Nov 7 2001 Darrell May <dmay@netsourced.com>
- release 0.4-10
- removed /usr/lib/ipsec/_updown script for ipchains
- added /usr/lib/ipsec/_updown_1.8 and _updown_1.91 scripts for ipchains

* Thu Nov 1 2001 Darrell May <dmay@netsourced.com>
- release 0.4-9
- updated /usr/lib/ipsec/_updown script for ipchains
- editing to virtualprivatedomain function

* Sat Oct 20 2001 Darrell May <dmay@netsourced.com>
- release 0.4-8
- updated for Mitel SME Server V5
- name changed to dmc-mitel-freeswan

* Wed Apr 4 2001 Andy Worthington <andy@rockcity.com>
- added another masq template fragment (45AllowIPSEC)
- fixed @name in ipsec.conf template

* Thu Mar 15 2001 Andy Worthington <andy@rockcity.com>
- add post script back
- fixed permissions in filelist
- fix rsasig entries in ipsec.conf templates
- fix spelling of vpn link in manager/cgi-bin
- fix perms on vpn web page

* Wed Mar 14 2001 Andy Worthington <andy@rockcity.com>
- change order of actions in ipsec-install
- fix masq template fragment

* Fri Mar 09 2001 Andy Worthington <andy@rockcity.com>
- remove post script
- change masq template fragment to templates-custom dir

* Fri Mar 09 2001 Andy Worthington <andy@rockcity.com>
- small fix in conf-ipsec-secrets and 10RSAKey
- changed order of actions in ipsec-install and added
  conf-masq and restart-masq

* Thu Mar 08 2001 Andy Worthington <andy@rockcity.com>
- added file to disable source address verification in masq
  so KLIPS will function correctly
  
* Tue Mar 06 2001 Andy Worthington <andy@rockcity.com>
- updated to version 0.4
- added to post event signal

* Wed Feb 28 2001 Andy Worthington <andy@rockcity.com>
- updated to version 0.3

* Fri Feb 23 2001 Andy Worthington <andy@rockcity.com>
- updated to version 0.2

* Wed Feb 21 2001 Andy Worthington <andy@rockcity.com>
- initial release

%description
Mitel SME Server enhancement to configure ipsec connections
through the web manager

%prep
%setup
%patch0 -p1
%patch1 -p1
%patch2 -p1

%build
# perl createlinks

%install
rm -rf $RPM_BUILD_ROOT

(cd root   ; find . -depth -print | cpio -dump $RPM_BUILD_ROOT)
rm -f e-smith-%{version}-filelist
/sbin/e-smith/genfilelist $RPM_BUILD_ROOT \
          --file /etc/e-smith/events/local/ipsec-module-hack 'attr(0755,root,root)' \
        > %{name}-%{version}-filelist
%files -f %{name}-%{version}-filelist

%defattr(-,root,root)

%clean
rm -rf $RPM_BUILD_ROOT

%pre

%preun

%post
if [ -f /etc/ipsec.conf ]
then
   cp -f --backup=t /etc/ipsec.conf /etc/ipsec.conf.prerpm > /dev/null 2> /dev/null
fi
if [ -f /etc/ipsec.secrets ]
then
   cp -f --backup=t /etc/ipsec.secrets /etc/ipsec.secrets.prerpm > /dev/null 2> /dev/null
fi
if [ -f /usr/local/lib/ipsec/_updown ]
then
   cp -f --backup=t /usr/local/lib/ipsec/_updown /usr/local/lib/ipsec/_updown.prerpm > /dev/null 2> /dev/null
fi
/bin/cp /usr/local/lib/ipsec/_updown_1.99 /usr/local/lib/ipsec/_updown
/sbin/e-smith/expand-template /etc/rc.d/init.d/masq     
/sbin/e-smith/expand-template /etc/sysctl.conf

%postun
1	gordonr	1.1	Summary: IPSEC support for SME Server
2			%define name smeserver-ipsec
3			Name: %{name}
4	gordonr	1.3	%define version 0.0.2
5	slords	1.8	%define release 6
6	gordonr	1.1	Version: %{version}
7	slords	1.9	Release: %{release}%{?dist}
8	gordonr	1.4	License: GPL
9	gordonr	1.1	Group: Networking/Daemons
10			Source: %{name}-%{version}.tar.gz
11	gordonr	1.4	Patch0: smeserver-ipsec-0.0.1-relocatemastemplates.patch
12	gordonr	1.5	Patch1: smeserver-ipsec-0.0.1-dbdefaults.patch
13	gordonr	1.7	Patch2: smeserver-ipsec-modulehack.patch
14	gordonr	1.1	BuildRoot: /var/tmp/e-smith-buildroot
15			BuildArchitectures: noarch
16			Requires: e-smith-release >= 7
17			Requires: ipsec-tools
18	slords	1.9	BuildRequires: e-smith-devtools >= 1.13.1-03
19	gordonr	1.1	AutoReqProv: no
20			Obsoletes: dmc-mitel-freeswan
21			Obsoletes: devinfo-freeswan
22
23			%changelog
24	slords	1.9	* Sun Apr 29 2007 Shad L. Lords <slords@mail.com>
25			- Clean up spec so package can be built by koji/plague
26
27	slords	1.8	* Thu Dec 07 2006 Shad L. Lords <slords@mail.com>
28			- Update to new release naming. No functional changes.
29			- Make Packager generic
30
31	gordonr	1.7	* Wed Jan 4 2006 Gordon Rowell <gordonr@gormand.com.au> 0.0.2-05
32			- Add a hack to the local event to force loading of the af_key module
33			until we work out why it isn't being loaded automatically
34
35	gordonr	1.6	* Wed Jan 4 2006 Gordon Rowell <gordonr@gormand.com.au> 0.0.2-04
36			- Comment out createlinks in build for now, until the old freeswan
37			based ones are removed/updated. Thankfully we don't need to do most
38			of this with SME7 and ipsec-tools
39
40	gordonr	1.5	* Wed Jan 4 2006 Gordon Rowell <gordonr@gormand.com.au> 0.0.2-03
41			- Add db defaults ipsec=service\|status\|disabled
42
43	gordonr	1.4	* Wed Jan 4 2006 Gordon Rowell <gordonr@gormand.com.au> 0.0.2-02
44			- Relocate masq fragments to templates from templates-custom
45
46	gordonr	1.3	* Wed Jan 4 2006 Gordon Rowell <gordonr@gormand.com.au> 0.0.2-01
47			- Removed symlinks from imported tarball
48	gordonr	1.2
49	gordonr	1.1	* Wed Jan 4 2006 Gordon Rowell <gordonr@gormand.com.au> 0.0.1-01
50			- Package renamed to smeserver-ipsec (from devinfo-freeswan)
51
52			* Fri May 2 2003 Peter Schubert <psc@s-a-c-o.de>
53			- added template for /etc/sysctl.conf
54			- to set rp_filter to 0 as default
55			- added Funktion to change the PublicID of the Server
56
57			* Sat Apr 12 2003 Shad L. Lords <slords@mail.com>
58			- 1.99-6sme56
59			- fixed bug in ipsec-install script. Thanks to Randy Brown.
60
61			* Fri Apr 11 2003 Shad L. Lords <slords@mail.com>
62			- 1.99-5sme56
63			- added ipsec devices as trusted local networks
64
65			* Fri Apr 11 2003 Shad L. Lords <slords@mail.com>
66			- 1.99-4sme56
67			- fixed many routing problems between networks
68			- added dependancy on e-smith-packetfilter
69
70			* Fri Apr 11 2003 Shad L. Lords <slords@mail.com>
71			- 1.99-3sme56
72			- updated info mailed to admin
73
74			* Fri Apr 11 2003 Shad L. Lords <slords@mail.com>
75			- 1.99-2sme56
76			- fixed bug in web panel
77
78			* Fri Apr 11 2003 Shad L. Lords <slords@mail.com>
79			- 1.99-1sme56
80			- bumped to v1.99
81			- many fixes in _updown script
82			- cleanup of /etc/ipsec.conf script
83			- cleanup web interface a little more
84			- added id tag to ipsec db entry
85
86			* Thu Apr 10 2003 Shad L. Lords <slords@mail.com>
87			- 1.98b-3sme56
88			- fixed masq template for external interface
89
90			* Thu Apr 10 2003 Shad L. Lords <slords@mail.com>
91			- 1.98b-2sme56
92			- fixed remoteHost and remoteID in ipsec.conv script
93
94			* Thu Apr 10 2003 Shad L. Lords <slords@mail.com>
95			- 1.98b-1sme56
96			- changed configuration to no longer need nexthop information (now user %defaultroute)
97			- changed connection to allow hostnames
98			- changed description to be identification ID
99			- changed masq external interface to be ! internal
100			- added networking information to admin email
101			- code cleanup
102
103			* Sat Feb 14 2003 Peter Schubert <psc@s-a-c-o.de>
104			- some fixes in the _updown script
105			- thanks to Steve Bush (steve_at_bushinc.com> for the tests and fixes
106
107			* Thu Feb 04 2003 Peter Schubert <psc@s-a-c-o.de>
108			- another "cosmetic" fix in post section of the SPEC
109
110			* Mon Feb 03 2003 Peter Schubert <psc@s-a-c-o.de>
111			- remove expand-template masq in post section
112
113			* Mon Feb 03 2003 Peter Schubert <psc@s-a-c-o.de>
114			- updated for freeswan 1.98 and iptables
115			- [1.98-1sme56]
116
117			* Sun Oct 20 2002 Darrell May <dmay@netsourced.com>
118			- panel updates
119			- [1.97-3sme55]
120
121			* Sun Oct 20 2002 Darrell May <dmay@netsourced.com>
122			- added mail-ipsec-key action
123			- added WINS server config to panel
124			- [1.97-2sme55]
125
126			* Sat Oct 19 2002 Darrell May <dmay@netsourced.com>
127			- updated for freeswan 1.97-07 and SME 5.5
128			- [1.97-1sme55]
129
130			* Sun Dec 23 2001 Darrell May <dmay@netsourced.com>
131			- changed ipsec InitscriptOrder from 47 to 99
132			- 0.4-12
133
134			* Fri Nov 9 2001 Darrell May <dmay@netsourced.com>
135			- release to 0.4-11
136			- added compress=yes to /etc/e-smith/templates/etc/ipsec.conf/20Default
137
138			* Wed Nov 7 2001 Darrell May <dmay@netsourced.com>
139			- release 0.4-10
140			- removed /usr/lib/ipsec/_updown script for ipchains
141			- added /usr/lib/ipsec/_updown_1.8 and _updown_1.91 scripts for ipchains
142
143			* Thu Nov 1 2001 Darrell May <dmay@netsourced.com>
144			- release 0.4-9
145			- updated /usr/lib/ipsec/_updown script for ipchains
146			- editing to virtualprivatedomain function
147
148			* Sat Oct 20 2001 Darrell May <dmay@netsourced.com>
149			- release 0.4-8
150			- updated for Mitel SME Server V5
151			- name changed to dmc-mitel-freeswan
152
153			* Wed Apr 4 2001 Andy Worthington <andy@rockcity.com>
154			- added another masq template fragment (45AllowIPSEC)
155			- fixed @name in ipsec.conf template
156
157			* Thu Mar 15 2001 Andy Worthington <andy@rockcity.com>
158			- add post script back
159			- fixed permissions in filelist
160			- fix rsasig entries in ipsec.conf templates
161			- fix spelling of vpn link in manager/cgi-bin
162			- fix perms on vpn web page
163
164			* Wed Mar 14 2001 Andy Worthington <andy@rockcity.com>
165			- change order of actions in ipsec-install
166			- fix masq template fragment
167
168			* Fri Mar 09 2001 Andy Worthington <andy@rockcity.com>
169			- remove post script
170			- change masq template fragment to templates-custom dir
171
172			* Fri Mar 09 2001 Andy Worthington <andy@rockcity.com>
173			- small fix in conf-ipsec-secrets and 10RSAKey
174			- changed order of actions in ipsec-install and added
175			conf-masq and restart-masq
176
177			* Thu Mar 08 2001 Andy Worthington <andy@rockcity.com>
178			- added file to disable source address verification in masq
179			so KLIPS will function correctly
180
181			* Tue Mar 06 2001 Andy Worthington <andy@rockcity.com>
182			- updated to version 0.4
183			- added to post event signal
184
185			* Wed Feb 28 2001 Andy Worthington <andy@rockcity.com>
186			- updated to version 0.3
187
188			* Fri Feb 23 2001 Andy Worthington <andy@rockcity.com>
189			- updated to version 0.2
190
191			* Wed Feb 21 2001 Andy Worthington <andy@rockcity.com>
192			- initial release
193
194			%description
195			Mitel SME Server enhancement to configure ipsec connections
196			through the web manager
197
198			%prep
199			%setup
200	gordonr	1.4	%patch0 -p1
201	gordonr	1.5	%patch1 -p1
202	gordonr	1.7	%patch2 -p1
203	gordonr	1.1
204			%build
205	gordonr	1.6	# perl createlinks
206	gordonr	1.1
207			%install
208			rm -rf $RPM_BUILD_ROOT
209
210			(cd root ; find . -depth -print \| cpio -dump $RPM_BUILD_ROOT)
211			rm -f e-smith-%{version}-filelist
212	gordonr	1.7	/sbin/e-smith/genfilelist $RPM_BUILD_ROOT \
213			--file /etc/e-smith/events/local/ipsec-module-hack 'attr(0755,root,root)' \
214			> %{name}-%{version}-filelist
215	gordonr	1.1	%files -f %{name}-%{version}-filelist
216
217			%defattr(-,root,root)
218
219			%clean
220			rm -rf $RPM_BUILD_ROOT
221
222			%pre
223
224			%preun
225
226			%post
227			if [ -f /etc/ipsec.conf ]
228			then
229			cp -f --backup=t /etc/ipsec.conf /etc/ipsec.conf.prerpm > /dev/null 2> /dev/null
230			fi
231			if [ -f /etc/ipsec.secrets ]
232			then
233			cp -f --backup=t /etc/ipsec.secrets /etc/ipsec.secrets.prerpm > /dev/null 2> /dev/null
234			fi
235			if [ -f /usr/local/lib/ipsec/_updown ]
236			then
237			cp -f --backup=t /usr/local/lib/ipsec/_updown /usr/local/lib/ipsec/_updown.prerpm > /dev/null 2> /dev/null
238			fi
239			/bin/cp /usr/local/lib/ipsec/_updown_1.99 /usr/local/lib/ipsec/_updown
240			/sbin/e-smith/expand-template /etc/rc.d/init.d/masq
241			/sbin/e-smith/expand-template /etc/sysctl.conf
242
243			%postun