smeserver-ipsec/F/smeserver-ipsec.spec

Summary: IPSEC support for SME Server
%define name smeserver-ipsec
Name: %{name}
%define version 0.0.2
%define release 03
Version: %{version}
Release: %{release}
License: GPL
Group: Networking/Daemons
Source: %{name}-%{version}.tar.gz
Patch0: smeserver-ipsec-0.0.1-relocatemastemplates.patch
Patch1: smeserver-ipsec-0.0.1-dbdefaults.patch
BuildRoot: /var/tmp/e-smith-buildroot
BuildArchitectures: noarch
Requires: e-smith-release >= 7
Requires: ipsec-tools
AutoReqProv: no
Obsoletes: dmc-mitel-freeswan
Obsoletes: devinfo-freeswan

%changelog
* Wed Jan 4 2006 Gordon Rowell <gordonr@gormand.com.au> 0.0.2-03
- Add db defaults ipsec=service|status|disabled

* Wed Jan 4 2006 Gordon Rowell <gordonr@gormand.com.au> 0.0.2-02
- Relocate masq fragments to templates from templates-custom

* Wed Jan 4 2006 Gordon Rowell <gordonr@gormand.com.au> 0.0.2-01
- Removed symlinks from imported tarball

* Wed Jan 4 2006 Gordon Rowell <gordonr@gormand.com.au> 0.0.1-01
- Package renamed to smeserver-ipsec (from devinfo-freeswan)

* Fri May 2 2003 Peter Schubert <psc@s-a-c-o.de>
- added template for /etc/sysctl.conf
- to set rp_filter to 0 as default
- added Funktion to change the PublicID of the Server

* Sat Apr 12 2003 Shad L. Lords <slords@mail.com>
- 1.99-6sme56
- fixed bug in ipsec-install script.  Thanks to Randy Brown.

* Fri Apr 11 2003 Shad L. Lords <slords@mail.com>
- 1.99-5sme56
- added ipsec devices as trusted local networks

* Fri Apr 11 2003 Shad L. Lords <slords@mail.com>
- 1.99-4sme56
- fixed many routing problems between networks
- added dependancy on e-smith-packetfilter

* Fri Apr 11 2003 Shad L. Lords <slords@mail.com>
- 1.99-3sme56
- updated info mailed to admin

* Fri Apr 11 2003 Shad L. Lords <slords@mail.com>
- 1.99-2sme56
- fixed bug in web panel

* Fri Apr 11 2003 Shad L. Lords <slords@mail.com>
- 1.99-1sme56
- bumped to v1.99
- many fixes in _updown script
- cleanup of /etc/ipsec.conf script
- cleanup web interface a little more
- added id tag to ipsec db entry

* Thu Apr 10 2003 Shad L. Lords <slords@mail.com>
- 1.98b-3sme56
- fixed masq template for external interface

* Thu Apr 10 2003 Shad L. Lords <slords@mail.com>
- 1.98b-2sme56
- fixed remoteHost and remoteID in ipsec.conv script

* Thu Apr 10 2003 Shad L. Lords <slords@mail.com>
- 1.98b-1sme56
- changed configuration to no longer need nexthop information (now user %defaultroute)
- changed connection to allow hostnames
- changed description to be identification ID
- changed masq external interface to be ! internal
- added networking information to admin email
- code cleanup

* Sat Feb 14 2003 Peter Schubert <psc@s-a-c-o.de>
- some fixes in the _updown script
- thanks to Steve Bush (steve_at_bushinc.com> for the tests and fixes 

* Thu Feb 04 2003 Peter Schubert <psc@s-a-c-o.de>
- another "cosmetic" fix in post section of the SPEC

* Mon Feb 03 2003 Peter Schubert <psc@s-a-c-o.de>
- remove expand-template masq in post section

* Mon Feb 03 2003 Peter Schubert <psc@s-a-c-o.de>
- updated for freeswan 1.98 and iptables
- [1.98-1sme56]

* Sun Oct 20 2002 Darrell May <dmay@netsourced.com>
- panel updates
- [1.97-3sme55]

* Sun Oct 20 2002 Darrell May <dmay@netsourced.com>
- added mail-ipsec-key action
- added WINS server config to panel
- [1.97-2sme55]

* Sat Oct 19 2002 Darrell May <dmay@netsourced.com>
- updated for freeswan 1.97-07 and SME 5.5
- [1.97-1sme55]

* Sun Dec 23 2001 Darrell May <dmay@netsourced.com>
- changed ipsec InitscriptOrder from 47 to 99
- 0.4-12

* Fri Nov 9 2001 Darrell May <dmay@netsourced.com>
- release to 0.4-11
- added compress=yes to /etc/e-smith/templates/etc/ipsec.conf/20Default

* Wed Nov 7 2001 Darrell May <dmay@netsourced.com>
- release 0.4-10
- removed /usr/lib/ipsec/_updown script for ipchains
- added /usr/lib/ipsec/_updown_1.8 and _updown_1.91 scripts for ipchains

* Thu Nov 1 2001 Darrell May <dmay@netsourced.com>
- release 0.4-9
- updated /usr/lib/ipsec/_updown script for ipchains
- editing to virtualprivatedomain function

* Sat Oct 20 2001 Darrell May <dmay@netsourced.com>
- release 0.4-8
- updated for Mitel SME Server V5
- name changed to dmc-mitel-freeswan

* Wed Apr 4 2001 Andy Worthington <andy@rockcity.com>
- added another masq template fragment (45AllowIPSEC)
- fixed @name in ipsec.conf template

* Thu Mar 15 2001 Andy Worthington <andy@rockcity.com>
- add post script back
- fixed permissions in filelist
- fix rsasig entries in ipsec.conf templates
- fix spelling of vpn link in manager/cgi-bin
- fix perms on vpn web page

* Wed Mar 14 2001 Andy Worthington <andy@rockcity.com>
- change order of actions in ipsec-install
- fix masq template fragment

* Fri Mar 09 2001 Andy Worthington <andy@rockcity.com>
- remove post script
- change masq template fragment to templates-custom dir

* Fri Mar 09 2001 Andy Worthington <andy@rockcity.com>
- small fix in conf-ipsec-secrets and 10RSAKey
- changed order of actions in ipsec-install and added
  conf-masq and restart-masq

* Thu Mar 08 2001 Andy Worthington <andy@rockcity.com>
- added file to disable source address verification in masq
  so KLIPS will function correctly
  
* Tue Mar 06 2001 Andy Worthington <andy@rockcity.com>
- updated to version 0.4
- added to post event signal

* Wed Feb 28 2001 Andy Worthington <andy@rockcity.com>
- updated to version 0.3

* Fri Feb 23 2001 Andy Worthington <andy@rockcity.com>
- updated to version 0.2

* Wed Feb 21 2001 Andy Worthington <andy@rockcity.com>
- initial release

%description
Mitel SME Server enhancement to configure ipsec connections
through the web manager

%prep
%setup
%patch0 -p1
%patch1 -p1

%build
perl createlinks

%install
rm -rf $RPM_BUILD_ROOT

(cd root   ; find . -depth -print | cpio -dump $RPM_BUILD_ROOT)
rm -f e-smith-%{version}-filelist
/sbin/e-smith/genfilelist $RPM_BUILD_ROOT > %{name}-%{version}-filelist
%files -f %{name}-%{version}-filelist

%defattr(-,root,root)

%clean
rm -rf $RPM_BUILD_ROOT

%pre

%preun

%post
if [ -f /etc/ipsec.conf ]
then
   cp -f --backup=t /etc/ipsec.conf /etc/ipsec.conf.prerpm > /dev/null 2> /dev/null
fi
if [ -f /etc/ipsec.secrets ]
then
   cp -f --backup=t /etc/ipsec.secrets /etc/ipsec.secrets.prerpm > /dev/null 2> /dev/null
fi
if [ -f /usr/local/lib/ipsec/_updown ]
then
   cp -f --backup=t /usr/local/lib/ipsec/_updown /usr/local/lib/ipsec/_updown.prerpm > /dev/null 2> /dev/null
fi
/bin/cp /usr/local/lib/ipsec/_updown_1.99 /usr/local/lib/ipsec/_updown
/sbin/e-smith/expand-template /etc/rc.d/init.d/masq     
/sbin/e-smith/expand-template /etc/sysctl.conf

%postun
1	Summary: IPSEC support for SME Server
2	%define name smeserver-ipsec
3	Name: %{name}
4	%define version 0.0.2
5	%define release 03
6	Version: %{version}
7	Release: %{release}
8	License: GPL
9	Group: Networking/Daemons
10	Source: %{name}-%{version}.tar.gz
11	Patch0: smeserver-ipsec-0.0.1-relocatemastemplates.patch
12	Patch1: smeserver-ipsec-0.0.1-dbdefaults.patch
13	BuildRoot: /var/tmp/e-smith-buildroot
14	BuildArchitectures: noarch
15	Requires: e-smith-release >= 7
16	Requires: ipsec-tools
17	AutoReqProv: no
18	Obsoletes: dmc-mitel-freeswan
19	Obsoletes: devinfo-freeswan
20
21	%changelog
22	* Wed Jan 4 2006 Gordon Rowell <gordonr@gormand.com.au> 0.0.2-03
23	- Add db defaults ipsec=service\|status\|disabled
24
25	* Wed Jan 4 2006 Gordon Rowell <gordonr@gormand.com.au> 0.0.2-02
26	- Relocate masq fragments to templates from templates-custom
27
28	* Wed Jan 4 2006 Gordon Rowell <gordonr@gormand.com.au> 0.0.2-01
29	- Removed symlinks from imported tarball
30
31	* Wed Jan 4 2006 Gordon Rowell <gordonr@gormand.com.au> 0.0.1-01
32	- Package renamed to smeserver-ipsec (from devinfo-freeswan)
33
34	* Fri May 2 2003 Peter Schubert <psc@s-a-c-o.de>
35	- added template for /etc/sysctl.conf
36	- to set rp_filter to 0 as default
37	- added Funktion to change the PublicID of the Server
38
39	* Sat Apr 12 2003 Shad L. Lords <slords@mail.com>
40	- 1.99-6sme56
41	- fixed bug in ipsec-install script. Thanks to Randy Brown.
42
43	* Fri Apr 11 2003 Shad L. Lords <slords@mail.com>
44	- 1.99-5sme56
45	- added ipsec devices as trusted local networks
46
47	* Fri Apr 11 2003 Shad L. Lords <slords@mail.com>
48	- 1.99-4sme56
49	- fixed many routing problems between networks
50	- added dependancy on e-smith-packetfilter
51
52	* Fri Apr 11 2003 Shad L. Lords <slords@mail.com>
53	- 1.99-3sme56
54	- updated info mailed to admin
55
56	* Fri Apr 11 2003 Shad L. Lords <slords@mail.com>
57	- 1.99-2sme56
58	- fixed bug in web panel
59
60	* Fri Apr 11 2003 Shad L. Lords <slords@mail.com>
61	- 1.99-1sme56
62	- bumped to v1.99
63	- many fixes in _updown script
64	- cleanup of /etc/ipsec.conf script
65	- cleanup web interface a little more
66	- added id tag to ipsec db entry
67
68	* Thu Apr 10 2003 Shad L. Lords <slords@mail.com>
69	- 1.98b-3sme56
70	- fixed masq template for external interface
71
72	* Thu Apr 10 2003 Shad L. Lords <slords@mail.com>
73	- 1.98b-2sme56
74	- fixed remoteHost and remoteID in ipsec.conv script
75
76	* Thu Apr 10 2003 Shad L. Lords <slords@mail.com>
77	- 1.98b-1sme56
78	- changed configuration to no longer need nexthop information (now user %defaultroute)
79	- changed connection to allow hostnames
80	- changed description to be identification ID
81	- changed masq external interface to be ! internal
82	- added networking information to admin email
83	- code cleanup
84
85	* Sat Feb 14 2003 Peter Schubert <psc@s-a-c-o.de>
86	- some fixes in the _updown script
87	- thanks to Steve Bush (steve_at_bushinc.com> for the tests and fixes
88
89	* Thu Feb 04 2003 Peter Schubert <psc@s-a-c-o.de>
90	- another "cosmetic" fix in post section of the SPEC
91
92	* Mon Feb 03 2003 Peter Schubert <psc@s-a-c-o.de>
93	- remove expand-template masq in post section
94
95	* Mon Feb 03 2003 Peter Schubert <psc@s-a-c-o.de>
96	- updated for freeswan 1.98 and iptables
97	- [1.98-1sme56]
98
99	* Sun Oct 20 2002 Darrell May <dmay@netsourced.com>
100	- panel updates
101	- [1.97-3sme55]
102
103	* Sun Oct 20 2002 Darrell May <dmay@netsourced.com>
104	- added mail-ipsec-key action
105	- added WINS server config to panel
106	- [1.97-2sme55]
107
108	* Sat Oct 19 2002 Darrell May <dmay@netsourced.com>
109	- updated for freeswan 1.97-07 and SME 5.5
110	- [1.97-1sme55]
111
112	* Sun Dec 23 2001 Darrell May <dmay@netsourced.com>
113	- changed ipsec InitscriptOrder from 47 to 99
114	- 0.4-12
115
116	* Fri Nov 9 2001 Darrell May <dmay@netsourced.com>
117	- release to 0.4-11
118	- added compress=yes to /etc/e-smith/templates/etc/ipsec.conf/20Default
119
120	* Wed Nov 7 2001 Darrell May <dmay@netsourced.com>
121	- release 0.4-10
122	- removed /usr/lib/ipsec/_updown script for ipchains
123	- added /usr/lib/ipsec/_updown_1.8 and _updown_1.91 scripts for ipchains
124
125	* Thu Nov 1 2001 Darrell May <dmay@netsourced.com>
126	- release 0.4-9
127	- updated /usr/lib/ipsec/_updown script for ipchains
128	- editing to virtualprivatedomain function
129
130	* Sat Oct 20 2001 Darrell May <dmay@netsourced.com>
131	- release 0.4-8
132	- updated for Mitel SME Server V5
133	- name changed to dmc-mitel-freeswan
134
135	* Wed Apr 4 2001 Andy Worthington <andy@rockcity.com>
136	- added another masq template fragment (45AllowIPSEC)
137	- fixed @name in ipsec.conf template
138
139	* Thu Mar 15 2001 Andy Worthington <andy@rockcity.com>
140	- add post script back
141	- fixed permissions in filelist
142	- fix rsasig entries in ipsec.conf templates
143	- fix spelling of vpn link in manager/cgi-bin
144	- fix perms on vpn web page
145
146	* Wed Mar 14 2001 Andy Worthington <andy@rockcity.com>
147	- change order of actions in ipsec-install
148	- fix masq template fragment
149
150	* Fri Mar 09 2001 Andy Worthington <andy@rockcity.com>
151	- remove post script
152	- change masq template fragment to templates-custom dir
153
154	* Fri Mar 09 2001 Andy Worthington <andy@rockcity.com>
155	- small fix in conf-ipsec-secrets and 10RSAKey
156	- changed order of actions in ipsec-install and added
157	conf-masq and restart-masq
158
159	* Thu Mar 08 2001 Andy Worthington <andy@rockcity.com>
160	- added file to disable source address verification in masq
161	so KLIPS will function correctly
162
163	* Tue Mar 06 2001 Andy Worthington <andy@rockcity.com>
164	- updated to version 0.4
165	- added to post event signal
166
167	* Wed Feb 28 2001 Andy Worthington <andy@rockcity.com>
168	- updated to version 0.3
169
170	* Fri Feb 23 2001 Andy Worthington <andy@rockcity.com>
171	- updated to version 0.2
172
173	* Wed Feb 21 2001 Andy Worthington <andy@rockcity.com>
174	- initial release
175
176	%description
177	Mitel SME Server enhancement to configure ipsec connections
178	through the web manager
179
180	%prep
181	%setup
182	%patch0 -p1
183	%patch1 -p1
184
185	%build
186	perl createlinks
187
188	%install
189	rm -rf $RPM_BUILD_ROOT
190
191	(cd root ; find . -depth -print \| cpio -dump $RPM_BUILD_ROOT)
192	rm -f e-smith-%{version}-filelist
193	/sbin/e-smith/genfilelist $RPM_BUILD_ROOT > %{name}-%{version}-filelist
194	%files -f %{name}-%{version}-filelist
195
196	%defattr(-,root,root)
197
198	%clean
199	rm -rf $RPM_BUILD_ROOT
200
201	%pre
202
203	%preun
204
205	%post
206	if [ -f /etc/ipsec.conf ]
207	then
208	cp -f --backup=t /etc/ipsec.conf /etc/ipsec.conf.prerpm > /dev/null 2> /dev/null
209	fi
210	if [ -f /etc/ipsec.secrets ]
211	then
212	cp -f --backup=t /etc/ipsec.secrets /etc/ipsec.secrets.prerpm > /dev/null 2> /dev/null
213	fi
214	if [ -f /usr/local/lib/ipsec/_updown ]
215	then
216	cp -f --backup=t /usr/local/lib/ipsec/_updown /usr/local/lib/ipsec/_updown.prerpm > /dev/null 2> /dev/null
217	fi
218	/bin/cp /usr/local/lib/ipsec/_updown_1.99 /usr/local/lib/ipsec/_updown
219	/sbin/e-smith/expand-template /etc/rc.d/init.d/masq
220	/sbin/e-smith/expand-template /etc/sysctl.conf
221
222	%postun