| 1 |
Summary: IPSEC support for SME Server |
| 2 |
%define name smeserver-ipsec |
| 3 |
Name: %{name} |
| 4 |
%define version 0.0.2 |
| 5 |
%define release 05 |
| 6 |
Version: %{version} |
| 7 |
Release: %{release} |
| 8 |
License: GPL |
| 9 |
Group: Networking/Daemons |
| 10 |
Source: %{name}-%{version}.tar.gz |
| 11 |
Patch0: smeserver-ipsec-0.0.1-relocatemastemplates.patch |
| 12 |
Patch1: smeserver-ipsec-0.0.1-dbdefaults.patch |
| 13 |
Patch2: smeserver-ipsec-modulehack.patch |
| 14 |
BuildRoot: /var/tmp/e-smith-buildroot |
| 15 |
BuildArchitectures: noarch |
| 16 |
Requires: e-smith-release >= 7 |
| 17 |
Requires: ipsec-tools |
| 18 |
AutoReqProv: no |
| 19 |
Obsoletes: dmc-mitel-freeswan |
| 20 |
Obsoletes: devinfo-freeswan |
| 21 |
|
| 22 |
%changelog |
| 23 |
* Wed Jan 4 2006 Gordon Rowell <gordonr@gormand.com.au> 0.0.2-05 |
| 24 |
- Add a hack to the local event to force loading of the af_key module |
| 25 |
until we work out why it isn't being loaded automatically |
| 26 |
|
| 27 |
* Wed Jan 4 2006 Gordon Rowell <gordonr@gormand.com.au> 0.0.2-04 |
| 28 |
- Comment out createlinks in build for now, until the old freeswan |
| 29 |
based ones are removed/updated. Thankfully we don't need to do most |
| 30 |
of this with SME7 and ipsec-tools |
| 31 |
|
| 32 |
* Wed Jan 4 2006 Gordon Rowell <gordonr@gormand.com.au> 0.0.2-03 |
| 33 |
- Add db defaults ipsec=service|status|disabled |
| 34 |
|
| 35 |
* Wed Jan 4 2006 Gordon Rowell <gordonr@gormand.com.au> 0.0.2-02 |
| 36 |
- Relocate masq fragments to templates from templates-custom |
| 37 |
|
| 38 |
* Wed Jan 4 2006 Gordon Rowell <gordonr@gormand.com.au> 0.0.2-01 |
| 39 |
- Removed symlinks from imported tarball |
| 40 |
|
| 41 |
* Wed Jan 4 2006 Gordon Rowell <gordonr@gormand.com.au> 0.0.1-01 |
| 42 |
- Package renamed to smeserver-ipsec (from devinfo-freeswan) |
| 43 |
|
| 44 |
* Fri May 2 2003 Peter Schubert <psc@s-a-c-o.de> |
| 45 |
- added template for /etc/sysctl.conf |
| 46 |
- to set rp_filter to 0 as default |
| 47 |
- added Funktion to change the PublicID of the Server |
| 48 |
|
| 49 |
* Sat Apr 12 2003 Shad L. Lords <slords@mail.com> |
| 50 |
- 1.99-6sme56 |
| 51 |
- fixed bug in ipsec-install script. Thanks to Randy Brown. |
| 52 |
|
| 53 |
* Fri Apr 11 2003 Shad L. Lords <slords@mail.com> |
| 54 |
- 1.99-5sme56 |
| 55 |
- added ipsec devices as trusted local networks |
| 56 |
|
| 57 |
* Fri Apr 11 2003 Shad L. Lords <slords@mail.com> |
| 58 |
- 1.99-4sme56 |
| 59 |
- fixed many routing problems between networks |
| 60 |
- added dependancy on e-smith-packetfilter |
| 61 |
|
| 62 |
* Fri Apr 11 2003 Shad L. Lords <slords@mail.com> |
| 63 |
- 1.99-3sme56 |
| 64 |
- updated info mailed to admin |
| 65 |
|
| 66 |
* Fri Apr 11 2003 Shad L. Lords <slords@mail.com> |
| 67 |
- 1.99-2sme56 |
| 68 |
- fixed bug in web panel |
| 69 |
|
| 70 |
* Fri Apr 11 2003 Shad L. Lords <slords@mail.com> |
| 71 |
- 1.99-1sme56 |
| 72 |
- bumped to v1.99 |
| 73 |
- many fixes in _updown script |
| 74 |
- cleanup of /etc/ipsec.conf script |
| 75 |
- cleanup web interface a little more |
| 76 |
- added id tag to ipsec db entry |
| 77 |
|
| 78 |
* Thu Apr 10 2003 Shad L. Lords <slords@mail.com> |
| 79 |
- 1.98b-3sme56 |
| 80 |
- fixed masq template for external interface |
| 81 |
|
| 82 |
* Thu Apr 10 2003 Shad L. Lords <slords@mail.com> |
| 83 |
- 1.98b-2sme56 |
| 84 |
- fixed remoteHost and remoteID in ipsec.conv script |
| 85 |
|
| 86 |
* Thu Apr 10 2003 Shad L. Lords <slords@mail.com> |
| 87 |
- 1.98b-1sme56 |
| 88 |
- changed configuration to no longer need nexthop information (now user %defaultroute) |
| 89 |
- changed connection to allow hostnames |
| 90 |
- changed description to be identification ID |
| 91 |
- changed masq external interface to be ! internal |
| 92 |
- added networking information to admin email |
| 93 |
- code cleanup |
| 94 |
|
| 95 |
* Sat Feb 14 2003 Peter Schubert <psc@s-a-c-o.de> |
| 96 |
- some fixes in the _updown script |
| 97 |
- thanks to Steve Bush (steve_at_bushinc.com> for the tests and fixes |
| 98 |
|
| 99 |
* Thu Feb 04 2003 Peter Schubert <psc@s-a-c-o.de> |
| 100 |
- another "cosmetic" fix in post section of the SPEC |
| 101 |
|
| 102 |
* Mon Feb 03 2003 Peter Schubert <psc@s-a-c-o.de> |
| 103 |
- remove expand-template masq in post section |
| 104 |
|
| 105 |
* Mon Feb 03 2003 Peter Schubert <psc@s-a-c-o.de> |
| 106 |
- updated for freeswan 1.98 and iptables |
| 107 |
- [1.98-1sme56] |
| 108 |
|
| 109 |
* Sun Oct 20 2002 Darrell May <dmay@netsourced.com> |
| 110 |
- panel updates |
| 111 |
- [1.97-3sme55] |
| 112 |
|
| 113 |
* Sun Oct 20 2002 Darrell May <dmay@netsourced.com> |
| 114 |
- added mail-ipsec-key action |
| 115 |
- added WINS server config to panel |
| 116 |
- [1.97-2sme55] |
| 117 |
|
| 118 |
* Sat Oct 19 2002 Darrell May <dmay@netsourced.com> |
| 119 |
- updated for freeswan 1.97-07 and SME 5.5 |
| 120 |
- [1.97-1sme55] |
| 121 |
|
| 122 |
* Sun Dec 23 2001 Darrell May <dmay@netsourced.com> |
| 123 |
- changed ipsec InitscriptOrder from 47 to 99 |
| 124 |
- 0.4-12 |
| 125 |
|
| 126 |
* Fri Nov 9 2001 Darrell May <dmay@netsourced.com> |
| 127 |
- release to 0.4-11 |
| 128 |
- added compress=yes to /etc/e-smith/templates/etc/ipsec.conf/20Default |
| 129 |
|
| 130 |
* Wed Nov 7 2001 Darrell May <dmay@netsourced.com> |
| 131 |
- release 0.4-10 |
| 132 |
- removed /usr/lib/ipsec/_updown script for ipchains |
| 133 |
- added /usr/lib/ipsec/_updown_1.8 and _updown_1.91 scripts for ipchains |
| 134 |
|
| 135 |
* Thu Nov 1 2001 Darrell May <dmay@netsourced.com> |
| 136 |
- release 0.4-9 |
| 137 |
- updated /usr/lib/ipsec/_updown script for ipchains |
| 138 |
- editing to virtualprivatedomain function |
| 139 |
|
| 140 |
* Sat Oct 20 2001 Darrell May <dmay@netsourced.com> |
| 141 |
- release 0.4-8 |
| 142 |
- updated for Mitel SME Server V5 |
| 143 |
- name changed to dmc-mitel-freeswan |
| 144 |
|
| 145 |
* Wed Apr 4 2001 Andy Worthington <andy@rockcity.com> |
| 146 |
- added another masq template fragment (45AllowIPSEC) |
| 147 |
- fixed @name in ipsec.conf template |
| 148 |
|
| 149 |
* Thu Mar 15 2001 Andy Worthington <andy@rockcity.com> |
| 150 |
- add post script back |
| 151 |
- fixed permissions in filelist |
| 152 |
- fix rsasig entries in ipsec.conf templates |
| 153 |
- fix spelling of vpn link in manager/cgi-bin |
| 154 |
- fix perms on vpn web page |
| 155 |
|
| 156 |
* Wed Mar 14 2001 Andy Worthington <andy@rockcity.com> |
| 157 |
- change order of actions in ipsec-install |
| 158 |
- fix masq template fragment |
| 159 |
|
| 160 |
* Fri Mar 09 2001 Andy Worthington <andy@rockcity.com> |
| 161 |
- remove post script |
| 162 |
- change masq template fragment to templates-custom dir |
| 163 |
|
| 164 |
* Fri Mar 09 2001 Andy Worthington <andy@rockcity.com> |
| 165 |
- small fix in conf-ipsec-secrets and 10RSAKey |
| 166 |
- changed order of actions in ipsec-install and added |
| 167 |
conf-masq and restart-masq |
| 168 |
|
| 169 |
* Thu Mar 08 2001 Andy Worthington <andy@rockcity.com> |
| 170 |
- added file to disable source address verification in masq |
| 171 |
so KLIPS will function correctly |
| 172 |
|
| 173 |
* Tue Mar 06 2001 Andy Worthington <andy@rockcity.com> |
| 174 |
- updated to version 0.4 |
| 175 |
- added to post event signal |
| 176 |
|
| 177 |
* Wed Feb 28 2001 Andy Worthington <andy@rockcity.com> |
| 178 |
- updated to version 0.3 |
| 179 |
|
| 180 |
* Fri Feb 23 2001 Andy Worthington <andy@rockcity.com> |
| 181 |
- updated to version 0.2 |
| 182 |
|
| 183 |
* Wed Feb 21 2001 Andy Worthington <andy@rockcity.com> |
| 184 |
- initial release |
| 185 |
|
| 186 |
%description |
| 187 |
Mitel SME Server enhancement to configure ipsec connections |
| 188 |
through the web manager |
| 189 |
|
| 190 |
%prep |
| 191 |
%setup |
| 192 |
%patch0 -p1 |
| 193 |
%patch1 -p1 |
| 194 |
%patch2 -p1 |
| 195 |
|
| 196 |
%build |
| 197 |
# perl createlinks |
| 198 |
|
| 199 |
%install |
| 200 |
rm -rf $RPM_BUILD_ROOT |
| 201 |
|
| 202 |
(cd root ; find . -depth -print | cpio -dump $RPM_BUILD_ROOT) |
| 203 |
rm -f e-smith-%{version}-filelist |
| 204 |
/sbin/e-smith/genfilelist $RPM_BUILD_ROOT \ |
| 205 |
--file /etc/e-smith/events/local/ipsec-module-hack 'attr(0755,root,root)' \ |
| 206 |
> %{name}-%{version}-filelist |
| 207 |
%files -f %{name}-%{version}-filelist |
| 208 |
|
| 209 |
%defattr(-,root,root) |
| 210 |
|
| 211 |
%clean |
| 212 |
rm -rf $RPM_BUILD_ROOT |
| 213 |
|
| 214 |
%pre |
| 215 |
|
| 216 |
%preun |
| 217 |
|
| 218 |
%post |
| 219 |
if [ -f /etc/ipsec.conf ] |
| 220 |
then |
| 221 |
cp -f --backup=t /etc/ipsec.conf /etc/ipsec.conf.prerpm > /dev/null 2> /dev/null |
| 222 |
fi |
| 223 |
if [ -f /etc/ipsec.secrets ] |
| 224 |
then |
| 225 |
cp -f --backup=t /etc/ipsec.secrets /etc/ipsec.secrets.prerpm > /dev/null 2> /dev/null |
| 226 |
fi |
| 227 |
if [ -f /usr/local/lib/ipsec/_updown ] |
| 228 |
then |
| 229 |
cp -f --backup=t /usr/local/lib/ipsec/_updown /usr/local/lib/ipsec/_updown.prerpm > /dev/null 2> /dev/null |
| 230 |
fi |
| 231 |
/bin/cp /usr/local/lib/ipsec/_updown_1.99 /usr/local/lib/ipsec/_updown |
| 232 |
/sbin/e-smith/expand-template /etc/rc.d/init.d/masq |
| 233 |
/sbin/e-smith/expand-template /etc/sysctl.conf |
| 234 |
|
| 235 |
%postun |
Parent Directory
| 
Revision Log
| 
Revision Graph
