Jan Engelhardt
29d549ad98
- Update to version 5.8.4:
* In IKEv1 Quick Mode make sure that a proposal exists before
determining lifetimes (fixes a crash due to a null-pointer
dereference in 5.8.3).
* OpenSSL currently doesn't support squeezing bytes out of a
SHAKE128/256 XOF (support was added with 5.8.3) multiple times.
Unfortunately, EVP_DigestFinalXOF() completely resets the
context and later calls not simply fail, they cause a
null-pointer dereference in libcrypto. c5c1898d73 fixes the
crash at the cost of repeating initializing the whole state and
allocating too much data for subsequent calls (hopefully, once
the OpenSSL issue 7894 is resolved we can implement this more
efficiently).
* On 32-bit platforms, reading arbitrary 32-bit integers from
config files (e.g. for charon.spi_min/max) has been fixed.
* charon-nm now allows using fixed source ports.
- Changes from version 5.8.3:
* Updates for the NM plugin (and backend, which has to be updated
to be compatible):
+ EAP-TLS authentication (#2097)
+ Certificate source (file, agent, smartcard) is selectable
independently
+ Add support to configure local and remote identities (#2581)
+ Support configuring a custom server port (#625)
+ Show hint regarding password storage policy
+ Replaced the term "gateway" with "server"
+ Fixes build issues due to use of deprecated GLib
macros/functions
+ Updated Glade file to GTK 3.2
* The NM backend now supports reauthentication and redirection.
* Previously used reqids are now reallocated, which works around
an issue on FreeBSD where the kernel doesn't allow the daemon
to use reqids > 16383 (#2315).
* On Linux, throw type routes are installed in table 220 for
passthrough policies. The kernel will then fall back on routes
in routing tables with lower priorities for matching traffic.
This way, they require less information (e.g. no interface or
source IP) and can be installed earlier and are not affected by
updates.
* For IKEv1, the lifetimes of the actually selected transform are
returned to the initiator, which is an issue if the peer uses
different lifetimes for different transforms (#3329). We now
also return the correct transform and proposal IDs (proposal ID
was always 0, transform ID 1). IKE_SAs are now not
re-established anymore (e.g. after several retransmits) if a
deletion has been queued (#3335).
* Added support for Ed448 keys and certificates via openssl
plugin and pki tool.
* Added support for SHA-3 and SHAKE128/256 in the openssl plugin.
* The use of algorithm IDs from the private use range can now be
enabled globally, to use them even if no strongSwan vendor ID
was exchanged (05e373aeb0).
* Fixed a compiler issue that may have caused invalid keyUsage
extensions in certificates (#3249).
* A lot of spelling fixes.
* Fixed several reported issues.
- Drop 0006-Resolve-multiple-definition-of-swanctl_dir.patch: Fixed
upstream.
OBS-URL: https://build.opensuse.org/request/show/800173
OBS-URL: https://build.opensuse.org/package/show/network:vpn/strongswan?expand=0&rev=122
1025 lines
39 KiB
RPMSpec
1025 lines
39 KiB
RPMSpec
#
|
|
# spec file for package strongswan
|
|
#
|
|
# Copyright (c) 2020 SUSE LLC
|
|
#
|
|
# All modifications and additions to the file contributed by third parties
|
|
# remain the property of their copyright owners, unless otherwise agreed
|
|
# upon. The license for this file, and modifications and additions to the
|
|
# file, is the same license as for the pristine package itself (unless the
|
|
# license for the pristine package is not an Open Source License, in which
|
|
# case the license is the MIT License). An "Open Source License" is a
|
|
# license that conforms to the Open Source Definition (Version 1.9)
|
|
# published by the Open Source Initiative.
|
|
|
|
# Please submit bugfixes or comments via https://bugs.opensuse.org/
|
|
#
|
|
|
|
|
|
Name: strongswan
|
|
Version: 5.8.4
|
|
Release: 0
|
|
%define upstream_version %{version}
|
|
%define strongswan_docdir %{_docdir}/%{name}
|
|
%define strongswan_libdir %{_libdir}/ipsec
|
|
%define strongswan_configs %{_sysconfdir}/strongswan.d
|
|
%define strongswan_datadir %{_datadir}/strongswan
|
|
%define strongswan_plugins %{strongswan_libdir}/plugins
|
|
%define strongswan_templates %{strongswan_datadir}/templates
|
|
%if 0
|
|
%bcond_without tests
|
|
%else
|
|
%bcond_with tests
|
|
%endif
|
|
%if 0%{suse_version} > 1310
|
|
%bcond_without fipscheck
|
|
%else
|
|
%bcond_with fipscheck
|
|
%endif
|
|
%ifarch %{ix86} ppc64le
|
|
%bcond_without integrity
|
|
%else
|
|
%bcond_with integrity
|
|
%endif
|
|
%if 0%{suse_version} > 1110
|
|
%bcond_without farp
|
|
%bcond_without afalg
|
|
%bcond_without mysql
|
|
%bcond_without sqlite
|
|
%bcond_without gcrypt
|
|
%bcond_without nm
|
|
%else
|
|
%bcond_with farp
|
|
%bcond_with afalg
|
|
%bcond_with mysql
|
|
%bcond_with sqlite
|
|
%bcond_with gcrypt
|
|
%bcond_with nm
|
|
%endif
|
|
%if 0%{suse_version} > 1220
|
|
%bcond_without systemd
|
|
%else
|
|
%bcond_with systemd
|
|
%endif
|
|
Summary: IPsec-based VPN solution
|
|
License: GPL-2.0-or-later
|
|
Group: Productivity/Networking/Security
|
|
URL: https://www.strongswan.org/
|
|
Source0: http://download.strongswan.org/strongswan-%{upstream_version}.tar.bz2
|
|
Source1: http://download.strongswan.org/strongswan-%{upstream_version}.tar.bz2.sig
|
|
Source2: %{name}.init.in
|
|
Source3: %{name}-rpmlintrc
|
|
Source4: README.SUSE
|
|
Source5: %{name}.keyring
|
|
%if %{with fipscheck}
|
|
Source6: fipscheck.sh.in
|
|
Source7: fips-enforce.conf
|
|
%endif
|
|
Patch2: %{name}_ipsec_service.patch
|
|
%if %{with fipscheck}
|
|
Patch3: %{name}_fipscheck.patch
|
|
%endif
|
|
Patch5: 0005-ikev1-Don-t-retransmit-Aggressive-Mode-response.patch
|
|
BuildRoot: %{_tmppath}/%{name}-%{version}-build
|
|
BuildRequires: bison
|
|
BuildRequires: curl-devel
|
|
BuildRequires: flex
|
|
BuildRequires: gmp-devel
|
|
BuildRequires: gperf
|
|
BuildRequires: libcap-devel
|
|
BuildRequires: libopenssl-devel
|
|
BuildRequires: libsoup-devel
|
|
BuildRequires: openldap2-devel
|
|
BuildRequires: pam-devel
|
|
BuildRequires: pcsc-lite-devel
|
|
BuildRequires: pkg-config
|
|
%if %{with mysql}
|
|
BuildRequires: libmysqlclient-devel
|
|
%endif
|
|
%if %{with sqlite}
|
|
BuildRequires: sqlite3-devel
|
|
%endif
|
|
%if %{with gcrypt}
|
|
BuildRequires: libgcrypt-devel
|
|
%endif
|
|
%if %{with nm}
|
|
BuildRequires: pkgconfig(libnm)
|
|
%endif
|
|
%if %{with systemd}
|
|
%{?systemd_requires}
|
|
BuildRequires: pkgconfig(libsystemd)
|
|
%endif
|
|
BuildRequires: iptables
|
|
%if %{with systemd}
|
|
%{!?_rundir: %global _rundir /run}
|
|
%{!?_tmpfilesdir: %global _tmpfilesdir /usr/lib/tmpfiles.d}
|
|
%else
|
|
%{!?_rundir: %global _rundir /var/run}
|
|
%endif
|
|
BuildRequires: autoconf
|
|
BuildRequires: automake
|
|
%if %{with fipscheck}
|
|
BuildRequires: fipscheck
|
|
%endif
|
|
BuildRequires: libtool
|
|
Requires: strongswan-ipsec = %{version}
|
|
|
|
%description
|
|
StrongSwan is an IPsec-based VPN solution for Linux.
|
|
|
|
* Implements both the IKEv1 and IKEv2 (RFC 4306) key exchange protocols
|
|
* Fully tested support of IPv6 IPsec tunnel and transport connections
|
|
* Dynamic IP address and interface update with IKEv2 MOBIKE (RFC 4555)
|
|
* Automatic insertion and deletion of IPsec-policy-based firewall rules
|
|
* Strong 128/192/256 bit AES or Camellia encryption, 3DES support
|
|
* NAT Traversal via UDP encapsulation and port floating (RFC 3947)
|
|
* Dead Peer Detection (DPD, RFC 3706) takes care of dangling tunnels
|
|
* Static virtual IP addresses and IKEv1 ModeConfig pull and push modes
|
|
* XAUTH server and client functionality on top of IKEv1 Main Mode authentication
|
|
* Virtual IP address pool managed by IKE daemon or SQL database
|
|
* Secure IKEv2 EAP user authentication (EAP-SIM, EAP-AKA, EAP-MSCHAPv2, etc.)
|
|
* Optional relaying of EAP messages to AAA server via EAP-RADIUS plugin
|
|
* Support of IKEv2 Multiple Authentication Exchanges (RFC 4739)
|
|
* Authentication based on X.509 certificates or preshared keys
|
|
* Generation of a default self-signed certificate during first strongSwan startup
|
|
* Retrieval and local caching of Certificate Revocation Lists via HTTP or LDAP
|
|
* Full support of the Online Certificate Status Protocol (OCSP, RCF 2560).
|
|
* CA management (OCSP and CRL URIs, default LDAP server)
|
|
* Powerful IPsec policies based on wildcards or intermediate CAs
|
|
* Group policies based on X.509 attribute certificates (RFC 3281)
|
|
* Storage of RSA private keys and certificates on a smartcard (PKCS #11 interface)
|
|
* Modular plugins for crypto algorithms and relational database interfaces
|
|
* Support of elliptic curve DH groups and ECDSA certificates (Suite B, RFC 4869)
|
|
* Optional built-in integrity and crypto tests for plugins and libraries
|
|
* Linux desktop integration via the strongSwan NetworkManager applet
|
|
|
|
This package triggers the installation of both, IKEv1 and IKEv2 daemons.
|
|
|
|
%package doc
|
|
Summary: Documentation for strongSwan
|
|
Group: Documentation/Man
|
|
BuildArch: noarch
|
|
|
|
%description doc
|
|
StrongSwan is an IPsec-based VPN solution for Linux.
|
|
|
|
This package provides the StrongSwan documentation.
|
|
|
|
%package libs0
|
|
Summary: strongSwan core libraries and basic plugins
|
|
Group: Productivity/Networking/Security
|
|
Conflicts: strongswan < %{version}
|
|
|
|
%description libs0
|
|
StrongSwan is an IPsec-based VPN solution for Linux.
|
|
|
|
This package provides the strongswan library and plugins.
|
|
|
|
%package hmac
|
|
Summary: HMAC files for FIPS-140-2 integrity in strongSwan
|
|
Group: Productivity/Networking/Security
|
|
Requires: fipscheck
|
|
Requires: strongswan-ipsec = %{version}
|
|
Requires: strongswan-libs0 = %{version}
|
|
|
|
%description hmac
|
|
The package provides HMAC hash files for FIPS-140-2 integrity checks,
|
|
a config file disabling alternative algorithm implementations and a
|
|
_fipscheck helper script preforming the integrity checks before e.g.
|
|
"ipsec start" action is executed, when FIPS-140-2 compliant operation
|
|
mode is enabled.
|
|
|
|
%package ipsec
|
|
Summary: IPsec-based VPN solution
|
|
Group: Productivity/Networking/Security
|
|
Requires: strongswan-libs0 = %{version}
|
|
Provides: VPN
|
|
Provides: ipsec
|
|
Provides: strongswan = %{version}
|
|
Obsoletes: strongswan < %{version}
|
|
Conflicts: freeswan openswan
|
|
|
|
%description ipsec
|
|
StrongSwan is an IPsec-based VPN solution for Linux.
|
|
|
|
This package provides the /etc/init.d/ipsec service script and allows
|
|
to maintain both IKEv1 and IKEv2 using the /etc/ipsec.conf and the
|
|
/etc/ipsec.sectes files.
|
|
|
|
%package mysql
|
|
Summary: MySQL plugin for strongSwan
|
|
Group: Productivity/Networking/Security
|
|
Requires: strongswan-libs0 = %{version}
|
|
|
|
%description mysql
|
|
StrongSwan is an IPsec-based VPN solution for Linux.
|
|
|
|
This package provides the strongswan mysql plugin.
|
|
|
|
%package sqlite
|
|
Summary: SQLite plugin for strongSwan
|
|
Group: Productivity/Networking/Security
|
|
Requires: strongswan-libs0 = %{version}
|
|
|
|
%description sqlite
|
|
StrongSwan is an OpenSource IPsec-based VPN solution for Linux.
|
|
|
|
This package provides the strongswan sqlite plugin.
|
|
|
|
%package nm
|
|
Summary: NetworkManager plugin for strongSwan
|
|
Group: Productivity/Networking/Security
|
|
Requires: strongswan-libs0 = %{version}
|
|
|
|
%description nm
|
|
StrongSwan is an OpenSource IPsec-based VPN solution for Linux.
|
|
|
|
This package provides the NetworkManager plugin to control the
|
|
charon IKEv2 daemon through D-Bus, designed to work using the
|
|
NetworkManager-strongswan graphical user interface.
|
|
|
|
%package tests
|
|
Summary: Testing plugins for strongSwan
|
|
Group: Productivity/Networking/Security
|
|
Requires: strongswan-libs0 = %{version}
|
|
|
|
%description tests
|
|
StrongSwan is an OpenSource IPsec-based VPN solution for Linux.
|
|
|
|
This package provides the strongswan crypto test vectors plugin
|
|
and the load testing plugin for IKEv2 daemon.
|
|
|
|
%prep
|
|
%setup -q -n %{name}-%{upstream_version}
|
|
%patch2 -p1
|
|
%if %{with fipscheck}
|
|
%patch3 -p1
|
|
%endif
|
|
%patch5 -p1
|
|
sed -e 's|@libexecdir@|%_libexecdir|g' \
|
|
< %{_sourcedir}/strongswan.init.in \
|
|
> strongswan.init
|
|
%if %{with fipscheck}
|
|
sed -e 's|@IPSEC_DIR@|%{_libexecdir}/ipsec|g' \
|
|
-e 's|@IPSEC_LIBDIR@|%{_libdir}/ipsec|g' \
|
|
-e 's|@IPSEC_SBINDIR@|%{_sbindir}|g' \
|
|
-e 's|@IPSEC_BINDIR@|%{_bindir}|g' \
|
|
< %{_sourcedir}/fipscheck.sh.in \
|
|
> _fipscheck
|
|
%endif
|
|
|
|
%build
|
|
CFLAGS="%{optflags} -W -Wall -Wno-pointer-sign -Wno-strict-aliasing -Wno-unused-parameter"
|
|
export CFLAGS
|
|
autoreconf --force --install
|
|
%configure \
|
|
%if %{with integrity}
|
|
--enable-integrity-test \
|
|
%endif
|
|
--with-capabilities=libcap \
|
|
--with-plugindir=%{strongswan_plugins} \
|
|
--with-resolv-conf=%{_rundir}/%{name}/resolv.conf \
|
|
--with-piddir=%{_rundir}/%{name} \
|
|
%if %{with systemd}
|
|
--enable-systemd \
|
|
--with-systemdsystemunitdir=%{_unitdir} \
|
|
%endif
|
|
--enable-pkcs11 \
|
|
--enable-openssl \
|
|
--enable-agent \
|
|
%if %{with gcrypt}
|
|
--enable-gcrypt \
|
|
%else
|
|
--disable-gcrypt \
|
|
%endif
|
|
--enable-blowfish \
|
|
--enable-ctr \
|
|
--enable-ccm \
|
|
--enable-gcm \
|
|
--enable-unity \
|
|
--enable-md4 \
|
|
%if %{with afalg}
|
|
--enable-af-alg \
|
|
%endif
|
|
--enable-eap-sim \
|
|
--enable-eap-sim-file \
|
|
--enable-eap-sim-pcsc \
|
|
--enable-eap-aka \
|
|
--enable-eap-aka-3gpp2 \
|
|
--enable-eap-simaka-sql \
|
|
--enable-eap-simaka-pseudonym \
|
|
--enable-eap-simaka-reauth \
|
|
--enable-eap-identity \
|
|
--enable-eap-md5 \
|
|
--enable-eap-gtc \
|
|
--enable-eap-mschapv2 \
|
|
--enable-eap-tls \
|
|
--enable-eap-ttls \
|
|
--enable-eap-peap \
|
|
--enable-eap-tnc \
|
|
--enable-eap-dynamic \
|
|
--enable-eap-radius \
|
|
--enable-xauth-eap \
|
|
--enable-xauth-pam \
|
|
--enable-tnc-pdp \
|
|
--enable-tnc-imc \
|
|
--enable-tnc-imv \
|
|
--enable-tnccs-11 \
|
|
--enable-tnccs-20 \
|
|
--enable-tnccs-dynamic \
|
|
--enable-imc-test \
|
|
--enable-imv-test \
|
|
--enable-imc-scanner \
|
|
--enable-imv-scanner \
|
|
--enable-ha \
|
|
--enable-dhcp \
|
|
%if %{with farp}
|
|
--enable-farp \
|
|
%endif
|
|
--enable-smp \
|
|
--enable-sql \
|
|
--enable-attr-sql \
|
|
--enable-addrblock \
|
|
--enable-radattr \
|
|
--enable-mediation \
|
|
--enable-led \
|
|
--enable-certexpire \
|
|
--enable-duplicheck \
|
|
--enable-coupling \
|
|
%if %{with mysql}
|
|
--enable-mysql \
|
|
%endif
|
|
%if %{with sqlite}
|
|
--enable-sqlite \
|
|
%endif
|
|
%if %{with nm}
|
|
--enable-nm \
|
|
%else
|
|
--disable-nm \
|
|
%endif
|
|
%if %{with tests}
|
|
--enable-conftest \
|
|
--enable-load-tester \
|
|
--enable-test-vectors \
|
|
%endif
|
|
--enable-ldap \
|
|
--enable-soup \
|
|
--enable-curl \
|
|
--disable-static
|
|
make %{?_smp_mflags}
|
|
|
|
%install
|
|
install -d -m755 %{buildroot}/%{_sbindir}/
|
|
install -d -m755 %{buildroot}/%{_sysconfdir}/ipsec.d/
|
|
%if %{with systemd}
|
|
ln -sf %{_sbindir}/service %{buildroot}/%{_sbindir}/rcstrongswan
|
|
%else
|
|
install -d -m755 %{buildroot}/%{_sysconfdir}/init.d/
|
|
install -m755 strongswan.init %{buildroot}/%{_sysconfdir}/init.d/ipsec
|
|
ln -s %{_sysconfdir}/init.d/ipsec %{buildroot}/%{_sbindir}/rcipsec
|
|
%endif
|
|
#
|
|
# Ensure, plugin -> library dependencies can be resolved
|
|
# (e.g. libtls) to avoid plugin segment checksum errors.
|
|
#
|
|
LD_LIBRARY_PATH="%{buildroot}-$$/%{strongswan_libdir}" \
|
|
%make_install
|
|
#
|
|
# checksums are calculated during make install using the
|
|
# installed binaries/libraries... but find-debuginfo.sh
|
|
# extracts debuginfo/debugsource breaking file checksums.
|
|
# let find-debuginfo.sh run on a build root copy and then
|
|
# calculate the checksums.
|
|
#
|
|
%if %{with integrity}
|
|
%{?__debug_package:
|
|
if test -x %{_rpmconfigdir}/find-debuginfo.sh ; then
|
|
cp -a "%{buildroot}" "%{buildroot}-$$"
|
|
RPM_BUILD_ROOT="%{buildroot}-$$" \
|
|
%{_rpmconfigdir}/find-debuginfo.sh \
|
|
%{?_find_debuginfo_opts} "%{buildroot}-$$"
|
|
make -C src/checksum clean
|
|
rm -f src/checksum/checksum_builder
|
|
LD_LIBRARY_PATH="%{buildroot}-$$/%{strongswan_libdir}" \
|
|
make -C src/checksum install DESTDIR="%{buildroot}-$$"
|
|
mv "%{buildroot}-$$/%{strongswan_libdir}/libchecksum.so" \
|
|
"%{buildroot}/%{strongswan_libdir}/libchecksum.so"
|
|
rm -rf "%{buildroot}-$$"
|
|
fi
|
|
}
|
|
%endif
|
|
#
|
|
rm -f %{buildroot}/%{_sysconfdir}/ipsec.secrets
|
|
cat << EOT > %{buildroot}/%{_sysconfdir}/ipsec.secrets
|
|
#
|
|
# ipsec.secrets
|
|
#
|
|
# This file holds the RSA private keys or the PSK preshared secrets for
|
|
# the IKE/IPsec authentication. See the ipsec.secrets(5) manual page.
|
|
#
|
|
EOT
|
|
#
|
|
%if ! %{with mysql}
|
|
rm -f %{buildroot}/%{strongswan_templates}/database/sql/mysql.sql
|
|
%endif
|
|
%if ! %{with sqlite}
|
|
rm -f %{buildroot}/%{strongswan_templates}/database/sql/sqlite.sql
|
|
%endif
|
|
rm -f %{buildroot}/%{strongswan_libdir}/lib{charon,hydra,strongswan,pttls}.so
|
|
rm -f %{buildroot}/%{strongswan_libdir}/lib{radius,simaka,tls,tnccs,imcv}.so
|
|
find %{buildroot}/%{strongswan_libdir} -type f -name "*.la" -delete
|
|
#
|
|
install -d -m755 %{buildroot}/%{strongswan_docdir}/
|
|
install -c -m644 TODO NEWS README COPYING LICENSE \
|
|
AUTHORS ChangeLog \
|
|
%{buildroot}/%{strongswan_docdir}/
|
|
install -c -m644 %{_sourcedir}/README.SUSE \
|
|
%{buildroot}/%{strongswan_docdir}/
|
|
%if %{with systemd}
|
|
install -d -m 0755 %{buildroot}%{_tmpfilesdir}
|
|
echo 'd %{_rundir}/%{name} 0770 root root' > %{buildroot}%{_tmpfilesdir}/%{name}.conf
|
|
%endif
|
|
%if %{with fipscheck}
|
|
#
|
|
# note: keep the following, _fipscheck's and file lists in sync
|
|
#
|
|
install -c -m750 _fipscheck %{buildroot}/%{_libexecdir}/ipsec/
|
|
install -c -m644 %{_sourcedir}/fips-enforce.conf \
|
|
%{buildroot}/%{strongswan_configs}/charon/zzz_fips-enforce.conf
|
|
# create fips hmac hashes _after_ install post run
|
|
%{expand:%%global __os_install_post {%__os_install_post
|
|
for f in %{buildroot}/%{strongswan_libdir}/lib*.so.*.*.* \
|
|
%{buildroot}/%{strongswan_libdir}/imcvs/*.so \
|
|
%{buildroot}/%{strongswan_plugins}/*.so \
|
|
%{buildroot}/%{_libexecdir}/ipsec/charon \
|
|
%{buildroot}/%{_libexecdir}/ipsec/charon-nm \
|
|
%{buildroot}/%{_libexecdir}/ipsec/stroke \
|
|
%{buildroot}/%{_libexecdir}/ipsec/starter \
|
|
%{buildroot}/%{_libexecdir}/ipsec/pool \
|
|
%{buildroot}/%{_libexecdir}/ipsec/scepclient \
|
|
%{buildroot}/%{_libexecdir}/ipsec/imv_policy_manager \
|
|
%{buildroot}/%{_libexecdir}/ipsec/_fipscheck \
|
|
%{buildroot}/%{_bindir}/pt-tls-client \
|
|
%{buildroot}/%{_sbindir}/ipsec \
|
|
;
|
|
do
|
|
/usr/bin/fipshmac "$f"
|
|
done
|
|
}}
|
|
%endif
|
|
|
|
%post libs0
|
|
/sbin/ldconfig
|
|
%{?tmpfiles_create:%tmpfiles_create %{_tmpfilesdir}/%{name}.conf}
|
|
%{!?tmpfiles_create:test -d %{_rundir}/%{name} || mkdir -p %{_rundir}/%{name}}
|
|
|
|
%postun libs0 -p /sbin/ldconfig
|
|
|
|
%pre ipsec
|
|
%if %{with systemd}
|
|
%service_add_pre %{name}.service
|
|
%endif
|
|
|
|
%post ipsec
|
|
%if %{with systemd}
|
|
%service_add_post %{name}.service
|
|
%endif
|
|
|
|
%preun ipsec
|
|
%if %{with systemd}
|
|
%service_del_preun %{name}.service
|
|
%else
|
|
%{stop_on_removal ipsec}
|
|
%endif
|
|
if test -s %{_sysconfdir}/ipsec.secrets.rpmsave ; then
|
|
cp -p --backup=numbered %{_sysconfdir}/ipsec.secrets.rpmsave \
|
|
%{_sysconfdir}/ipsec.secrets.rpmsave.old
|
|
fi
|
|
if test -s %{_sysconfdir}/ipsec.conf.rpmsave ; then
|
|
cp -p --backup=numbered %{_sysconfdir}/ipsec.conf.rpmsave \
|
|
%{_sysconfdir}/ipsec.conf.rpmsave.old
|
|
fi
|
|
|
|
%postun ipsec
|
|
%if %{with systemd}
|
|
%service_del_postun %{name}.service
|
|
%endif
|
|
|
|
%files
|
|
%defattr(-,root,root)
|
|
%dir %{strongswan_docdir}
|
|
%{strongswan_docdir}/README.SUSE
|
|
|
|
%if %{with fipscheck}
|
|
|
|
%files hmac
|
|
%defattr(-,root,root)
|
|
%dir %{strongswan_configs}
|
|
%dir %{strongswan_configs}/charon
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/zzz_fips-enforce.conf
|
|
%dir %{strongswan_libdir}
|
|
%{strongswan_libdir}/.*.hmac
|
|
%{strongswan_libdir}/imcvs/.*.hmac
|
|
%dir %{strongswan_plugins}
|
|
%{strongswan_plugins}/.*.hmac
|
|
%dir %{_libexecdir}/ipsec
|
|
%{_libexecdir}/ipsec/_fipscheck
|
|
%{_libexecdir}/ipsec/.*.hmac
|
|
%{_sbindir}/.ipsec.hmac
|
|
%{_bindir}/.pt-tls-client.hmac
|
|
%endif
|
|
|
|
%files ipsec
|
|
%defattr(-,root,root)
|
|
%config(noreplace) %attr(600,root,root) %{_sysconfdir}/ipsec.conf
|
|
%config(noreplace) %attr(600,root,root) %{_sysconfdir}/ipsec.secrets
|
|
%config(noreplace) %attr(600,root,root) %{_sysconfdir}/swanctl/swanctl.conf
|
|
%dir %{_sysconfdir}/swanctl
|
|
%dir %{_sysconfdir}/ipsec.d
|
|
%dir %{_sysconfdir}/ipsec.d/crls
|
|
%dir %{_sysconfdir}/ipsec.d/reqs
|
|
%dir %{_sysconfdir}/ipsec.d/certs
|
|
%dir %{_sysconfdir}/ipsec.d/acerts
|
|
%dir %{_sysconfdir}/ipsec.d/aacerts
|
|
%dir %{_sysconfdir}/ipsec.d/cacerts
|
|
%dir %{_sysconfdir}/ipsec.d/ocspcerts
|
|
%dir %attr(700,root,root) %{_sysconfdir}/ipsec.d/private
|
|
%if %{with systemd}
|
|
%{_unitdir}/strongswan-starter.service
|
|
%{_unitdir}/strongswan.service
|
|
%{_sbindir}/rcstrongswan
|
|
%{_sbindir}/charon-systemd
|
|
%else
|
|
%config %{_sysconfdir}/init.d/ipsec
|
|
%{_sbindir}/rcipsec
|
|
%endif
|
|
%{_bindir}/pki
|
|
%{_bindir}/pt-tls-client
|
|
%{_sbindir}/ipsec
|
|
%{_sbindir}/swanctl
|
|
%{_mandir}/man1/pki*.1*
|
|
%{_mandir}/man1/pt-tls-client.1*
|
|
%{_mandir}/man8/ipsec.8*
|
|
%{_mandir}/man5/ipsec.conf.5*
|
|
%{_mandir}/man5/ipsec.secrets.5*
|
|
%{_mandir}/man5/strongswan.conf.5*
|
|
%dir %{_libexecdir}/ipsec
|
|
%{_libexecdir}/ipsec/_copyright
|
|
%{_libexecdir}/ipsec/_updown
|
|
%if %{with test}
|
|
%{_libexecdir}/ipsec/conftest
|
|
%endif
|
|
%{_libexecdir}/ipsec/xfrmi
|
|
%{_libexecdir}/ipsec/duplicheck
|
|
%{_libexecdir}/ipsec/pool
|
|
%{_libexecdir}/ipsec/scepclient
|
|
%{_libexecdir}/ipsec/starter
|
|
%{_libexecdir}/ipsec/stroke
|
|
%{_libexecdir}/ipsec/charon
|
|
%{_libexecdir}/ipsec/_imv_policy
|
|
%{_libexecdir}/ipsec/imv_policy_manager
|
|
%dir %{strongswan_plugins}
|
|
%{strongswan_plugins}/libstrongswan-drbg.so
|
|
%{strongswan_plugins}/libstrongswan-stroke.so
|
|
%{strongswan_plugins}/libstrongswan-updown.so
|
|
|
|
%files doc
|
|
%defattr(-,root,root)
|
|
%dir %{strongswan_docdir}
|
|
%{strongswan_docdir}/TODO
|
|
%{strongswan_docdir}/NEWS
|
|
%{strongswan_docdir}/README
|
|
%{strongswan_docdir}/COPYING
|
|
%{strongswan_docdir}/LICENSE
|
|
%{strongswan_docdir}/AUTHORS
|
|
%{strongswan_docdir}/ChangeLog
|
|
%{_mandir}/man8/scepclient.8*
|
|
%{_mandir}/man5/swanctl.conf.5.*
|
|
%{_mandir}/man8/swanctl.8.*
|
|
|
|
%files libs0
|
|
%defattr(-,root,root)
|
|
%if %{with systemd}
|
|
%{_tmpfilesdir}/%{name}.conf
|
|
%endif
|
|
%config(noreplace) %attr(600,root,root) %{_sysconfdir}/strongswan.conf
|
|
%dir %{strongswan_configs}
|
|
%dir %{strongswan_configs}/charon
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon.conf
|
|
%if %{with systemd}
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon-systemd.conf
|
|
%endif
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon-logging.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/imcv.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/pki.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/pool.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/scepclient.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/starter.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/tnc.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/swanctl.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/addrblock.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/aes.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/counters.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/curve25519.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/drbg.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/vici.conf
|
|
%if %{with afalg}
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/af-alg.conf
|
|
%endif
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/agent.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/attr.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/attr-sql.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/blowfish.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/ccm.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/certexpire.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/cmac.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/constraints.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/coupling.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/ctr.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/curl.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/des.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/dhcp.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/dnskey.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/duplicheck.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-aka-3gpp2.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-aka.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-dynamic.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-gtc.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-identity.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-md5.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-mschapv2.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-peap.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-radius.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-simaka-pseudonym.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-simaka-reauth.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-simaka-sql.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-sim.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-sim-file.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-sim-pcsc.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-tls.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-tnc.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-ttls.conf
|
|
%if %{with farp}
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/farp.conf
|
|
%endif
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/fips-prf.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/gcm.conf
|
|
%if %{with gcrypt}
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/gcrypt.conf
|
|
%endif
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/gmp.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/ha.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/hmac.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/kernel-netlink.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/ldap.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/led.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/md4.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/md5.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/mgf1.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/nonce.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/openssl.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/pem.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/pgp.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/pkcs11.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/pkcs12.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/pkcs1.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/pkcs7.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/pkcs8.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/pubkey.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/radattr.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/random.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/rc2.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/resolve.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/revocation.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/sha1.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/sha2.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/smp.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/socket-default.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/soup.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/sql.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/sshkey.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/stroke.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/tnccs-11.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/tnccs-20.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/tnccs-dynamic.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/tnc-imc.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/tnc-imv.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/tnc-pdp.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/tnc-tnccs.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/unity.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/updown.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/x509.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/xauth-eap.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/xauth-generic.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/xauth-pam.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/xcbc.conf
|
|
%dir %{strongswan_libdir}
|
|
%if %{with integrity}
|
|
%{strongswan_libdir}/libchecksum.so
|
|
%endif
|
|
%{strongswan_libdir}/libcharon.so.*
|
|
%{strongswan_libdir}/libtpmtss.so.*
|
|
%{strongswan_libdir}/libtpmtss.so
|
|
%{strongswan_libdir}/libvici.so
|
|
%{strongswan_libdir}/libvici.so.*
|
|
%{strongswan_libdir}/libpttls.so.*
|
|
%{strongswan_libdir}/libradius.so.*
|
|
%{strongswan_libdir}/libsimaka.so.*
|
|
%{strongswan_libdir}/libstrongswan.so.*
|
|
%{strongswan_libdir}/libtls.so.*
|
|
%{strongswan_libdir}/libtnccs.so.*
|
|
%{strongswan_libdir}/libimcv.so.*
|
|
%dir %{strongswan_libdir}/imcvs
|
|
%{strongswan_libdir}/imcvs/imc-scanner.so
|
|
%{strongswan_libdir}/imcvs/imc-test.so
|
|
%{strongswan_libdir}/imcvs/imv-scanner.so
|
|
%{strongswan_libdir}/imcvs/imv-test.so
|
|
%dir %{strongswan_plugins}
|
|
%{strongswan_plugins}/libstrongswan-addrblock.so
|
|
%{strongswan_plugins}/libstrongswan-aes.so
|
|
%if %{with afalg}
|
|
%{strongswan_plugins}/libstrongswan-af-alg.so
|
|
%endif
|
|
%{strongswan_plugins}/libstrongswan-agent.so
|
|
%{strongswan_plugins}/libstrongswan-attr.so
|
|
%{strongswan_plugins}/libstrongswan-attr-sql.so
|
|
%{strongswan_plugins}/libstrongswan-blowfish.so
|
|
%{strongswan_plugins}/libstrongswan-ccm.so
|
|
%{strongswan_plugins}/libstrongswan-certexpire.so
|
|
%{strongswan_plugins}/libstrongswan-cmac.so
|
|
%{strongswan_plugins}/libstrongswan-counters.so
|
|
%{strongswan_plugins}/libstrongswan-constraints.so
|
|
%{strongswan_plugins}/libstrongswan-coupling.so
|
|
%{strongswan_plugins}/libstrongswan-ctr.so
|
|
%{strongswan_plugins}/libstrongswan-curl.so
|
|
%{strongswan_plugins}/libstrongswan-des.so
|
|
%{strongswan_plugins}/libstrongswan-dhcp.so
|
|
%{strongswan_plugins}/libstrongswan-dnskey.so
|
|
%{strongswan_plugins}/libstrongswan-duplicheck.so
|
|
%{strongswan_plugins}/libstrongswan-eap-aka-3gpp2.so
|
|
%{strongswan_plugins}/libstrongswan-eap-aka.so
|
|
%{strongswan_plugins}/libstrongswan-eap-dynamic.so
|
|
%{strongswan_plugins}/libstrongswan-eap-gtc.so
|
|
%{strongswan_plugins}/libstrongswan-eap-identity.so
|
|
%{strongswan_plugins}/libstrongswan-eap-md5.so
|
|
%{strongswan_plugins}/libstrongswan-eap-mschapv2.so
|
|
%{strongswan_plugins}/libstrongswan-eap-peap.so
|
|
%{strongswan_plugins}/libstrongswan-eap-radius.so
|
|
%{strongswan_plugins}/libstrongswan-eap-sim-file.so
|
|
%{strongswan_plugins}/libstrongswan-eap-sim-pcsc.so
|
|
%{strongswan_plugins}/libstrongswan-eap-sim.so
|
|
%{strongswan_plugins}/libstrongswan-eap-simaka-pseudonym.so
|
|
%{strongswan_plugins}/libstrongswan-eap-simaka-reauth.so
|
|
%{strongswan_plugins}/libstrongswan-eap-simaka-sql.so
|
|
%{strongswan_plugins}/libstrongswan-eap-tls.so
|
|
%{strongswan_plugins}/libstrongswan-eap-tnc.so
|
|
%{strongswan_plugins}/libstrongswan-eap-ttls.so
|
|
%if %{with farp}
|
|
%{strongswan_plugins}/libstrongswan-farp.so
|
|
%endif
|
|
%{strongswan_plugins}/libstrongswan-fips-prf.so
|
|
%{strongswan_plugins}/libstrongswan-gcm.so
|
|
%if %{with gcrypt}
|
|
%{strongswan_plugins}/libstrongswan-gcrypt.so
|
|
%endif
|
|
%{strongswan_plugins}/libstrongswan-gmp.so
|
|
%{strongswan_plugins}/libstrongswan-ha.so
|
|
%{strongswan_plugins}/libstrongswan-hmac.so
|
|
%{strongswan_plugins}/libstrongswan-kernel-netlink.so
|
|
%{strongswan_plugins}/libstrongswan-ldap.so
|
|
%{strongswan_plugins}/libstrongswan-led.so
|
|
%{strongswan_plugins}/libstrongswan-md4.so
|
|
%{strongswan_plugins}/libstrongswan-md5.so
|
|
%{strongswan_plugins}/libstrongswan-mgf1.so
|
|
%{strongswan_plugins}/libstrongswan-nonce.so
|
|
%{strongswan_plugins}/libstrongswan-openssl.so
|
|
%{strongswan_plugins}/libstrongswan-pem.so
|
|
%{strongswan_plugins}/libstrongswan-pgp.so
|
|
%{strongswan_plugins}/libstrongswan-pkcs1.so
|
|
%{strongswan_plugins}/libstrongswan-pkcs11.so
|
|
%{strongswan_plugins}/libstrongswan-pkcs12.so
|
|
%{strongswan_plugins}/libstrongswan-pkcs7.so
|
|
%{strongswan_plugins}/libstrongswan-pkcs8.so
|
|
%{strongswan_plugins}/libstrongswan-pubkey.so
|
|
%{strongswan_plugins}/libstrongswan-radattr.so
|
|
%{strongswan_plugins}/libstrongswan-random.so
|
|
%{strongswan_plugins}/libstrongswan-rc2.so
|
|
%{strongswan_plugins}/libstrongswan-resolve.so
|
|
%{strongswan_plugins}/libstrongswan-revocation.so
|
|
%{strongswan_plugins}/libstrongswan-sha1.so
|
|
%{strongswan_plugins}/libstrongswan-sha2.so
|
|
%{strongswan_plugins}/libstrongswan-smp.so
|
|
%{strongswan_plugins}/libstrongswan-socket-default.so
|
|
%{strongswan_plugins}/libstrongswan-soup.so
|
|
%{strongswan_plugins}/libstrongswan-sql.so
|
|
%{strongswan_plugins}/libstrongswan-sshkey.so
|
|
%{strongswan_plugins}/libstrongswan-tnc-imc.so
|
|
%{strongswan_plugins}/libstrongswan-tnc-imv.so
|
|
%{strongswan_plugins}/libstrongswan-tnc-pdp.so
|
|
%{strongswan_plugins}/libstrongswan-tnc-tnccs.so
|
|
%{strongswan_plugins}/libstrongswan-tnccs-11.so
|
|
%{strongswan_plugins}/libstrongswan-tnccs-20.so
|
|
%{strongswan_plugins}/libstrongswan-tnccs-dynamic.so
|
|
%{strongswan_plugins}/libstrongswan-unity.so
|
|
%{strongswan_plugins}/libstrongswan-x509.so
|
|
%{strongswan_plugins}/libstrongswan-xauth-eap.so
|
|
%{strongswan_plugins}/libstrongswan-xauth-generic.so
|
|
%{strongswan_plugins}/libstrongswan-xauth-pam.so
|
|
%{strongswan_plugins}/libstrongswan-xcbc.so
|
|
%{strongswan_plugins}/libstrongswan-curve25519.so
|
|
%{strongswan_plugins}/libstrongswan-vici.so
|
|
%dir %{strongswan_datadir}
|
|
%dir %{strongswan_templates}
|
|
%dir %{strongswan_templates}/config
|
|
%dir %{strongswan_templates}/config/plugins
|
|
%dir %{strongswan_templates}/config/strongswan.d
|
|
%dir %{strongswan_templates}/database
|
|
%dir %{strongswan_templates}/database/imv
|
|
%dir %{strongswan_templates}/database/sql
|
|
%{strongswan_templates}/config/strongswan.conf
|
|
%{strongswan_templates}/config/plugins/addrblock.conf
|
|
%{strongswan_templates}/config/plugins/aes.conf
|
|
%if %{with afalg}
|
|
%{strongswan_templates}/config/plugins/af-alg.conf
|
|
%endif
|
|
%{strongswan_templates}/config/plugins/agent.conf
|
|
%{strongswan_templates}/config/plugins/attr-sql.conf
|
|
%{strongswan_templates}/config/plugins/attr.conf
|
|
%{strongswan_templates}/config/plugins/blowfish.conf
|
|
%{strongswan_templates}/config/plugins/ccm.conf
|
|
%{strongswan_templates}/config/plugins/certexpire.conf
|
|
%{strongswan_templates}/config/plugins/cmac.conf
|
|
%{strongswan_templates}/config/plugins/counters.conf
|
|
%{strongswan_templates}/config/plugins/constraints.conf
|
|
%{strongswan_templates}/config/plugins/coupling.conf
|
|
%{strongswan_templates}/config/plugins/ctr.conf
|
|
%{strongswan_templates}/config/plugins/curl.conf
|
|
%{strongswan_templates}/config/plugins/des.conf
|
|
%{strongswan_templates}/config/plugins/dhcp.conf
|
|
%{strongswan_templates}/config/plugins/dnskey.conf
|
|
%{strongswan_templates}/config/plugins/drbg.conf
|
|
%{strongswan_templates}/config/plugins/duplicheck.conf
|
|
%{strongswan_templates}/config/plugins/eap-aka-3gpp2.conf
|
|
%{strongswan_templates}/config/plugins/eap-aka.conf
|
|
%{strongswan_templates}/config/plugins/eap-dynamic.conf
|
|
%{strongswan_templates}/config/plugins/eap-gtc.conf
|
|
%{strongswan_templates}/config/plugins/eap-identity.conf
|
|
%{strongswan_templates}/config/plugins/eap-md5.conf
|
|
%{strongswan_templates}/config/plugins/eap-mschapv2.conf
|
|
%{strongswan_templates}/config/plugins/eap-peap.conf
|
|
%{strongswan_templates}/config/plugins/eap-radius.conf
|
|
%{strongswan_templates}/config/plugins/eap-sim-file.conf
|
|
%{strongswan_templates}/config/plugins/eap-sim-pcsc.conf
|
|
%{strongswan_templates}/config/plugins/eap-sim.conf
|
|
%{strongswan_templates}/config/plugins/eap-simaka-pseudonym.conf
|
|
%{strongswan_templates}/config/plugins/eap-simaka-reauth.conf
|
|
%{strongswan_templates}/config/plugins/eap-simaka-sql.conf
|
|
%{strongswan_templates}/config/plugins/eap-tls.conf
|
|
%{strongswan_templates}/config/plugins/eap-tnc.conf
|
|
%{strongswan_templates}/config/plugins/eap-ttls.conf
|
|
%if %{with farp}
|
|
%{strongswan_templates}/config/plugins/farp.conf
|
|
%endif
|
|
%{strongswan_templates}/config/plugins/fips-prf.conf
|
|
%{strongswan_templates}/config/plugins/gcm.conf
|
|
%if %{with gcrypt}
|
|
%{strongswan_templates}/config/plugins/gcrypt.conf
|
|
%endif
|
|
%{strongswan_templates}/config/plugins/gmp.conf
|
|
%{strongswan_templates}/config/plugins/ha.conf
|
|
%{strongswan_templates}/config/plugins/hmac.conf
|
|
%{strongswan_templates}/config/plugins/kernel-netlink.conf
|
|
%{strongswan_templates}/config/plugins/ldap.conf
|
|
%{strongswan_templates}/config/plugins/led.conf
|
|
%{strongswan_templates}/config/plugins/md4.conf
|
|
%{strongswan_templates}/config/plugins/md5.conf
|
|
%{strongswan_templates}/config/plugins/mgf1.conf
|
|
%{strongswan_templates}/config/plugins/nonce.conf
|
|
%{strongswan_templates}/config/plugins/openssl.conf
|
|
%{strongswan_templates}/config/plugins/pem.conf
|
|
%{strongswan_templates}/config/plugins/pgp.conf
|
|
%{strongswan_templates}/config/plugins/pkcs1.conf
|
|
%{strongswan_templates}/config/plugins/pkcs11.conf
|
|
%{strongswan_templates}/config/plugins/pkcs12.conf
|
|
%{strongswan_templates}/config/plugins/pkcs7.conf
|
|
%{strongswan_templates}/config/plugins/pkcs8.conf
|
|
%{strongswan_templates}/config/plugins/pubkey.conf
|
|
%{strongswan_templates}/config/plugins/radattr.conf
|
|
%{strongswan_templates}/config/plugins/random.conf
|
|
%{strongswan_templates}/config/plugins/rc2.conf
|
|
%{strongswan_templates}/config/plugins/resolve.conf
|
|
%{strongswan_templates}/config/plugins/revocation.conf
|
|
%{strongswan_templates}/config/plugins/sha1.conf
|
|
%{strongswan_templates}/config/plugins/sha2.conf
|
|
%{strongswan_templates}/config/plugins/smp.conf
|
|
%{strongswan_templates}/config/plugins/socket-default.conf
|
|
%{strongswan_templates}/config/plugins/soup.conf
|
|
%{strongswan_templates}/config/plugins/sql.conf
|
|
%{strongswan_templates}/config/plugins/sshkey.conf
|
|
%{strongswan_templates}/config/plugins/stroke.conf
|
|
%{strongswan_templates}/config/plugins/tnc-imc.conf
|
|
%{strongswan_templates}/config/plugins/tnc-imv.conf
|
|
%{strongswan_templates}/config/plugins/tnc-pdp.conf
|
|
%{strongswan_templates}/config/plugins/tnc-tnccs.conf
|
|
%{strongswan_templates}/config/plugins/tnccs-11.conf
|
|
%{strongswan_templates}/config/plugins/tnccs-20.conf
|
|
%{strongswan_templates}/config/plugins/tnccs-dynamic.conf
|
|
%{strongswan_templates}/config/plugins/unity.conf
|
|
%{strongswan_templates}/config/plugins/updown.conf
|
|
%{strongswan_templates}/config/plugins/x509.conf
|
|
%{strongswan_templates}/config/plugins/xauth-eap.conf
|
|
%{strongswan_templates}/config/plugins/xauth-generic.conf
|
|
%{strongswan_templates}/config/plugins/xauth-pam.conf
|
|
%{strongswan_templates}/config/plugins/xcbc.conf
|
|
%{strongswan_templates}/config/plugins/curve25519.conf
|
|
%{strongswan_templates}/config/plugins/vici.conf
|
|
%if %{with systemd}
|
|
%{strongswan_templates}/config/strongswan.d/charon-systemd.conf
|
|
%endif
|
|
%{strongswan_templates}/config/strongswan.d/charon-logging.conf
|
|
%{strongswan_templates}/config/strongswan.d/charon.conf
|
|
%{strongswan_templates}/config/strongswan.d/imcv.conf
|
|
%{strongswan_templates}/config/strongswan.d/pki.conf
|
|
%{strongswan_templates}/config/strongswan.d/pool.conf
|
|
%{strongswan_templates}/config/strongswan.d/scepclient.conf
|
|
%{strongswan_templates}/config/strongswan.d/starter.conf
|
|
%{strongswan_templates}/config/strongswan.d/tnc.conf
|
|
%{strongswan_templates}/config/strongswan.d/swanctl.conf
|
|
%{strongswan_templates}/database/imv/data.sql
|
|
%{strongswan_templates}/database/imv/tables.sql
|
|
|
|
%if %{with nm}
|
|
|
|
%files nm
|
|
%defattr(-,root,root)
|
|
%dir %{_libexecdir}/ipsec
|
|
%dir %{strongswan_plugins}
|
|
%{_libexecdir}/ipsec/charon-nm
|
|
%{_datadir}/dbus-1/system.d/nm-strongswan-service.conf
|
|
%endif
|
|
|
|
%if %{with mysql}
|
|
|
|
%files mysql
|
|
%defattr(-,root,root)
|
|
%dir %{strongswan_libdir}
|
|
%dir %{strongswan_plugins}
|
|
%{strongswan_plugins}/libstrongswan-mysql.so
|
|
%dir %{strongswan_configs}
|
|
%dir %{strongswan_configs}/charon
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/mysql.conf
|
|
%dir %{strongswan_datadir}
|
|
%dir %{strongswan_templates}
|
|
%dir %{strongswan_templates}/config
|
|
%dir %{strongswan_templates}/config/plugins
|
|
%dir %{strongswan_templates}/database
|
|
%dir %{strongswan_templates}/database/sql
|
|
%{strongswan_templates}/config/plugins/mysql.conf
|
|
%{strongswan_templates}/database/imv/tables-mysql.sql
|
|
%{strongswan_templates}/database/sql/mysql.sql
|
|
%endif
|
|
|
|
%if %{with sqlite}
|
|
|
|
%files sqlite
|
|
%defattr(-,root,root)
|
|
%dir %{strongswan_libdir}
|
|
%dir %{strongswan_plugins}
|
|
%{strongswan_plugins}/libstrongswan-sqlite.so
|
|
%dir %{strongswan_configs}
|
|
%dir %{strongswan_configs}/charon
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/sqlite.conf
|
|
%dir %{strongswan_datadir}
|
|
%dir %{strongswan_templates}
|
|
%dir %{strongswan_templates}/config
|
|
%dir %{strongswan_templates}/config/plugins
|
|
%dir %{strongswan_templates}/database
|
|
%dir %{strongswan_templates}/database/sql
|
|
%{strongswan_templates}/config/plugins/sqlite.conf
|
|
%{strongswan_templates}/database/sql/sqlite.sql
|
|
%endif
|
|
|
|
%if %{with tests}
|
|
|
|
%files tests
|
|
%defattr(-,root,root)
|
|
%dir %{strongswan_configs}
|
|
%dir %{strongswan_configs}/charon
|
|
%{strongswan_configs}/charon/load-tester.conf
|
|
%{strongswan_configs}/charon/test-vectors.conf
|
|
%dir %{strongswan_templates}
|
|
%dir %{strongswan_templates}/config
|
|
%dir %{strongswan_templates}/config/plugins
|
|
%{strongswan_templates}/config/plugins/load-tester.conf
|
|
%{strongswan_templates}/config/plugins/test-vectors.conf
|
|
%dir %{_libexecdir}/ipsec
|
|
%{_libexecdir}/ipsec/conftest
|
|
%{_libexecdir}/ipsec/load-tester
|
|
%dir %{strongswan_libdir}
|
|
%dir %{strongswan_plugins}
|
|
%{strongswan_plugins}/libstrongswan-load-tester.so
|
|
%{strongswan_plugins}/libstrongswan-test-vectors.so
|
|
%endif
|
|
|
|
%changelog
|