forked from pool/strongswan
Accepting request 40896 from network:vpn
checked in (request 40896) OBS-URL: https://build.opensuse.org/request/show/40896 OBS-URL: https://build.opensuse.org/package/show/network:vpn/strongswan?expand=0&rev=13
This commit is contained in:
parent
6d0766776d
commit
8de2037089
14
README.SUSE
14
README.SUSE
@ -1,14 +0,0 @@
|
|||||||
Dear Customer,
|
|
||||||
|
|
||||||
this package does no provide any files any more, but triggers the
|
|
||||||
installation of both, IKEv1 (pluto) and IKEv2 (charon) daemons and
|
|
||||||
the traditional starter scripts inclusive of the /etc/init.d/ipsec
|
|
||||||
init script and /etc/ipsec.conf file.
|
|
||||||
|
|
||||||
There is a new strongswan-nm package with a NetworkManager plugin
|
|
||||||
to control the charon IKEv2 daemon through D-Bus, designed to work
|
|
||||||
using the NetworkManager-strongswan graphical user interface.
|
|
||||||
It does not depend on the traditional starter scripts, but on the
|
|
||||||
IKEv2 charon daemon and plugins only.
|
|
||||||
|
|
||||||
Have a lot of fun...
|
|
4
strongswan-4.3.6-rpmlintrc
Normal file
4
strongswan-4.3.6-rpmlintrc
Normal file
@ -0,0 +1,4 @@
|
|||||||
|
addFilter("strongswan.* incoherent-init-script-name ipsec")
|
||||||
|
addFilter('strongswan.* shlib-policy-missing-suffix')
|
||||||
|
#addFilter("strongswan.* devel-file-in-non-devel-package .*/usr/lib.*/ipsec/plugins")
|
||||||
|
#addFilter("strongswan.* unstripped-binary-or-object")
|
11
strongswan-4.3.6-time_t_ptr.diff
Normal file
11
strongswan-4.3.6-time_t_ptr.diff
Normal file
@ -0,0 +1,11 @@
|
|||||||
|
--- src/pluto/timer.c
|
||||||
|
+++ src/pluto/timer.c 2010/03/02 17:03:41
|
||||||
|
@@ -48,7 +48,7 @@ time_t now(void)
|
||||||
|
{
|
||||||
|
static time_t delta = 0
|
||||||
|
, last_time = 0;
|
||||||
|
- time_t n = time((time_t)NULL);
|
||||||
|
+ time_t n = time((time_t *)NULL);
|
||||||
|
|
||||||
|
passert(n != (time_t)-1);
|
||||||
|
if (last_time > n)
|
3
strongswan-4.3.6.tar.bz2
Normal file
3
strongswan-4.3.6.tar.bz2
Normal file
@ -0,0 +1,3 @@
|
|||||||
|
version https://git-lfs.github.com/spec/v1
|
||||||
|
oid sha256:39a311c62f4f2474faf239c0edf6518a14a953b9c2092bbfa473cd34dcb8f5e7
|
||||||
|
size 2831944
|
14
strongswan-4.3.6.tar.bz2.sig
Normal file
14
strongswan-4.3.6.tar.bz2.sig
Normal file
@ -0,0 +1,14 @@
|
|||||||
|
-----BEGIN PGP SIGNATURE-----
|
||||||
|
Version: GnuPG v1.4.9 (GNU/Linux)
|
||||||
|
|
||||||
|
iQGcBAABAgAGBQJLcr+BAAoJEN9CwXCzTbp3fp4L/js5E69jqpEIKe82amRjLewK
|
||||||
|
orEWWfaXq7p/Ob8KYICUBt4lXtDNka8NspMZ88bWTUYLkDMTITBB9JiYVu2NXTYY
|
||||||
|
6CQAR9eNB6E+uOOkj6udU1Y/dt+MY5uvbrjOgTN2Kcue+AlVrngSuruN71r+GOnD
|
||||||
|
vWDf6AxU8LtiPUaY8WTC7Nn8Qgi1g10I5HXn5D6QN6Cz4oWf/hx1VvOZ1s7gTekW
|
||||||
|
4E/V2ladLFKhXIC2D3tUn5J8FwKXFyqdooBnWvqhrDidNEQ8CDr62lkfOwJ3/qTP
|
||||||
|
wpvQkwlOdX5TQQJAaYeW/S39MorK/E10lZWvkF/rkW6vGU5pgQkfGyozP6O/A4w5
|
||||||
|
MkRtCsbcbtRIDicsYj4oX+2SiazZtmB5eMVc6SO0GT0dXgEMTGUKC3ezUV03LwXR
|
||||||
|
PiWLVtrlqnVMxyzfr59HFd8B9c7l5rXcyYpYpspWlfdDM6K83NTOydn4i6HT1DgZ
|
||||||
|
x5QkqBzdcH7dUmyZmRRUoopNtTRiu4+nmKmHugzrgA==
|
||||||
|
=n9aW
|
||||||
|
-----END PGP SIGNATURE-----
|
@ -1,5 +0,0 @@
|
|||||||
### Known warnings:
|
|
||||||
# - traditional name
|
|
||||||
addFilter("strongswan.* incoherent-init-script-name ipsec")
|
|
||||||
# - readme only, triggers full ipsec + ikev1&ikev2 install
|
|
||||||
addFilter("strongswan.* no-binary")
|
|
@ -1,3 +0,0 @@
|
|||||||
version https://git-lfs.github.com/spec/v1
|
|
||||||
oid sha256:df40d9daf963ce4f4bef4177ed02d68c083521b307f52bebb1872c2ded4b2718
|
|
||||||
size 2863754
|
|
@ -1,14 +0,0 @@
|
|||||||
-----BEGIN PGP SIGNATURE-----
|
|
||||||
Version: GnuPG v1.4.9 (GNU/Linux)
|
|
||||||
|
|
||||||
iQGcBAABAgAGBQJL3c/MAAoJEN9CwXCzTbp386wL+gNDpVVgxsom7LkOyDNGmtyS
|
|
||||||
kTNI7gwW29aDzoara6wL/BeN38whxkA6d8JJ4XUQhytGcJMr/SA59ghVTjIUnK71
|
|
||||||
7LtUP1VcTnJu7NTgtKcGCgmTWKgiZYRMNumneiePNOQHBZ1TAHo/HP1mxjUN3Q27
|
|
||||||
ULTyAmfyzjuiaZOb/Cs3r9f4qZRZFJBxHrTzOP91f/bGF3Z+DQyiWwSFg9VYPTeC
|
|
||||||
EQ/MrXQMQaJp2qPvglCAqaSEseqkCbsH85WBE1VO8+h4NxO0vGVLnowVvVHkUfmL
|
|
||||||
otDW/zeBBnnazAZQ2QurnyqmxDh4Bt2xkFITHNAj2oDGCsKau/NuQ6A8efx51et+
|
|
||||||
P1yMmjfbrtTSjiNBZ5v5g1iTjc93krzkMnFwzStmir4qeZklW5Ium/gufwE89L59
|
|
||||||
zEG2OQGVTBVFg+hK8jq6mLyW7UOKmNSRw/dJQe1IODd9PQ2+9PbMix/AXcS7qNjV
|
|
||||||
VL8oHxoQfb5Fjfwi8HUxmRJAyBAYE7b2299fsRANBg==
|
|
||||||
=p3Rw
|
|
||||||
-----END PGP SIGNATURE-----
|
|
@ -1,51 +1,3 @@
|
|||||||
-------------------------------------------------------------------
|
|
||||||
Fri May 14 19:19:04 UTC 2010 - mt@suse.de
|
|
||||||
|
|
||||||
- Updated to strongSwan 4.4.0 release, changes since 4.3.6 are:
|
|
||||||
* The IKEv2 High Availability plugin has been integrated. It
|
|
||||||
provides load sharing and failover capabilities in a cluster of
|
|
||||||
currently two nodes, based on an extend ClusterIP kernel module.
|
|
||||||
More information is available at
|
|
||||||
http://wiki.strongswan.org/projects/strongswan/wiki/HighAvailability.
|
|
||||||
The development of the High Availability functionality was sponsored
|
|
||||||
by secunet Security Networks AG.
|
|
||||||
* Added IKEv1 and IKEv2 configuration support for the AES-GMAC
|
|
||||||
authentication-only ESP cipher. Our aes_gmac kernel patch or a Linux
|
|
||||||
2.6.34 kernel is required to make AES-GMAC available via the XFRM
|
|
||||||
kernel interface.
|
|
||||||
* Added support for Diffie-Hellman groups 22, 23 and 24 to the gmp,
|
|
||||||
gcrypt and openssl plugins, usable by both pluto and charon. The new
|
|
||||||
proposal keywords are modp1024s160, modp2048s224 and modp2048s256.
|
|
||||||
Thanks to Joy Latten from IBM for her contribution.
|
|
||||||
* The IKEv1 pluto daemon supports RAM-based virtual IP pools using
|
|
||||||
the rightsourceip directive with a subnet from which addresses
|
|
||||||
are allocated.
|
|
||||||
* The ipsec pki --gen and --pub commands now allow the output of
|
|
||||||
private and public keys in PEM format using the --outform pem
|
|
||||||
command line option.
|
|
||||||
* The new DHCP plugin queries virtual IP addresses for clients from
|
|
||||||
a DHCP server using broadcasts, or a defined server using the
|
|
||||||
charon.plugins.dhcp.server strongswan.conf option. DNS/WINS server
|
|
||||||
information is additionally served to clients if the DHCP server
|
|
||||||
provides such information. The plugin is used in ipsec.conf
|
|
||||||
configurations having rightsourceip set to %dhcp.
|
|
||||||
* A new plugin called farp fakes ARP responses for virtual IP
|
|
||||||
addresses handed out to clients from the IKEv2 daemon charon. The
|
|
||||||
plugin lets a road-warrior act as a client on the local LAN if it
|
|
||||||
uses a virtual IP from the responders subnet, e.g. acquired using
|
|
||||||
the DHCP plugin.
|
|
||||||
* The existing IKEv2 socket implementations have been migrated to
|
|
||||||
the socket-default and the socket-raw plugins. The new
|
|
||||||
socket-dynamic plugin binds sockets dynamically to ports configured
|
|
||||||
via the left-/rightikeport ipsec.conf connection parameters.
|
|
||||||
* The android charon plugin stores received DNS server information
|
|
||||||
as "net.dns" system properties, as used by the Android platform.
|
|
||||||
- Splitted package into strongswan-ipsec, that install the traditional
|
|
||||||
ipsec service starter scripts, -ikev1 and -ikev2 installing daemons
|
|
||||||
and -libs0, that contains the library and plugins.
|
|
||||||
- Enabled dhcp, farp, ha, socket-dynamic, agent, eap and sql plugins.
|
|
||||||
- Enabled NetworkManager nm plugin in a separate strongswan-nm package.
|
|
||||||
|
|
||||||
-------------------------------------------------------------------
|
-------------------------------------------------------------------
|
||||||
Tue Mar 2 21:42:10 CET 2010 - mt@suse.de
|
Tue Mar 2 21:42:10 CET 2010 - mt@suse.de
|
||||||
|
|
||||||
|
247
strongswan.spec
247
strongswan.spec
@ -1,5 +1,5 @@
|
|||||||
#
|
#
|
||||||
# spec file for package strongswan (Version 4.4.0)
|
# spec file for package strongswan (Version 4.3.6)
|
||||||
#
|
#
|
||||||
# Copyright (c) 2010 SUSE LINUX Products GmbH, Nuernberg, Germany.
|
# Copyright (c) 2010 SUSE LINUX Products GmbH, Nuernberg, Germany.
|
||||||
#
|
#
|
||||||
@ -19,35 +19,33 @@
|
|||||||
|
|
||||||
|
|
||||||
Name: strongswan
|
Name: strongswan
|
||||||
%define upstream_version 4.4.0
|
%define upstream_version 4.3.6
|
||||||
%define strongswan_docdir %{_docdir}/%{name}
|
%define strongswan_docdir %{_docdir}/%{name}
|
||||||
%define strongswan_plugins %{_libexecdir}/ipsec/plugins
|
Version: 4.3.6
|
||||||
Version: 4.4.0
|
Release: 1
|
||||||
Release: 0
|
|
||||||
License: GPLv2+
|
License: GPLv2+
|
||||||
Group: Productivity/Networking/Security
|
Group: Productivity/Networking/Security
|
||||||
Summary: OpenSource IPsec-based VPN Solution
|
Summary: StrongSwan -- OpenSource IPsec-based VPN Solution
|
||||||
Url: http://www.strongswan.org/
|
Url: http://www.strongswan.org/
|
||||||
Requires: strongswan-ikev1 = %{version}
|
PreReq: gmp grep %insserv_prereq %fillup_prereq
|
||||||
Requires: strongswan-ikev2 = %{version}
|
Requires: iproute2
|
||||||
Requires: strongswan-ipsec = %{version}
|
Provides: pluto klips ipsec VPN freeswan
|
||||||
|
Obsoletes: freeswan
|
||||||
|
Conflicts: openswan
|
||||||
AutoReqProv: on
|
AutoReqProv: on
|
||||||
Source0: http://download.strongswan.org/strongswan-%{upstream_version}.tar.bz2
|
Source0: http://download.strongswan.org/strongswan-%{upstream_version}.tar.bz2
|
||||||
Source1: http://download.strongswan.org/strongswan-%{upstream_version}.tar.bz2.sig
|
Source1: http://download.strongswan.org/strongswan-%{upstream_version}.tar.bz2.sig
|
||||||
Source2: %{name}.init.in
|
Source2: %{name}.init.in
|
||||||
Source3: %{name}-%{version}-rpmlintrc
|
Source3: %{name}-%{version}-rpmlintrc
|
||||||
Patch1: %{name}_modprobe_syslog.patch
|
Patch1: %{name}_modprobe_syslog.patch
|
||||||
|
Patch2: strongswan-4.3.6-time_t_ptr.diff
|
||||||
BuildRoot: %{_tmppath}/%{name}-%{version}-build
|
BuildRoot: %{_tmppath}/%{name}-%{version}-build
|
||||||
BuildRequires: bison flex gmp-devel gperf pkg-config
|
BuildRequires: bison flex gmp-devel gperf pkg-config
|
||||||
BuildRequires: libcap-devel
|
BuildRequires: libcap-devel
|
||||||
BuildRequires: libopenssl-devel
|
BuildRequires: libopenssl-devel
|
||||||
BuildRequires: libgcrypt-devel
|
BuildRequires: libgcrypt-devel
|
||||||
BuildRequires: openldap2-devel
|
BuildRequires: openldap2-devel
|
||||||
BuildRequires: curl-devel pam-devel
|
BuildRequires: curl-devel
|
||||||
%if 0%{suse_version} >= 1110
|
|
||||||
BuildRequires: libuuid-devel
|
|
||||||
BuildRequires: NetworkManager-devel
|
|
||||||
%endif
|
|
||||||
|
|
||||||
%description
|
%description
|
||||||
StrongSwan is an OpenSource IPsec-based VPN Solution for Linux
|
StrongSwan is an OpenSource IPsec-based VPN Solution for Linux
|
||||||
@ -77,9 +75,7 @@ StrongSwan is an OpenSource IPsec-based VPN Solution for Linux
|
|||||||
* Modular plugins for crypto algorithms and relational database interfaces
|
* Modular plugins for crypto algorithms and relational database interfaces
|
||||||
* Support of elliptic curve DH groups and ECDSA certificates (Suite B, RFC 4869)
|
* Support of elliptic curve DH groups and ECDSA certificates (Suite B, RFC 4869)
|
||||||
* Optional built-in integrity and crypto tests for plugins and libraries
|
* Optional built-in integrity and crypto tests for plugins and libraries
|
||||||
* Smooth Linux desktop integration via the strongSwan NetworkManager applet
|
|
||||||
|
|
||||||
This package triggers the installation of both, IKEv1 and IKEv2 daemons.
|
|
||||||
|
|
||||||
Authors:
|
Authors:
|
||||||
--------
|
--------
|
||||||
@ -87,8 +83,8 @@ Authors:
|
|||||||
and others
|
and others
|
||||||
|
|
||||||
%package doc
|
%package doc
|
||||||
License: GPL v2 or later
|
License: GPLv2+
|
||||||
Summary: OpenSource IPsec-based VPN Solution
|
Summary: StrongSwan -- OpenSource IPsec-based VPN Solution
|
||||||
Group: Productivity/Networking/Security
|
Group: Productivity/Networking/Security
|
||||||
|
|
||||||
%description doc
|
%description doc
|
||||||
@ -103,90 +99,10 @@ Authors:
|
|||||||
Andreas Steffen
|
Andreas Steffen
|
||||||
and others
|
and others
|
||||||
|
|
||||||
%package libs0
|
|
||||||
License: GPL v2 or later
|
|
||||||
Summary: OpenSource IPsec-based VPN Solution
|
|
||||||
Group: Productivity/Networking/Security
|
|
||||||
Conflicts: strongswan < %{version}
|
|
||||||
|
|
||||||
%description libs0
|
|
||||||
StrongSwan is an OpenSource IPsec-based VPN Solution for Linux
|
|
||||||
|
|
||||||
This package provides the strongswan library and plugins.
|
|
||||||
|
|
||||||
%package ikev1
|
|
||||||
License: GPL v2 or later
|
|
||||||
Summary: OpenSource IPsec-based VPN Solution
|
|
||||||
Group: Productivity/Networking/Security
|
|
||||||
Requires: iproute2
|
|
||||||
Requires: strongswan-libs0 = %{version}
|
|
||||||
Requires: strongswan-ipsec = %{version}
|
|
||||||
Provides: strongswan-daemon = %{version} ikev1
|
|
||||||
Provides: pluto
|
|
||||||
Conflicts: freeswan openswan strongswan < %{version}
|
|
||||||
|
|
||||||
%description ikev1
|
|
||||||
StrongSwan is an OpenSource IPsec-based VPN Solution for Linux
|
|
||||||
|
|
||||||
This package provides the pluto IKEv1 daemon.
|
|
||||||
|
|
||||||
%package ikev2
|
|
||||||
License: GPL v2 or later
|
|
||||||
Summary: OpenSource IPsec-based VPN Solution
|
|
||||||
Group: Productivity/Networking/Security
|
|
||||||
Requires: iproute2
|
|
||||||
Requires: strongswan-libs0 = %{version}
|
|
||||||
Requires: strongswan-daemon-starter = %{version}
|
|
||||||
Provides: strongswan-daemon = %{version} ikev2
|
|
||||||
Conflicts: openswan strongswan < %{version}
|
|
||||||
|
|
||||||
%description ikev2
|
|
||||||
StrongSwan is an OpenSource IPsec-based VPN Solution for Linux
|
|
||||||
|
|
||||||
This package provides the charon IKEv2 daemon.
|
|
||||||
|
|
||||||
%package ipsec
|
|
||||||
License: GPL v2 or later
|
|
||||||
Summary: OpenSource IPsec-based VPN Solution
|
|
||||||
Group: Productivity/Networking/Security
|
|
||||||
PreReq: grep %insserv_prereq %fillup_prereq
|
|
||||||
Requires: strongswan-libs0 = %{version}
|
|
||||||
Requires: strongswan-daemon = %{version}
|
|
||||||
#Recommends: strongswan-ikev1 = %{version}
|
|
||||||
#Recommends: strongswan-ikev2 = %{version}
|
|
||||||
Provides: strongswan-daemon-starter = %{version}
|
|
||||||
Provides: strongswan = %{version} ipsec VPN
|
|
||||||
Obsoletes: strongswan < %{version}
|
|
||||||
Conflicts: freeswan openswan
|
|
||||||
|
|
||||||
%description ipsec
|
|
||||||
StrongSwan is an OpenSource IPsec-based VPN Solution for Linux
|
|
||||||
|
|
||||||
This package provides the /etc/init.d/ipsec service script and allows
|
|
||||||
to maintain both, IKEv1 and IKEv2 daemons, using /etc/ipsec.conf and
|
|
||||||
/etc/ipsec.sectes files.
|
|
||||||
|
|
||||||
%if 0%{suse_version} >= 1110
|
|
||||||
%package nm
|
|
||||||
License: GPL v2 or later
|
|
||||||
Summary: OpenSource IPsec-based VPN Solution
|
|
||||||
Group: Productivity/Networking/Security
|
|
||||||
Requires: strongswan-libs0 = %{version}
|
|
||||||
Requires: strongswan-ikev2 = %{version}
|
|
||||||
Provides: strongswan-daemon-starter = %{version}
|
|
||||||
|
|
||||||
%description nm
|
|
||||||
StrongSwan is an OpenSource IPsec-based VPN Solution for Linux
|
|
||||||
|
|
||||||
This package provides the NetworkManager plugin to control the
|
|
||||||
charon IKEv2 daemon through D-Bus, designed to work using the
|
|
||||||
NetworkManager-strongswan graphical user interface.
|
|
||||||
|
|
||||||
%endif
|
|
||||||
|
|
||||||
%prep
|
%prep
|
||||||
%setup -q -n %{name}-%{upstream_version}
|
%setup -q -n %{name}-%{upstream_version}
|
||||||
%patch1 -p0
|
%patch1 -p0
|
||||||
|
%patch2 -p0
|
||||||
sed -e 's|@libexecdir@|%_libexecdir|g' \
|
sed -e 's|@libexecdir@|%_libexecdir|g' \
|
||||||
< $RPM_SOURCE_DIR/strongswan.init.in \
|
< $RPM_SOURCE_DIR/strongswan.init.in \
|
||||||
> strongswan.init
|
> strongswan.init
|
||||||
@ -196,32 +112,17 @@ CFLAGS="$RPM_OPT_FLAGS -W -Wall -Wno-pointer-sign -Wno-strict-aliasing"
|
|||||||
export RPM_OPT_FLAGS CFLAGS
|
export RPM_OPT_FLAGS CFLAGS
|
||||||
#libtoolize --force
|
#libtoolize --force
|
||||||
%{?suse_update_config:%{suse_update_config -f}}
|
%{?suse_update_config:%{suse_update_config -f}}
|
||||||
#autoreconf
|
autoreconf
|
||||||
%configure \
|
%configure \
|
||||||
--enable-integrity-test \
|
--enable-integrity-test \
|
||||||
--with-capabilities=libcap \
|
--with-capabilities=libcap \
|
||||||
--with-plugindir=%{strongswan_plugins} \
|
|
||||||
--with-resolv-conf=%{_localstatedir}/run/strongswan/resolv.conf \
|
--with-resolv-conf=%{_localstatedir}/run/strongswan/resolv.conf \
|
||||||
--enable-smartcard \
|
--enable-smartcard \
|
||||||
--with-default-pkcs11=%{_libdir}/opensc-pkcs11.so \
|
--with-default-pkcs11=%{_libdir}/opensc-pkcs11.so \
|
||||||
--enable-cisco-quirks \
|
--enable-cisco-quirks \
|
||||||
--enable-openssl \
|
--enable-openssl \
|
||||||
--enable-agent \
|
|
||||||
--enable-eap-md5 \
|
|
||||||
--enable-eap-gtc \
|
|
||||||
--enable-eap-aka \
|
|
||||||
--enable-eap-radius \
|
|
||||||
--enable-eap-identity \
|
|
||||||
--enable-eap-mschapv2 \
|
|
||||||
--enable-ha \
|
|
||||||
--enable-dhcp \
|
|
||||||
--enable-farp \
|
|
||||||
--enable-sql \
|
|
||||||
--enable-attr-sql \
|
|
||||||
--enable-socket-dynamic \
|
|
||||||
%if 0%{suse_version} >= 1110
|
%if 0%{suse_version} >= 1110
|
||||||
--enable-gcrypt \
|
--enable-gcrypt \
|
||||||
--enable-nm \
|
|
||||||
%endif
|
%endif
|
||||||
--enable-ldap \
|
--enable-ldap \
|
||||||
--enable-curl
|
--enable-curl
|
||||||
@ -247,28 +148,20 @@ cat << EOT > ${RPM_BUILD_ROOT}%{_sysconfdir}/ipsec.secrets
|
|||||||
#
|
#
|
||||||
EOT
|
EOT
|
||||||
#
|
#
|
||||||
rm -f $RPM_BUILD_ROOT%{_libdir}/lib*.{so,a,la}
|
rm -f $RPM_BUILD_ROOT%{_libdir}/libstrongswan.{so,a,la}
|
||||||
find $RPM_BUILD_ROOT%{_libexecdir}/ipsec \
|
find $RPM_BUILD_ROOT%{_libexecdir}/ipsec \
|
||||||
-name "*.a" -o -name "*.la" | xargs -r rm -f
|
-name "*.a" -o -name "*.la" | xargs -r rm -f
|
||||||
#
|
#
|
||||||
install -m755 -d ${RPM_BUILD_ROOT}%{strongswan_docdir}/
|
install -m755 -d ${RPM_BUILD_ROOT}%{strongswan_docdir}/
|
||||||
install -m644 TODO NEWS README COPYING CREDITS \
|
install -m644 TODO NEWS README COPYING CREDITS \
|
||||||
${RPM_SOURCE_DIR}/README.SUSE \
|
|
||||||
${RPM_BUILD_ROOT}%{strongswan_docdir}/
|
${RPM_BUILD_ROOT}%{strongswan_docdir}/
|
||||||
install -m755 -d $RPM_BUILD_ROOT%{_localstatedir}/run/strongswan
|
install -m755 -d $RPM_BUILD_ROOT%{_localstatedir}/run/strongswan
|
||||||
|
|
||||||
%post libs0
|
%post
|
||||||
%{run_ldconfig}
|
%{run_ldconfig}
|
||||||
test -d %{_localstatedir}/run/strongswan || \
|
|
||||||
%{__mkdir_p} %{_localstatedir}/run/strongswan
|
|
||||||
|
|
||||||
%postun libs0
|
|
||||||
%{run_ldconfig}
|
|
||||||
|
|
||||||
%post ipsec
|
|
||||||
%{fillup_and_insserv ipsec}
|
%{fillup_and_insserv ipsec}
|
||||||
|
|
||||||
%preun ipsec
|
%preun
|
||||||
%{stop_on_removal ipsec}
|
%{stop_on_removal ipsec}
|
||||||
if test -s %{_sysconfdir}/ipsec.secrets.rpmsave; then
|
if test -s %{_sysconfdir}/ipsec.secrets.rpmsave; then
|
||||||
cp -p --backup=numbered %{_sysconfdir}/ipsec.secrets.rpmsave %{_sysconfdir}/ipsec.secrets.rpmsave.old
|
cp -p --backup=numbered %{_sysconfdir}/ipsec.secrets.rpmsave %{_sysconfdir}/ipsec.secrets.rpmsave.old
|
||||||
@ -277,18 +170,15 @@ if test -s %{_sysconfdir}/ipsec.conf.rpmsave; then
|
|||||||
cp -p --backup=numbered %{_sysconfdir}/ipsec.conf.rpmsave %{_sysconfdir}/ipsec.conf.rpmsave.old
|
cp -p --backup=numbered %{_sysconfdir}/ipsec.conf.rpmsave %{_sysconfdir}/ipsec.conf.rpmsave.old
|
||||||
fi
|
fi
|
||||||
|
|
||||||
%postun ipsec
|
%postun
|
||||||
|
%{run_ldconfig}
|
||||||
%{insserv_cleanup}
|
%{insserv_cleanup}
|
||||||
|
|
||||||
%files
|
%files
|
||||||
%defattr(-,root,root)
|
%defattr(-,root,root)
|
||||||
%dir %{strongswan_docdir}
|
|
||||||
%{strongswan_docdir}/README.SUSE
|
|
||||||
|
|
||||||
%files ipsec
|
|
||||||
%defattr(-,root,root)
|
|
||||||
%config(noreplace) %attr(600,root,root) %{_sysconfdir}/ipsec.conf
|
%config(noreplace) %attr(600,root,root) %{_sysconfdir}/ipsec.conf
|
||||||
%config(noreplace) %attr(600,root,root) %{_sysconfdir}/ipsec.secrets
|
%config(noreplace) %attr(600,root,root) %{_sysconfdir}/ipsec.secrets
|
||||||
|
%config(noreplace) %attr(600,root,root) %{_sysconfdir}/strongswan.conf
|
||||||
%dir %{_sysconfdir}/ipsec.d
|
%dir %{_sysconfdir}/ipsec.d
|
||||||
%dir %{_sysconfdir}/ipsec.d/crls
|
%dir %{_sysconfdir}/ipsec.d/crls
|
||||||
%dir %{_sysconfdir}/ipsec.d/reqs
|
%dir %{_sysconfdir}/ipsec.d/reqs
|
||||||
@ -301,42 +191,12 @@ fi
|
|||||||
%config %{_sysconfdir}/init.d/ipsec
|
%config %{_sysconfdir}/init.d/ipsec
|
||||||
%{_sbindir}/rcipsec
|
%{_sbindir}/rcipsec
|
||||||
%{_sbindir}/ipsec
|
%{_sbindir}/ipsec
|
||||||
%{_mandir}/man8/ipsec.8*
|
%{_libexecdir}/ipsec
|
||||||
|
%{_libdir}/libstrongswan.*
|
||||||
%{_mandir}/man5/ipsec.conf.5*
|
%{_mandir}/man5/ipsec.conf.5*
|
||||||
%{_mandir}/man5/ipsec.secrets.5*
|
%{_mandir}/man5/ipsec.secrets.5*
|
||||||
%dir %{_libexecdir}/ipsec
|
%{_mandir}/man8/ipsec.8*
|
||||||
%{_libexecdir}/ipsec/_updown
|
%dir %{_localstatedir}/run/strongswan
|
||||||
%{_libexecdir}/ipsec/_updown_espmark
|
|
||||||
%{_libexecdir}/ipsec/_copyright
|
|
||||||
%{_libexecdir}/ipsec/pki
|
|
||||||
%{_libexecdir}/ipsec/openac
|
|
||||||
%{_libexecdir}/ipsec/scepclient
|
|
||||||
%{_libexecdir}/ipsec/starter
|
|
||||||
%{_libexecdir}/ipsec/stroke
|
|
||||||
%dir %{strongswan_plugins}
|
|
||||||
%{strongswan_plugins}/libstrongswan-stroke.so
|
|
||||||
%{strongswan_plugins}/libstrongswan-updown.so
|
|
||||||
|
|
||||||
%files ikev1
|
|
||||||
%defattr(-,root,root)
|
|
||||||
%dir %{_libexecdir}/ipsec
|
|
||||||
%{_libexecdir}/ipsec/whack
|
|
||||||
%{_libexecdir}/ipsec/pluto
|
|
||||||
%{_libexecdir}/ipsec/_pluto_adns
|
|
||||||
|
|
||||||
%files ikev2
|
|
||||||
%defattr(-,root,root)
|
|
||||||
%dir %{_libexecdir}/ipsec
|
|
||||||
%{_libexecdir}/ipsec/charon
|
|
||||||
#%dir %{strongswan_plugins}
|
|
||||||
|
|
||||||
%if 0%{suse_version} >= 1110
|
|
||||||
%files nm
|
|
||||||
%defattr(-,root,root)
|
|
||||||
%dir %{_libexecdir}/ipsec
|
|
||||||
%dir %{strongswan_plugins}
|
|
||||||
%{strongswan_plugins}/libstrongswan-nm.so
|
|
||||||
%endif
|
|
||||||
|
|
||||||
%files doc
|
%files doc
|
||||||
%defattr(-,root,root)
|
%defattr(-,root,root)
|
||||||
@ -372,59 +232,4 @@ fi
|
|||||||
%{_mandir}/man8/scepclient.8*
|
%{_mandir}/man8/scepclient.8*
|
||||||
%{_mandir}/man8/starter.8*
|
%{_mandir}/man8/starter.8*
|
||||||
|
|
||||||
%files libs0
|
|
||||||
%defattr(-,root,root)
|
|
||||||
%config(noreplace) %attr(600,root,root) %{_sysconfdir}/strongswan.conf
|
|
||||||
%{_libdir}/libhydra.so.0
|
|
||||||
%{_libdir}/libhydra.so.0.0.0
|
|
||||||
%{_libdir}/libcharon.so.0
|
|
||||||
%{_libdir}/libcharon.so.0.0.0
|
|
||||||
%{_libdir}/libstrongswan.so.0
|
|
||||||
%{_libdir}/libstrongswan.so.0.0.0
|
|
||||||
%dir %{_libexecdir}/ipsec
|
|
||||||
%dir %{_libexecdir}/ipsec/pool
|
|
||||||
%{_libexecdir}/ipsec/libchecksum.so
|
|
||||||
%dir %{strongswan_plugins}
|
|
||||||
%{strongswan_plugins}/libstrongswan-aes.so
|
|
||||||
%{strongswan_plugins}/libstrongswan-agent.so
|
|
||||||
%{strongswan_plugins}/libstrongswan-attr.so
|
|
||||||
%{strongswan_plugins}/libstrongswan-attr-sql.so
|
|
||||||
%{strongswan_plugins}/libstrongswan-curl.so
|
|
||||||
%{strongswan_plugins}/libstrongswan-des.so
|
|
||||||
%{strongswan_plugins}/libstrongswan-dhcp.so
|
|
||||||
%{strongswan_plugins}/libstrongswan-dnskey.so
|
|
||||||
%{strongswan_plugins}/libstrongswan-eap-aka.so
|
|
||||||
%{strongswan_plugins}/libstrongswan-eap-gtc.so
|
|
||||||
%{strongswan_plugins}/libstrongswan-eap-identity.so
|
|
||||||
%{strongswan_plugins}/libstrongswan-eap-md5.so
|
|
||||||
%{strongswan_plugins}/libstrongswan-eap-mschapv2.so
|
|
||||||
%{strongswan_plugins}/libstrongswan-eap-radius.so
|
|
||||||
%{strongswan_plugins}/libstrongswan-farp.so
|
|
||||||
%{strongswan_plugins}/libstrongswan-fips-prf.so
|
|
||||||
%if 0%{suse_version} >= 1110
|
|
||||||
%{strongswan_plugins}/libstrongswan-gcrypt.so
|
|
||||||
%endif
|
|
||||||
%{strongswan_plugins}/libstrongswan-gmp.so
|
|
||||||
%{strongswan_plugins}/libstrongswan-ha.so
|
|
||||||
%{strongswan_plugins}/libstrongswan-hmac.so
|
|
||||||
%{strongswan_plugins}/libstrongswan-kernel-netlink.so
|
|
||||||
%{strongswan_plugins}/libstrongswan-ldap.so
|
|
||||||
%{strongswan_plugins}/libstrongswan-md5.so
|
|
||||||
%{strongswan_plugins}/libstrongswan-openssl.so
|
|
||||||
%{strongswan_plugins}/libstrongswan-pem.so
|
|
||||||
%{strongswan_plugins}/libstrongswan-pgp.so
|
|
||||||
%{strongswan_plugins}/libstrongswan-pkcs1.so
|
|
||||||
%{strongswan_plugins}/libstrongswan-pubkey.so
|
|
||||||
%{strongswan_plugins}/libstrongswan-random.so
|
|
||||||
%{strongswan_plugins}/libstrongswan-resolve.so
|
|
||||||
%{strongswan_plugins}/libstrongswan-sha1.so
|
|
||||||
%{strongswan_plugins}/libstrongswan-sha2.so
|
|
||||||
%{strongswan_plugins}/libstrongswan-socket-dynamic.so
|
|
||||||
%{strongswan_plugins}/libstrongswan-socket-raw.so
|
|
||||||
%{strongswan_plugins}/libstrongswan-sql.so
|
|
||||||
%{strongswan_plugins}/libstrongswan-x509.so
|
|
||||||
%{strongswan_plugins}/libstrongswan-xcbc.so
|
|
||||||
%dir %ghost %{_localstatedir}/run/strongswan
|
|
||||||
|
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
|
Loading…
Reference in New Issue
Block a user