forked from pool/strongswan
8cfc35877a
- Updated to strongSwan 5.3.5 providing the following changes:
*Fixed a DoS vulnerability in the gmp plugin that was caused by insufficient input
validation when verifying RSA signatures. More specifically, mpz_powm_sec() has two
requirements regarding the passed exponent and modulus that the plugin did not
enforce, if these are not met the calculation will result in a floating point exception
that crashes the whole process.
This vulnerability has been registered as CVE-2017-9022.
Please refer to our blog for details.
*Fixed a DoS vulnerability in the x509 plugin that was caused because the ASN.1 parser
didn't handle ASN.1 CHOICE types properly, which could result in an infinite loop when
parsing X.509 extensions that use such types.
This vulnerability has been registered as CVE-2017-9023.
Please refer to our blog for details.
*The behavior during IKEv2 CHILD_SA rekeying has been changed in order to avoid
traffic loss. When responding to a CREATE_CHILD_SA request to rekey a CHILD_SA
the responder already has everything available to install and use the new CHILD_SA.
However, this could lead to lost traffic as the initiator won't be able to process
inbound packets until it processed the CREATE_CHILD_SA response and updated the
inbound SA. To avoid this the responder now only installs the new inbound SA and
delays installing the outbound SA until it receives the DELETE for the replaced CHILD_SA.
*The messages transporting these DELETEs could reach the peer before packets sent
with the deleted outbound SAs reach it. To reduce the chance of traffic loss due
to this the inbound SA of the replaced CHILD_SA is not removed for a configurable
amount of seconds (charon.delete_rekeyed_delay) after the DELETE has been processed.
*The code base has been ported to Apple's ARM64 iOS platform, which required several
changes regarding the use of variadic functions. This was necessary because the calling
conventions for variadic and regular functions are different there.
This means that assigning a non-variadic function to a variadic function pointer, as we
did with our enumerator_t::enumerate() implementations and several callbacks, will
result in crashes as the called function accesses the arguments differently than the
OBS-URL: https://build.opensuse.org/request/show/513652
OBS-URL: https://build.opensuse.org/package/show/network:vpn/strongswan?expand=0&rev=99
1049 lines
39 KiB
RPMSpec
1049 lines
39 KiB
RPMSpec
#
|
|
# spec file for package strongswan
|
|
#
|
|
# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany.
|
|
#
|
|
# All modifications and additions to the file contributed by third parties
|
|
# remain the property of their copyright owners, unless otherwise agreed
|
|
# upon. The license for this file, and modifications and additions to the
|
|
# file, is the same license as for the pristine package itself (unless the
|
|
# license for the pristine package is not an Open Source License, in which
|
|
# case the license is the MIT License). An "Open Source License" is a
|
|
# license that conforms to the Open Source Definition (Version 1.9)
|
|
# published by the Open Source Initiative.
|
|
|
|
# Please submit bugfixes or comments via http://bugs.opensuse.org/
|
|
#
|
|
|
|
|
|
Name: strongswan
|
|
Version: 5.5.3
|
|
Release: 0
|
|
%define upstream_version %{version}
|
|
%define strongswan_docdir %{_docdir}/%{name}
|
|
%define strongswan_libdir %{_libdir}/ipsec
|
|
%define strongswan_configs %{_sysconfdir}/strongswan.d
|
|
%define strongswan_datadir %{_datadir}/strongswan
|
|
%define strongswan_plugins %{strongswan_libdir}/plugins
|
|
%define strongswan_templates %{strongswan_datadir}/templates
|
|
%if 0
|
|
%bcond_without tests
|
|
%else
|
|
%bcond_with tests
|
|
%endif
|
|
%if 0%{suse_version} > 1310
|
|
%bcond_without fipscheck
|
|
%else
|
|
%bcond_with fipscheck
|
|
%endif
|
|
%ifarch %{ix86} ppc64le
|
|
%bcond_without integrity
|
|
%else
|
|
%bcond_with integrity
|
|
%endif
|
|
%if 0%{suse_version} > 1110
|
|
%bcond_without farp
|
|
%bcond_without afalg
|
|
%bcond_without mysql
|
|
%bcond_without sqlite
|
|
%bcond_without gcrypt
|
|
%bcond_without nm
|
|
%else
|
|
%bcond_with farp
|
|
%bcond_with afalg
|
|
%bcond_with mysql
|
|
%bcond_with sqlite
|
|
%bcond_with gcrypt
|
|
%bcond_with nm
|
|
%endif
|
|
%if 0%{suse_version} > 1220
|
|
%bcond_without systemd
|
|
%else
|
|
%bcond_with systemd
|
|
%endif
|
|
Summary: OpenSource IPsec-based VPN Solution
|
|
License: GPL-2.0+
|
|
Group: Productivity/Networking/Security
|
|
Url: http://www.strongswan.org/
|
|
Requires: strongswan-ipsec = %{version}
|
|
Source0: http://download.strongswan.org/strongswan-%{upstream_version}.tar.bz2
|
|
Source1: http://download.strongswan.org/strongswan-%{upstream_version}.tar.bz2.sig
|
|
Source2: %{name}.init.in
|
|
Source3: %{name}-%{version}-rpmlintrc
|
|
Source4: README.SUSE
|
|
Source5: %{name}.keyring
|
|
%if %{with fipscheck}
|
|
Source6: fipscheck.sh.in
|
|
Source7: fips-enforce.conf
|
|
%endif
|
|
Patch1: %{name}_modprobe_syslog.patch
|
|
Patch2: %{name}_ipsec_service.patch
|
|
%if %{with fipscheck}
|
|
Patch3: %{name}_fipscheck.patch
|
|
Patch4: %{name}_fipsfilter.patch
|
|
%endif
|
|
Patch5: 0005-ikev1-Don-t-retransmit-Aggressive-Mode-response.patch
|
|
Patch6: 0006-Fix-RSA-signature-verification-for-m.patch
|
|
BuildRoot: %{_tmppath}/%{name}-%{version}-build
|
|
BuildRequires: bison
|
|
BuildRequires: curl-devel
|
|
BuildRequires: flex
|
|
BuildRequires: gmp-devel
|
|
BuildRequires: gperf
|
|
BuildRequires: libcap-devel
|
|
BuildRequires: libopenssl-devel
|
|
BuildRequires: libsoup-devel
|
|
BuildRequires: openldap2-devel
|
|
BuildRequires: pam-devel
|
|
BuildRequires: pcsc-lite-devel
|
|
BuildRequires: pkg-config
|
|
%if %{with mysql}
|
|
BuildRequires: libmysqlclient-devel
|
|
%endif
|
|
%if %{with sqlite}
|
|
BuildRequires: sqlite3-devel
|
|
%endif
|
|
%if %{with gcrypt}
|
|
BuildRequires: libgcrypt-devel
|
|
%endif
|
|
%if %{with nm}
|
|
BuildRequires: NetworkManager-devel
|
|
%endif
|
|
%if %{with systemd}
|
|
%{?systemd_requires}
|
|
%endif
|
|
BuildRequires: iptables
|
|
%if %{with systemd}
|
|
%{!?_rundir: %global _rundir /run}
|
|
%{!?_tmpfilesdir: %global _tmpfilesdir /usr/lib/tmpfiles.d}
|
|
%else
|
|
%{!?_rundir: %global _rundir /var/run}
|
|
%endif
|
|
BuildRequires: autoconf
|
|
BuildRequires: automake
|
|
%if %{with fipscheck}
|
|
BuildRequires: fipscheck
|
|
%endif
|
|
BuildRequires: libtool
|
|
|
|
%description
|
|
StrongSwan is an OpenSource IPsec-based VPN Solution for Linux
|
|
|
|
* runs both on Linux 2.4 (KLIPS IPsec) and Linux 2.6 (NETKEY IPsec) kernels
|
|
* implements both the IKEv1 and IKEv2 (RFC 4306) key exchange protocols
|
|
* Fully tested support of IPv6 IPsec tunnel and transport connections
|
|
* Dynamical IP address and interface update with IKEv2 MOBIKE (RFC 4555)
|
|
* Automatic insertion and deletion of IPsec-policy-based firewall rules
|
|
* Strong 128/192/256 bit AES or Camellia encryption, 3DES support
|
|
* NAT-Traversal via UDP encapsulation and port floating (RFC 3947)
|
|
* Dead Peer Detection (DPD, RFC 3706) takes care of dangling tunnels
|
|
* Static virtual IPs and IKEv1 ModeConfig pull and push modes
|
|
* XAUTH server and client functionality on top of IKEv1 Main Mode authentication
|
|
* Virtual IP address pool managed by IKE daemon or SQL database
|
|
* Secure IKEv2 EAP user authentication (EAP-SIM, EAP-AKA, EAP-MSCHAPv2, etc.)
|
|
* Optional relaying of EAP messages to AAA server via EAP-RADIUS plugin
|
|
* Support of IKEv2 Multiple Authentication Exchanges (RFC 4739)
|
|
* Authentication based on X.509 certificates or preshared keys
|
|
* Generation of a default self-signed certificate during first strongSwan startup
|
|
* Retrieval and local caching of Certificate Revocation Lists via HTTP or LDAP
|
|
* Full support of the Online Certificate Status Protocol (OCSP, RCF 2560).
|
|
* CA management (OCSP and CRL URIs, default LDAP server)
|
|
* Powerful IPsec policies based on wildcards or intermediate CAs
|
|
* Group policies based on X.509 attribute certificates (RFC 3281)
|
|
* Storage of RSA private keys and certificates on a smartcard (PKCS #11 interface)
|
|
* Modular plugins for crypto algorithms and relational database interfaces
|
|
* Support of elliptic curve DH groups and ECDSA certificates (Suite B, RFC 4869)
|
|
* Optional built-in integrity and crypto tests for plugins and libraries
|
|
* Smooth Linux desktop integration via the strongSwan NetworkManager applet
|
|
|
|
This package triggers the installation of both, IKEv1 and IKEv2 daemons.
|
|
|
|
Authors:
|
|
--------
|
|
Andreas Steffen
|
|
and others
|
|
|
|
%package doc
|
|
BuildArch: noarch
|
|
Summary: OpenSource IPsec-based VPN Solution
|
|
Group: Productivity/Networking/Security
|
|
|
|
%description doc
|
|
StrongSwan is an OpenSource IPsec-based VPN Solution for Linux
|
|
|
|
This package provides the StrongSwan documentation.
|
|
|
|
|
|
|
|
Authors:
|
|
--------
|
|
Andreas Steffen
|
|
and others
|
|
|
|
%package libs0
|
|
Summary: OpenSource IPsec-based VPN Solution
|
|
Group: Productivity/Networking/Security
|
|
Conflicts: strongswan < %{version}
|
|
|
|
%description libs0
|
|
StrongSwan is an OpenSource IPsec-based VPN Solution for Linux
|
|
|
|
This package provides the strongswan library and plugins.
|
|
|
|
%if %{with fipscheck}
|
|
|
|
%package hmac
|
|
Summary: HMAC files for FIPS-140-2 integrity
|
|
Group: Productivity/Networking/Security
|
|
Requires: fipscheck
|
|
Requires: strongswan-ipsec = %{version}
|
|
Requires: strongswan-libs0 = %{version}
|
|
|
|
%description hmac
|
|
The package provides HMAC hash files for FIPS-140-2 integrity checks,
|
|
a config file disabling alternative algorithm implementations and a
|
|
_fipscheck helper script preforming the integrity checks before e.g.
|
|
"ipsec start" action is executed, when FIPS-140-2 compliant operation
|
|
mode is enabled.
|
|
|
|
%endif
|
|
|
|
%package ipsec
|
|
Summary: OpenSource IPsec-based VPN Solution
|
|
Group: Productivity/Networking/Security
|
|
PreReq: grep %insserv_prereq %fillup_prereq
|
|
Requires: strongswan-libs0 = %{version}
|
|
Provides: VPN
|
|
Provides: ipsec
|
|
Provides: strongswan = %{version}
|
|
Obsoletes: strongswan < %{version}
|
|
Conflicts: freeswan openswan
|
|
|
|
%description ipsec
|
|
StrongSwan is an OpenSource IPsec-based VPN Solution for Linux
|
|
|
|
This package provides the /etc/init.d/ipsec service script and allows
|
|
to maintain both, IKEv1 and IKEv2, using the /etc/ipsec.conf and the
|
|
/etc/ipsec.sectes files.
|
|
|
|
%if %{with mysql}
|
|
|
|
%package mysql
|
|
Summary: OpenSource IPsec-based VPN Solution
|
|
Group: Productivity/Networking/Security
|
|
Requires: strongswan-libs0 = %{version}
|
|
|
|
%description mysql
|
|
StrongSwan is an OpenSource IPsec-based VPN Solution for Linux
|
|
|
|
This package provides the strongswan mysql plugin.
|
|
|
|
%endif
|
|
|
|
%if %{with sqlite}
|
|
|
|
%package sqlite
|
|
Summary: OpenSource IPsec-based VPN Solution
|
|
Group: Productivity/Networking/Security
|
|
Requires: strongswan-libs0 = %{version}
|
|
|
|
%description sqlite
|
|
StrongSwan is an OpenSource IPsec-based VPN Solution for Linux
|
|
|
|
This package provides the strongswan sqlite plugin.
|
|
|
|
%endif
|
|
|
|
%if %{with nm}
|
|
|
|
%package nm
|
|
Summary: OpenSource IPsec-based VPN Solution
|
|
Group: Productivity/Networking/Security
|
|
Requires: strongswan-libs0 = %{version}
|
|
|
|
%description nm
|
|
StrongSwan is an OpenSource IPsec-based VPN Solution for Linux
|
|
|
|
This package provides the NetworkManager plugin to control the
|
|
charon IKEv2 daemon through D-Bus, designed to work using the
|
|
NetworkManager-strongswan graphical user interface.
|
|
|
|
%endif
|
|
|
|
%if %{with tests}
|
|
|
|
%package tests
|
|
|
|
Summary: OpenSource IPsec-based VPN Solution
|
|
Group: Productivity/Networking/Security
|
|
Requires: strongswan-libs0 = %{version}
|
|
|
|
%description tests
|
|
StrongSwan is an OpenSource IPsec-based VPN Solution for Linux
|
|
|
|
This package provides the strongswan crypto test-vectors plugin
|
|
and the load testing plugin for IKEv2 daemon.
|
|
|
|
%endif
|
|
|
|
%prep
|
|
%setup -q -n %{name}-%{upstream_version}
|
|
%patch1 -p0
|
|
%patch2 -p0
|
|
%if %{with fipscheck}
|
|
%patch3 -p1
|
|
%patch4 -p1
|
|
%endif
|
|
%patch5 -p1
|
|
%patch6 -p1
|
|
sed -e 's|@libexecdir@|%_libexecdir|g' \
|
|
< $RPM_SOURCE_DIR/strongswan.init.in \
|
|
> strongswan.init
|
|
%if %{with fipscheck}
|
|
sed -e 's|@IPSEC_DIR@|%{_libexecdir}/ipsec|g' \
|
|
-e 's|@IPSEC_LIBDIR@|%{_libdir}/ipsec|g' \
|
|
-e 's|@IPSEC_SBINDIR@|%{_sbindir}|g' \
|
|
-e 's|@IPSEC_BINDIR@|%{_bindir}|g' \
|
|
< $RPM_SOURCE_DIR/fipscheck.sh.in \
|
|
> _fipscheck
|
|
%endif
|
|
|
|
%build
|
|
CFLAGS="$RPM_OPT_FLAGS -W -Wall -Wno-pointer-sign -Wno-strict-aliasing -Wno-unused-parameter"
|
|
export RPM_OPT_FLAGS CFLAGS
|
|
autoreconf --force --install
|
|
%configure \
|
|
%if %{with integrity}
|
|
--enable-integrity-test \
|
|
%endif
|
|
--with-capabilities=libcap \
|
|
--with-plugindir=%{strongswan_plugins} \
|
|
--with-resolv-conf=%{_rundir}/%{name}/resolv.conf \
|
|
--with-piddir=%{_rundir}/%{name} \
|
|
%if %{with systemd}
|
|
--with-systemdsystemunitdir=%{_unitdir} \
|
|
%endif
|
|
--enable-pkcs11 \
|
|
--enable-openssl \
|
|
--enable-agent \
|
|
%if %{with gcrypt}
|
|
--enable-gcrypt \
|
|
%else
|
|
--disable-gcrypt \
|
|
%endif
|
|
--enable-blowfish \
|
|
--enable-ctr \
|
|
--enable-ccm \
|
|
--enable-gcm \
|
|
--enable-unity \
|
|
--enable-md4 \
|
|
%if %{with afalg}
|
|
--enable-af-alg \
|
|
%endif
|
|
--enable-eap-sim \
|
|
--enable-eap-sim-file \
|
|
--enable-eap-sim-pcsc \
|
|
--enable-eap-aka \
|
|
--enable-eap-aka-3gpp2 \
|
|
--enable-eap-simaka-sql \
|
|
--enable-eap-simaka-pseudonym \
|
|
--enable-eap-simaka-reauth \
|
|
--enable-eap-identity \
|
|
--enable-eap-md5 \
|
|
--enable-eap-gtc \
|
|
--enable-eap-mschapv2 \
|
|
--enable-eap-tls \
|
|
--enable-eap-ttls \
|
|
--enable-eap-peap \
|
|
--enable-eap-tnc \
|
|
--enable-eap-dynamic \
|
|
--enable-eap-radius \
|
|
--enable-xauth-eap \
|
|
--enable-xauth-pam \
|
|
--enable-tnc-pdp \
|
|
--enable-tnc-imc \
|
|
--enable-tnc-imv \
|
|
--enable-tnccs-11 \
|
|
--enable-tnccs-20 \
|
|
--enable-tnccs-dynamic \
|
|
--enable-imc-test \
|
|
--enable-imv-test \
|
|
--enable-imc-scanner \
|
|
--enable-imv-scanner \
|
|
--enable-ha \
|
|
--enable-dhcp \
|
|
%if %{with farp}
|
|
--enable-farp \
|
|
%endif
|
|
--enable-smp \
|
|
--enable-sql \
|
|
--enable-attr-sql \
|
|
--enable-addrblock \
|
|
--enable-radattr \
|
|
--enable-mediation \
|
|
--enable-led \
|
|
--enable-certexpire \
|
|
--enable-duplicheck \
|
|
--enable-coupling \
|
|
%if %{with mysql}
|
|
--enable-mysql \
|
|
%endif
|
|
%if %{with sqlite}
|
|
--enable-sqlite \
|
|
%endif
|
|
%if %{with nm}
|
|
--enable-nm \
|
|
%else
|
|
--disable-nm \
|
|
%endif
|
|
%if %{with tests}
|
|
--enable-conftest \
|
|
--enable-load-tester \
|
|
--enable-test-vectors \
|
|
%endif
|
|
--enable-ldap \
|
|
--enable-soup \
|
|
--enable-curl \
|
|
--disable-static
|
|
make %{?_smp_mflags:%_smp_mflags}
|
|
|
|
%install
|
|
export RPM_BUILD_ROOT
|
|
install -d -m755 ${RPM_BUILD_ROOT}%{_sbindir}/
|
|
install -d -m755 ${RPM_BUILD_ROOT}%{_sysconfdir}/ipsec.d/
|
|
%if %{with systemd}
|
|
ln -sf %_sbindir/service ${RPM_BUILD_ROOT}%_sbindir/rcstrongswan
|
|
%else
|
|
install -d -m755 ${RPM_BUILD_ROOT}%{_sysconfdir}/init.d/
|
|
install -m755 strongswan.init ${RPM_BUILD_ROOT}%{_sysconfdir}/init.d/ipsec
|
|
ln -s %{_sysconfdir}/init.d/ipsec ${RPM_BUILD_ROOT}%{_sbindir}/rcipsec
|
|
%endif
|
|
#
|
|
# Ensure, plugin -> library dependencies can be resolved
|
|
# (e.g. libtls) to avoid plugin segment checksum errors.
|
|
#
|
|
LD_LIBRARY_PATH="$RPM_BUILD_ROOT-$$%{strongswan_libdir}" \
|
|
make install DESTDIR="$RPM_BUILD_ROOT"
|
|
#
|
|
# checksums are calculated during make install using the
|
|
# installed binaries/libraries... but find-debuginfo.sh
|
|
# extracts debuginfo/debugsource breaking file checksums.
|
|
# let find-debuginfo.sh run on a build root copy and then
|
|
# calculate the checksums.
|
|
#
|
|
%if %{with integrity}
|
|
%{?__debug_package:
|
|
if test -x %{_rpmconfigdir}/find-debuginfo.sh ; then
|
|
cp -a "${RPM_BUILD_ROOT}" "${RPM_BUILD_ROOT}-$$"
|
|
RPM_BUILD_ROOT="$RPM_BUILD_ROOT-$$" \
|
|
%{_rpmconfigdir}/find-debuginfo.sh \
|
|
%{?_find_debuginfo_opts} "${RPM_BUILD_ROOT}-$$"
|
|
make -C src/checksum clean
|
|
rm -f src/checksum/checksum_builder
|
|
LD_LIBRARY_PATH="$RPM_BUILD_ROOT-$$%{strongswan_libdir}" \
|
|
make -C src/checksum install DESTDIR="$RPM_BUILD_ROOT-$$"
|
|
mv "$RPM_BUILD_ROOT-$$%{strongswan_libdir}/libchecksum.so" \
|
|
"$RPM_BUILD_ROOT%{strongswan_libdir}/libchecksum.so"
|
|
rm -rf "${RPM_BUILD_ROOT}-$$"
|
|
fi
|
|
}
|
|
%endif
|
|
#
|
|
rm -f ${RPM_BUILD_ROOT}%{_sysconfdir}/ipsec.secrets
|
|
cat << EOT > ${RPM_BUILD_ROOT}%{_sysconfdir}/ipsec.secrets
|
|
#
|
|
# ipsec.secrets
|
|
#
|
|
# This file holds the RSA private keys or the PSK preshared secrets for
|
|
# the IKE/IPsec authentication. See the ipsec.secrets(5) manual page.
|
|
#
|
|
EOT
|
|
#
|
|
%if ! %{with mysql}
|
|
rm -f $RPM_BUILD_ROOT%{strongswan_templates}/database/sql/mysql.sql
|
|
%endif
|
|
%if ! %{with sqlite}
|
|
rm -f $RPM_BUILD_ROOT%{strongswan_templates}/database/sql/sqlite.sql
|
|
%endif
|
|
rm -f $RPM_BUILD_ROOT%{strongswan_libdir}/lib{charon,hydra,strongswan,pttls}.so
|
|
rm -f $RPM_BUILD_ROOT%{strongswan_libdir}/lib{radius,simaka,tls,tnccs,imcv}.so
|
|
find $RPM_BUILD_ROOT%{strongswan_libdir} -type f -name "*.la" -delete
|
|
#
|
|
install -d -m755 ${RPM_BUILD_ROOT}%{strongswan_docdir}/
|
|
install -c -m644 TODO NEWS README COPYING LICENSE \
|
|
AUTHORS ChangeLog \
|
|
${RPM_BUILD_ROOT}%{strongswan_docdir}/
|
|
install -c -m644 ${RPM_SOURCE_DIR}/README.SUSE \
|
|
${RPM_BUILD_ROOT}%{strongswan_docdir}/
|
|
%if %{with systemd}
|
|
%{__install} -d -m 0755 %{buildroot}%{_tmpfilesdir}
|
|
echo 'd %{_rundir}/%{name} 0770 root root' > %{buildroot}%{_tmpfilesdir}/%{name}.conf
|
|
%endif
|
|
%if %{with fipscheck}
|
|
#
|
|
# note: keep the following, _fipscheck's and file lists in sync
|
|
#
|
|
install -c -m750 _fipscheck ${RPM_BUILD_ROOT}%{_libexecdir}/ipsec/
|
|
install -c -m644 ${RPM_SOURCE_DIR}/fips-enforce.conf \
|
|
${RPM_BUILD_ROOT}%{strongswan_configs}/charon/zzz_fips-enforce.conf
|
|
# create fips hmac hashes _after_ install post run
|
|
%{expand:%%global __os_install_post {%__os_install_post
|
|
for f in $RPM_BUILD_ROOT%{strongswan_libdir}/lib*.so.*.*.* \
|
|
$RPM_BUILD_ROOT%{strongswan_libdir}/imcvs/*.so \
|
|
$RPM_BUILD_ROOT%{strongswan_plugins}/*.so \
|
|
$RPM_BUILD_ROOT%{_libexecdir}/ipsec/charon \
|
|
$RPM_BUILD_ROOT%{_libexecdir}/ipsec/charon-nm \
|
|
$RPM_BUILD_ROOT%{_libexecdir}/ipsec/stroke \
|
|
$RPM_BUILD_ROOT%{_libexecdir}/ipsec/starter \
|
|
$RPM_BUILD_ROOT%{_libexecdir}/ipsec/pool \
|
|
$RPM_BUILD_ROOT%{_libexecdir}/ipsec/scepclient \
|
|
$RPM_BUILD_ROOT%{_libexecdir}/ipsec/pt-tls-client \
|
|
$RPM_BUILD_ROOT%{_libexecdir}/ipsec/imv_policy_manager \
|
|
$RPM_BUILD_ROOT%{_libexecdir}/ipsec/_fipscheck \
|
|
$RPM_BUILD_ROOT%{_sbindir}/ipsec \
|
|
;
|
|
do
|
|
/usr/bin/fipshmac "$f"
|
|
done
|
|
}}
|
|
%endif
|
|
|
|
%post libs0
|
|
/sbin/ldconfig
|
|
%{?tmpfiles_create:%tmpfiles_create %{_tmpfilesdir}/%{name}.conf}
|
|
%{!?tmpfiles_create:test -d %{_rundir}/%{name} || %{__mkdir_p} %{_rundir}/%{name}}
|
|
|
|
%postun libs0 -p /sbin/ldconfig
|
|
|
|
%pre ipsec
|
|
%if %{with systemd}
|
|
%service_add_pre %{name}.service
|
|
%endif
|
|
|
|
%post ipsec
|
|
%if %{with systemd}
|
|
%service_add_post %{name}.service
|
|
%else
|
|
%{fillup_and_insserv ipsec}
|
|
%endif
|
|
|
|
%preun ipsec
|
|
%if %{with systemd}
|
|
%service_del_preun %{name}.service
|
|
%else
|
|
%{stop_on_removal ipsec}
|
|
%endif
|
|
if test -s %{_sysconfdir}/ipsec.secrets.rpmsave ; then
|
|
cp -p --backup=numbered %{_sysconfdir}/ipsec.secrets.rpmsave \
|
|
%{_sysconfdir}/ipsec.secrets.rpmsave.old
|
|
fi
|
|
if test -s %{_sysconfdir}/ipsec.conf.rpmsave ; then
|
|
cp -p --backup=numbered %{_sysconfdir}/ipsec.conf.rpmsave \
|
|
%{_sysconfdir}/ipsec.conf.rpmsave.old
|
|
fi
|
|
|
|
%postun ipsec
|
|
%if %{with systemd}
|
|
%service_del_postun %{name}.service
|
|
%else
|
|
%{insserv_cleanup}
|
|
%endif
|
|
|
|
%files
|
|
%defattr(-,root,root)
|
|
%dir %{strongswan_docdir}
|
|
%{strongswan_docdir}/README.SUSE
|
|
|
|
%if %{with fipscheck}
|
|
|
|
%files hmac
|
|
%defattr(-,root,root)
|
|
%dir %{strongswan_configs}
|
|
%dir %{strongswan_configs}/charon
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/zzz_fips-enforce.conf
|
|
%dir %{strongswan_libdir}
|
|
%{strongswan_libdir}/.*.hmac
|
|
%{strongswan_libdir}/imcvs/.*.hmac
|
|
%dir %{strongswan_plugins}
|
|
%{strongswan_plugins}/.*.hmac
|
|
%dir %{_libexecdir}/ipsec
|
|
%{_libexecdir}/ipsec/_fipscheck
|
|
%{_libexecdir}/ipsec/.*.hmac
|
|
%{_sbindir}/.ipsec.hmac
|
|
%endif
|
|
|
|
%files ipsec
|
|
%defattr(-,root,root)
|
|
%config(noreplace) %attr(600,root,root) %{_sysconfdir}/ipsec.conf
|
|
%config(noreplace) %attr(600,root,root) %{_sysconfdir}/ipsec.secrets
|
|
%config(noreplace) %attr(600,root,root) %{_sysconfdir}/swanctl/swanctl.conf
|
|
%dir %{_sysconfdir}/swanctl
|
|
%dir %{_sysconfdir}/ipsec.d
|
|
%dir %{_sysconfdir}/ipsec.d/crls
|
|
%dir %{_sysconfdir}/ipsec.d/reqs
|
|
%dir %{_sysconfdir}/ipsec.d/certs
|
|
%dir %{_sysconfdir}/ipsec.d/acerts
|
|
%dir %{_sysconfdir}/ipsec.d/aacerts
|
|
%dir %{_sysconfdir}/ipsec.d/cacerts
|
|
%dir %{_sysconfdir}/ipsec.d/ocspcerts
|
|
%dir %attr(700,root,root) %{_sysconfdir}/ipsec.d/private
|
|
%if %{with systemd}
|
|
%{_unitdir}/strongswan.service
|
|
%{_sysconfdir}/dbus-1/system.d/nm-strongswan-service.conf
|
|
%{_sbindir}/rcstrongswan
|
|
%else
|
|
%config %{_sysconfdir}/init.d/ipsec
|
|
%{_sbindir}/rcipsec
|
|
%endif
|
|
%{_bindir}/pki
|
|
%{_sbindir}/ipsec
|
|
%{_sbindir}/swanctl
|
|
%{_mandir}/man1/pki*.1*
|
|
%{_mandir}/man8/ipsec.8*
|
|
%{_mandir}/man5/ipsec.conf.5*
|
|
%{_mandir}/man5/ipsec.secrets.5*
|
|
%{_mandir}/man5/strongswan.conf.5*
|
|
%dir %{_libexecdir}/ipsec
|
|
%{_libexecdir}/ipsec/_copyright
|
|
%{_libexecdir}/ipsec/_updown
|
|
%if %{with test}
|
|
%{_libexecdir}/ipsec/conftest
|
|
%endif
|
|
%{_libexecdir}/ipsec/duplicheck
|
|
%{_libexecdir}/ipsec/pool
|
|
%{_libexecdir}/ipsec/pt-tls-client
|
|
%{_libexecdir}/ipsec/scepclient
|
|
%{_libexecdir}/ipsec/starter
|
|
%{_libexecdir}/ipsec/stroke
|
|
%{_libexecdir}/ipsec/charon
|
|
%{_libexecdir}/ipsec/_imv_policy
|
|
%{_libexecdir}/ipsec/imv_policy_manager
|
|
%dir %{strongswan_plugins}
|
|
%{strongswan_plugins}/libstrongswan-stroke.so
|
|
%{strongswan_plugins}/libstrongswan-updown.so
|
|
|
|
%files doc
|
|
%defattr(-,root,root)
|
|
%dir %{strongswan_docdir}
|
|
%{strongswan_docdir}/TODO
|
|
%{strongswan_docdir}/NEWS
|
|
%{strongswan_docdir}/README
|
|
%{strongswan_docdir}/COPYING
|
|
%{strongswan_docdir}/LICENSE
|
|
%{strongswan_docdir}/AUTHORS
|
|
%{strongswan_docdir}/ChangeLog
|
|
%{_mandir}/man8/scepclient.8*
|
|
%{_mandir}/man5/swanctl.conf.5.*
|
|
%{_mandir}/man8/swanctl.8.*
|
|
|
|
%files libs0
|
|
%defattr(-,root,root)
|
|
%if %{with systemd}
|
|
%{_tmpfilesdir}/%{name}.conf
|
|
%endif
|
|
%config(noreplace) %attr(600,root,root) %{_sysconfdir}/strongswan.conf
|
|
%dir %{strongswan_configs}
|
|
%dir %{strongswan_configs}/charon
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon-logging.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/imcv.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/pki.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/pool.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/scepclient.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/starter.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/tnc.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/swanctl.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/addrblock.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/aes.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/curve25519.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/vici.conf
|
|
%if %{with afalg}
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/af-alg.conf
|
|
%endif
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/agent.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/attr.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/attr-sql.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/blowfish.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/ccm.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/certexpire.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/cmac.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/constraints.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/coupling.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/ctr.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/curl.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/des.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/dhcp.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/dnskey.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/duplicheck.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-aka-3gpp2.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-aka.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-dynamic.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-gtc.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-identity.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-md5.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-mschapv2.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-peap.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-radius.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-simaka-pseudonym.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-simaka-reauth.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-simaka-sql.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-sim.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-sim-file.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-sim-pcsc.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-tls.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-tnc.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/eap-ttls.conf
|
|
%if %{with farp}
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/farp.conf
|
|
%endif
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/fips-prf.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/gcm.conf
|
|
%if %{with gcrypt}
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/gcrypt.conf
|
|
%endif
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/gmp.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/ha.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/hmac.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/kernel-netlink.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/ldap.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/led.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/md4.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/md5.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/nonce.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/openssl.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/pem.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/pgp.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/pkcs11.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/pkcs12.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/pkcs1.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/pkcs7.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/pkcs8.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/pubkey.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/radattr.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/random.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/rc2.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/resolve.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/revocation.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/sha1.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/sha2.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/smp.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/socket-default.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/soup.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/sql.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/sshkey.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/stroke.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/tnccs-11.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/tnccs-20.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/tnccs-dynamic.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/tnc-imc.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/tnc-imv.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/tnc-pdp.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/tnc-tnccs.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/unity.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/updown.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/x509.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/xauth-eap.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/xauth-generic.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/xauth-pam.conf
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/xcbc.conf
|
|
%dir %{strongswan_libdir}
|
|
%if %{with integrity}
|
|
%{strongswan_libdir}/libchecksum.so
|
|
%endif
|
|
%{strongswan_libdir}/libcharon.so.*
|
|
%{strongswan_libdir}/libtpmtss.so.*
|
|
%{strongswan_libdir}/libtpmtss.so
|
|
%{strongswan_libdir}/libvici.so
|
|
%{strongswan_libdir}/libvici.so.*
|
|
%{strongswan_libdir}/libpttls.so.*
|
|
%{strongswan_libdir}/libradius.so.*
|
|
%{strongswan_libdir}/libsimaka.so.*
|
|
%{strongswan_libdir}/libstrongswan.so.*
|
|
%{strongswan_libdir}/libtls.so.*
|
|
%{strongswan_libdir}/libtnccs.so.*
|
|
%{strongswan_libdir}/libimcv.so.*
|
|
%dir %{strongswan_libdir}/imcvs
|
|
%{strongswan_libdir}/imcvs/imc-scanner.so
|
|
%{strongswan_libdir}/imcvs/imc-test.so
|
|
%{strongswan_libdir}/imcvs/imv-scanner.so
|
|
%{strongswan_libdir}/imcvs/imv-test.so
|
|
%dir %{strongswan_plugins}
|
|
%{strongswan_plugins}/libstrongswan-addrblock.so
|
|
%{strongswan_plugins}/libstrongswan-aes.so
|
|
%if %{with afalg}
|
|
%{strongswan_plugins}/libstrongswan-af-alg.so
|
|
%endif
|
|
%{strongswan_plugins}/libstrongswan-agent.so
|
|
%{strongswan_plugins}/libstrongswan-attr.so
|
|
%{strongswan_plugins}/libstrongswan-attr-sql.so
|
|
%{strongswan_plugins}/libstrongswan-blowfish.so
|
|
%{strongswan_plugins}/libstrongswan-ccm.so
|
|
%{strongswan_plugins}/libstrongswan-certexpire.so
|
|
%{strongswan_plugins}/libstrongswan-cmac.so
|
|
%{strongswan_plugins}/libstrongswan-constraints.so
|
|
%{strongswan_plugins}/libstrongswan-coupling.so
|
|
%{strongswan_plugins}/libstrongswan-ctr.so
|
|
%{strongswan_plugins}/libstrongswan-curl.so
|
|
%{strongswan_plugins}/libstrongswan-des.so
|
|
%{strongswan_plugins}/libstrongswan-dhcp.so
|
|
%{strongswan_plugins}/libstrongswan-dnskey.so
|
|
%{strongswan_plugins}/libstrongswan-duplicheck.so
|
|
%{strongswan_plugins}/libstrongswan-eap-aka-3gpp2.so
|
|
%{strongswan_plugins}/libstrongswan-eap-aka.so
|
|
%{strongswan_plugins}/libstrongswan-eap-dynamic.so
|
|
%{strongswan_plugins}/libstrongswan-eap-gtc.so
|
|
%{strongswan_plugins}/libstrongswan-eap-identity.so
|
|
%{strongswan_plugins}/libstrongswan-eap-md5.so
|
|
%{strongswan_plugins}/libstrongswan-eap-mschapv2.so
|
|
%{strongswan_plugins}/libstrongswan-eap-peap.so
|
|
%{strongswan_plugins}/libstrongswan-eap-radius.so
|
|
%{strongswan_plugins}/libstrongswan-eap-sim-file.so
|
|
%{strongswan_plugins}/libstrongswan-eap-sim-pcsc.so
|
|
%{strongswan_plugins}/libstrongswan-eap-sim.so
|
|
%{strongswan_plugins}/libstrongswan-eap-simaka-pseudonym.so
|
|
%{strongswan_plugins}/libstrongswan-eap-simaka-reauth.so
|
|
%{strongswan_plugins}/libstrongswan-eap-simaka-sql.so
|
|
%{strongswan_plugins}/libstrongswan-eap-tls.so
|
|
%{strongswan_plugins}/libstrongswan-eap-tnc.so
|
|
%{strongswan_plugins}/libstrongswan-eap-ttls.so
|
|
%if %{with farp}
|
|
%{strongswan_plugins}/libstrongswan-farp.so
|
|
%endif
|
|
%{strongswan_plugins}/libstrongswan-fips-prf.so
|
|
%{strongswan_plugins}/libstrongswan-gcm.so
|
|
%if %{with gcrypt}
|
|
%{strongswan_plugins}/libstrongswan-gcrypt.so
|
|
%endif
|
|
%{strongswan_plugins}/libstrongswan-gmp.so
|
|
%{strongswan_plugins}/libstrongswan-ha.so
|
|
%{strongswan_plugins}/libstrongswan-hmac.so
|
|
%{strongswan_plugins}/libstrongswan-kernel-netlink.so
|
|
%{strongswan_plugins}/libstrongswan-ldap.so
|
|
%{strongswan_plugins}/libstrongswan-led.so
|
|
%{strongswan_plugins}/libstrongswan-md4.so
|
|
%{strongswan_plugins}/libstrongswan-md5.so
|
|
%{strongswan_plugins}/libstrongswan-nonce.so
|
|
%{strongswan_plugins}/libstrongswan-openssl.so
|
|
%{strongswan_plugins}/libstrongswan-pem.so
|
|
%{strongswan_plugins}/libstrongswan-pgp.so
|
|
%{strongswan_plugins}/libstrongswan-pkcs1.so
|
|
%{strongswan_plugins}/libstrongswan-pkcs11.so
|
|
%{strongswan_plugins}/libstrongswan-pkcs12.so
|
|
%{strongswan_plugins}/libstrongswan-pkcs7.so
|
|
%{strongswan_plugins}/libstrongswan-pkcs8.so
|
|
%{strongswan_plugins}/libstrongswan-pubkey.so
|
|
%{strongswan_plugins}/libstrongswan-radattr.so
|
|
%{strongswan_plugins}/libstrongswan-random.so
|
|
%{strongswan_plugins}/libstrongswan-rc2.so
|
|
%{strongswan_plugins}/libstrongswan-resolve.so
|
|
%{strongswan_plugins}/libstrongswan-revocation.so
|
|
%{strongswan_plugins}/libstrongswan-sha1.so
|
|
%{strongswan_plugins}/libstrongswan-sha2.so
|
|
%{strongswan_plugins}/libstrongswan-smp.so
|
|
%{strongswan_plugins}/libstrongswan-socket-default.so
|
|
%{strongswan_plugins}/libstrongswan-soup.so
|
|
%{strongswan_plugins}/libstrongswan-sql.so
|
|
%{strongswan_plugins}/libstrongswan-sshkey.so
|
|
%{strongswan_plugins}/libstrongswan-tnc-imc.so
|
|
%{strongswan_plugins}/libstrongswan-tnc-imv.so
|
|
%{strongswan_plugins}/libstrongswan-tnc-pdp.so
|
|
%{strongswan_plugins}/libstrongswan-tnc-tnccs.so
|
|
%{strongswan_plugins}/libstrongswan-tnccs-11.so
|
|
%{strongswan_plugins}/libstrongswan-tnccs-20.so
|
|
%{strongswan_plugins}/libstrongswan-tnccs-dynamic.so
|
|
%{strongswan_plugins}/libstrongswan-unity.so
|
|
%{strongswan_plugins}/libstrongswan-x509.so
|
|
%{strongswan_plugins}/libstrongswan-xauth-eap.so
|
|
%{strongswan_plugins}/libstrongswan-xauth-generic.so
|
|
%{strongswan_plugins}/libstrongswan-xauth-pam.so
|
|
%{strongswan_plugins}/libstrongswan-xcbc.so
|
|
%{strongswan_plugins}/libstrongswan-curve25519.so
|
|
%{strongswan_plugins}/libstrongswan-vici.so
|
|
%dir %{strongswan_datadir}
|
|
%dir %{strongswan_templates}
|
|
%dir %{strongswan_templates}/config
|
|
%dir %{strongswan_templates}/config/plugins
|
|
%dir %{strongswan_templates}/config/strongswan.d
|
|
%dir %{strongswan_templates}/database
|
|
%dir %{strongswan_templates}/database/imv
|
|
%dir %{strongswan_templates}/database/sql
|
|
%{strongswan_templates}/config/strongswan.conf
|
|
%{strongswan_templates}/config/plugins/addrblock.conf
|
|
%{strongswan_templates}/config/plugins/aes.conf
|
|
%if %{with afalg}
|
|
%{strongswan_templates}/config/plugins/af-alg.conf
|
|
%endif
|
|
%{strongswan_templates}/config/plugins/agent.conf
|
|
%{strongswan_templates}/config/plugins/attr-sql.conf
|
|
%{strongswan_templates}/config/plugins/attr.conf
|
|
%{strongswan_templates}/config/plugins/blowfish.conf
|
|
%{strongswan_templates}/config/plugins/ccm.conf
|
|
%{strongswan_templates}/config/plugins/certexpire.conf
|
|
%{strongswan_templates}/config/plugins/cmac.conf
|
|
%{strongswan_templates}/config/plugins/constraints.conf
|
|
%{strongswan_templates}/config/plugins/coupling.conf
|
|
%{strongswan_templates}/config/plugins/ctr.conf
|
|
%{strongswan_templates}/config/plugins/curl.conf
|
|
%{strongswan_templates}/config/plugins/des.conf
|
|
%{strongswan_templates}/config/plugins/dhcp.conf
|
|
%{strongswan_templates}/config/plugins/dnskey.conf
|
|
%{strongswan_templates}/config/plugins/duplicheck.conf
|
|
%{strongswan_templates}/config/plugins/eap-aka-3gpp2.conf
|
|
%{strongswan_templates}/config/plugins/eap-aka.conf
|
|
%{strongswan_templates}/config/plugins/eap-dynamic.conf
|
|
%{strongswan_templates}/config/plugins/eap-gtc.conf
|
|
%{strongswan_templates}/config/plugins/eap-identity.conf
|
|
%{strongswan_templates}/config/plugins/eap-md5.conf
|
|
%{strongswan_templates}/config/plugins/eap-mschapv2.conf
|
|
%{strongswan_templates}/config/plugins/eap-peap.conf
|
|
%{strongswan_templates}/config/plugins/eap-radius.conf
|
|
%{strongswan_templates}/config/plugins/eap-sim-file.conf
|
|
%{strongswan_templates}/config/plugins/eap-sim-pcsc.conf
|
|
%{strongswan_templates}/config/plugins/eap-sim.conf
|
|
%{strongswan_templates}/config/plugins/eap-simaka-pseudonym.conf
|
|
%{strongswan_templates}/config/plugins/eap-simaka-reauth.conf
|
|
%{strongswan_templates}/config/plugins/eap-simaka-sql.conf
|
|
%{strongswan_templates}/config/plugins/eap-tls.conf
|
|
%{strongswan_templates}/config/plugins/eap-tnc.conf
|
|
%{strongswan_templates}/config/plugins/eap-ttls.conf
|
|
%if %{with farp}
|
|
%{strongswan_templates}/config/plugins/farp.conf
|
|
%endif
|
|
%{strongswan_templates}/config/plugins/fips-prf.conf
|
|
%{strongswan_templates}/config/plugins/gcm.conf
|
|
%if %{with gcrypt}
|
|
%{strongswan_templates}/config/plugins/gcrypt.conf
|
|
%endif
|
|
%{strongswan_templates}/config/plugins/gmp.conf
|
|
%{strongswan_templates}/config/plugins/ha.conf
|
|
%{strongswan_templates}/config/plugins/hmac.conf
|
|
%{strongswan_templates}/config/plugins/kernel-netlink.conf
|
|
%{strongswan_templates}/config/plugins/ldap.conf
|
|
%{strongswan_templates}/config/plugins/led.conf
|
|
%{strongswan_templates}/config/plugins/md4.conf
|
|
%{strongswan_templates}/config/plugins/md5.conf
|
|
%{strongswan_templates}/config/plugins/nonce.conf
|
|
%{strongswan_templates}/config/plugins/openssl.conf
|
|
%{strongswan_templates}/config/plugins/pem.conf
|
|
%{strongswan_templates}/config/plugins/pgp.conf
|
|
%{strongswan_templates}/config/plugins/pkcs1.conf
|
|
%{strongswan_templates}/config/plugins/pkcs11.conf
|
|
%{strongswan_templates}/config/plugins/pkcs12.conf
|
|
%{strongswan_templates}/config/plugins/pkcs7.conf
|
|
%{strongswan_templates}/config/plugins/pkcs8.conf
|
|
%{strongswan_templates}/config/plugins/pubkey.conf
|
|
%{strongswan_templates}/config/plugins/radattr.conf
|
|
%{strongswan_templates}/config/plugins/random.conf
|
|
%{strongswan_templates}/config/plugins/rc2.conf
|
|
%{strongswan_templates}/config/plugins/resolve.conf
|
|
%{strongswan_templates}/config/plugins/revocation.conf
|
|
%{strongswan_templates}/config/plugins/sha1.conf
|
|
%{strongswan_templates}/config/plugins/sha2.conf
|
|
%{strongswan_templates}/config/plugins/smp.conf
|
|
%{strongswan_templates}/config/plugins/socket-default.conf
|
|
%{strongswan_templates}/config/plugins/soup.conf
|
|
%{strongswan_templates}/config/plugins/sql.conf
|
|
%{strongswan_templates}/config/plugins/sshkey.conf
|
|
%{strongswan_templates}/config/plugins/stroke.conf
|
|
%{strongswan_templates}/config/plugins/tnc-imc.conf
|
|
%{strongswan_templates}/config/plugins/tnc-imv.conf
|
|
%{strongswan_templates}/config/plugins/tnc-pdp.conf
|
|
%{strongswan_templates}/config/plugins/tnc-tnccs.conf
|
|
%{strongswan_templates}/config/plugins/tnccs-11.conf
|
|
%{strongswan_templates}/config/plugins/tnccs-20.conf
|
|
%{strongswan_templates}/config/plugins/tnccs-dynamic.conf
|
|
%{strongswan_templates}/config/plugins/unity.conf
|
|
%{strongswan_templates}/config/plugins/updown.conf
|
|
%{strongswan_templates}/config/plugins/x509.conf
|
|
%{strongswan_templates}/config/plugins/xauth-eap.conf
|
|
%{strongswan_templates}/config/plugins/xauth-generic.conf
|
|
%{strongswan_templates}/config/plugins/xauth-pam.conf
|
|
%{strongswan_templates}/config/plugins/xcbc.conf
|
|
%{strongswan_templates}/config/plugins/curve25519.conf
|
|
%{strongswan_templates}/config/plugins/vici.conf
|
|
%{strongswan_templates}/config/strongswan.d/charon-logging.conf
|
|
%{strongswan_templates}/config/strongswan.d/charon.conf
|
|
%{strongswan_templates}/config/strongswan.d/imcv.conf
|
|
%{strongswan_templates}/config/strongswan.d/pki.conf
|
|
%{strongswan_templates}/config/strongswan.d/pool.conf
|
|
%{strongswan_templates}/config/strongswan.d/scepclient.conf
|
|
%{strongswan_templates}/config/strongswan.d/starter.conf
|
|
%{strongswan_templates}/config/strongswan.d/tnc.conf
|
|
%{strongswan_templates}/config/strongswan.d/swanctl.conf
|
|
%{strongswan_templates}/database/imv/data.sql
|
|
%{strongswan_templates}/database/imv/tables.sql
|
|
|
|
%if %{with nm}
|
|
|
|
%files nm
|
|
%defattr(-,root,root)
|
|
%dir %{_libexecdir}/ipsec
|
|
%dir %{strongswan_plugins}
|
|
%{_libexecdir}/ipsec/charon-nm
|
|
%endif
|
|
|
|
%if %{with mysql}
|
|
|
|
%files mysql
|
|
%defattr(-,root,root)
|
|
%dir %{strongswan_libdir}
|
|
%dir %{strongswan_plugins}
|
|
%{strongswan_plugins}/libstrongswan-mysql.so
|
|
%dir %{strongswan_configs}
|
|
%dir %{strongswan_configs}/charon
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/mysql.conf
|
|
%dir %{strongswan_datadir}
|
|
%dir %{strongswan_templates}
|
|
%dir %{strongswan_templates}/config
|
|
%dir %{strongswan_templates}/config/plugins
|
|
%dir %{strongswan_templates}/database
|
|
%dir %{strongswan_templates}/database/sql
|
|
%{strongswan_templates}/config/plugins/mysql.conf
|
|
%{strongswan_templates}/database/imv/tables-mysql.sql
|
|
%{strongswan_templates}/database/sql/mysql.sql
|
|
%endif
|
|
|
|
%if %{with sqlite}
|
|
|
|
%files sqlite
|
|
%defattr(-,root,root)
|
|
%dir %{strongswan_libdir}
|
|
%dir %{strongswan_plugins}
|
|
%{strongswan_plugins}/libstrongswan-sqlite.so
|
|
%dir %{strongswan_configs}
|
|
%dir %{strongswan_configs}/charon
|
|
%config(noreplace) %attr(600,root,root) %{strongswan_configs}/charon/sqlite.conf
|
|
%dir %{strongswan_datadir}
|
|
%dir %{strongswan_templates}
|
|
%dir %{strongswan_templates}/config
|
|
%dir %{strongswan_templates}/config/plugins
|
|
%dir %{strongswan_templates}/database
|
|
%dir %{strongswan_templates}/database/sql
|
|
%{strongswan_templates}/config/plugins/sqlite.conf
|
|
%{strongswan_templates}/database/sql/sqlite.sql
|
|
%endif
|
|
|
|
%if %{with tests}
|
|
|
|
%files tests
|
|
%defattr(-,root,root)
|
|
%dir %{strongswan_configs}
|
|
%dir %{strongswan_configs}/charon
|
|
%{strongswan_configs}/charon/load-tester.conf
|
|
%{strongswan_configs}/charon/test-vectors.conf
|
|
%dir %{strongswan_templates}
|
|
%dir %{strongswan_templates}/config
|
|
%dir %{strongswan_templates}/config/plugins
|
|
%{strongswan_templates}/config/plugins/load-tester.conf
|
|
%{strongswan_templates}/config/plugins/test-vectors.conf
|
|
%dir %{_libexecdir}/ipsec
|
|
%{_libexecdir}/ipsec/conftest
|
|
%{_libexecdir}/ipsec/load-tester
|
|
%dir %{strongswan_libdir}
|
|
%dir %{strongswan_plugins}
|
|
%{strongswan_plugins}/libstrongswan-load-tester.so
|
|
%{strongswan_plugins}/libstrongswan-test-vectors.so
|
|
%endif
|
|
|
|
%changelog
|