| |
@@ -31,7 +31,7 @@
|
| |
Summary: Internet Key Exchange (IKEv1 and IKEv2) implementation for IPsec
|
| |
# version is generated in the release script
|
| |
Version: 4.12
|
| |
- Release: %{?prever:0.}1%{?prever:.%{prever}}%{?dist}
|
| |
+ Release: %{?prever:0.}2%{?prever:.%{prever}}%{?dist}
|
| |
# The code in lib/libswan/nss_copies.c is under MPL-2.0, while the
|
| |
# rest is under GPL-2.0-or-later
|
| |
License: GPL-2.0-or-later AND MPL-2.0
|
| |
@@ -104,6 +104,15 @@
|
| |
|
| |
Libreswan is based on Openswan-2.6.38 which in turn is based on FreeS/WAN-2.04
|
| |
|
| |
+ %package diagnostics
|
| |
+ Summary: Diagnostic scripts for %{name}
|
| |
+ Requires: %{name}%{?_isa} = %{version}-%{release}
|
| |
+ Supplements: %{name}
|
| |
+
|
| |
+ %description diagnostics
|
| |
+ The %{name}-diagnostics package contains scripts that give diagnostic
|
| |
+ on IPsec connections managed by %{name}.
|
| |
+
|
| |
%prep
|
| |
%{gpgverify} --keyring='%{SOURCE2}' --signature='%{SOURCE1}' --data='%{SOURCE0}'
|
| |
%setup -q -n libreswan-%{version}%{?prever}
|
| |
@@ -206,9 +215,22 @@
|
| |
%config(noreplace) %{_sysconfdir}/logrotate.d/libreswan
|
| |
%{_sbindir}/ipsec
|
| |
%{_libexecdir}/ipsec
|
| |
+ %exclude %{_libexecdir}/ipsec/show
|
| |
+ %exclude %{_libexecdir}/ipsec/verify
|
| |
%doc %{_mandir}/*/*
|
| |
+ %exclude %{_mandir}/man8/ipsec_show.*
|
| |
+ %exclude %{_mandir}/man8/ipsec_verify.*
|
| |
+
|
| |
+ %files diagnostics
|
| |
+ %{_libexecdir}/ipsec/show
|
| |
+ %{_libexecdir}/ipsec/verify
|
| |
+ %{_mandir}/man8/ipsec_show.*
|
| |
+ %{_mandir}/man8/ipsec_verify.*
|
| |
|
| |
%changelog
|
| |
+ * Tue Sep 5 2023 Daiki Ueno <dueno@redhat.com> - 4.12-2
|
| |
+ - Split Python scripts into a separate subpackage
|
| |
+
|
| |
* Fri Aug 11 2023 Paul Wouters <paul.wouters@aiven.io - 4.12-1
|
| |
- Update to 4.12 for CVE-2023-38710, CVE-2023-38711 and CVE-2023-38712
|
| |
- Resolves: rhbz#2230225 libreswan-4.12 is available
|
| |
ueno
commented 8 months ago
ipsec show/verify commands are written in Python, whose dependencies
are too huge to bring in on minimal installation. This splits the
package into two and moves those scripts into the -diagnostics
subpackage. Originally discussed on:
https://github.com/coreos/fedora-coreos-tracker/issues/1504
Signed-off-by: Daiki Ueno dueno@redhat.com