|
|
5994929 |
%define plugins down-root auth-pam
|
|
|
5994929 |
|
|
|
5994929 |
Name: openvpn
|
|
|
347a608 |
Version: 2.0.2
|
|
|
6f80732 |
Release: 1%{?dist}
|
|
|
5994929 |
Summary: A full-featured SSL VPN solution
|
|
|
5994929 |
URL: http://openvpn.net/
|
|
|
5994929 |
Source0: http://openvpn.net/release/%{name}-%{version}.tar.gz
|
|
|
5994929 |
Source1: http://openvpn.net/signatures/%{name}-%{version}.tar.gz.asc
|
|
|
5994929 |
# Sample 2.0 config files
|
|
|
5994929 |
Source2: roadwarrior-server.conf
|
|
|
5994929 |
Source3: roadwarrior-client.conf
|
|
|
5994929 |
# Don't start openvpn by default.
|
|
|
5994929 |
Patch0: openvpn-init.patch
|
|
|
5994929 |
License: GPL
|
|
|
5994929 |
Group: Applications/Internet
|
|
|
5994929 |
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-%(id -un)
|
|
|
5994929 |
BuildRequires: lzo-devel
|
|
|
5994929 |
BuildRequires: openssl-devel
|
|
|
5994929 |
BuildRequires: pam-devel
|
|
|
170f728 |
# We need /dev/net/tun.
|
|
|
170f728 |
# This will work with RH9+ dev or udev.
|
|
|
5994929 |
Requires: dev >= 0:3.3.2-5
|
|
|
5994929 |
Requires(pre): /usr/sbin/useradd
|
|
|
5994929 |
Requires(post): /sbin/chkconfig
|
|
|
5994929 |
Requires(preun): /sbin/chkconfig, /sbin/service
|
|
|
5994929 |
Requires(postun): /sbin/service
|
|
|
5994929 |
|
|
|
5994929 |
# Filter out the perl(Authen::PAM) dependency.
|
|
|
5994929 |
# No perl dependency is really needed at all.
|
|
|
5994929 |
%define __perl_requires sh -c 'cat > /dev/null'
|
|
|
5994929 |
|
|
|
5994929 |
%description
|
|
|
5994929 |
OpenVPN is a robust and highly flexible tunneling application that uses all
|
|
|
5994929 |
of the encryption, authentication, and certification features of the
|
|
|
5994929 |
OpenSSL library to securely tunnel IP networks over a single UDP or TCP
|
|
|
5994929 |
port. It can use the Marcus Franz Xaver Johannes Oberhumer's LZO library
|
|
|
5994929 |
for compression.
|
|
|
5994929 |
|
|
|
5994929 |
%prep
|
|
|
5994929 |
%setup -q -n %{name}-%{version}%{?prever:_%{prever}}
|
|
|
5994929 |
%patch0 -p0
|
|
|
170f728 |
sed -i -e 's,%{_datadir}/openvpn/plugin,%{_libdir}/openvpn/plugin,' openvpn.8
|
|
|
5994929 |
|
|
|
5994929 |
%build
|
|
|
5994929 |
# --enable-pthread Enable pthread support (Experimental for OpenVPN 2.0)
|
|
|
5994929 |
# --enable-password-save Allow --askpass and --auth-user-pass passwords to be
|
|
|
5994929 |
# read from a file
|
|
|
5994929 |
# --enable-iproute2 Enable support for iproute2
|
|
|
5994929 |
%configure --enable-pthread --enable-password-save --enable-iproute2
|
|
|
5994929 |
%{__make}
|
|
|
5994929 |
|
|
|
5994929 |
# Build plugins
|
|
|
5994929 |
for plugin in %{plugins} ; do
|
|
|
5994929 |
%{__make} -C plugin/$plugin
|
|
|
5994929 |
done
|
|
|
5994929 |
|
|
|
5994929 |
%check || :
|
|
|
5994929 |
# Test Crypto:
|
|
|
5994929 |
./openvpn --genkey --secret key
|
|
|
5994929 |
./openvpn --test-crypto --secret key
|
|
|
5994929 |
|
|
|
5994929 |
# Test SSL/TLS negotiations (runs for 2 minutes):
|
|
|
5994929 |
./openvpn --config sample-config-files/loopback-client &
|
|
|
5994929 |
./openvpn --config sample-config-files/loopback-server
|
|
|
5994929 |
wait
|
|
|
5994929 |
|
|
|
5994929 |
%install
|
|
|
5994929 |
rm -rf $RPM_BUILD_ROOT
|
|
|
5994929 |
|
|
|
5994929 |
install -D -m 0755 %{name}.8 $RPM_BUILD_ROOT%{_mandir}/man8/%{name}.8
|
|
|
5994929 |
install -D -m 0755 %{name} $RPM_BUILD_ROOT%{_sbindir}/%{name}
|
|
|
5994929 |
install -D -m 0755 sample-scripts/%{name}.init \
|
|
|
5994929 |
$RPM_BUILD_ROOT%{_initrddir}/%{name}
|
|
|
5994929 |
install -d -m 0755 $RPM_BUILD_ROOT%{_sysconfdir}/%{name}
|
|
|
5994929 |
|
|
|
5994929 |
mkdir -p $RPM_BUILD_ROOT%{_datadir}/%{name}
|
|
|
58a61c5 |
cp -pR easy-rsa $RPM_BUILD_ROOT%{_datadir}/%{name}/
|
|
|
170f728 |
rm -rf $RPM_BUILD_ROOT%{_datadir}/%{name}/easy-rsa/Windows
|
|
|
58a61c5 |
cp %{SOURCE2} %{SOURCE3} sample-config-files/
|
|
|
5994929 |
|
|
|
170f728 |
mkdir -p $RPM_BUILD_ROOT%{_libdir}/%{name}/plugin/lib
|
|
|
5994929 |
for plugin in %{plugins} ; do
|
|
|
5994929 |
install -m 0755 plugin/$plugin/openvpn-$plugin.so \
|
|
|
170f728 |
$RPM_BUILD_ROOT%{_libdir}/%{name}/plugin/lib/openvpn-$plugin.so
|
|
|
5994929 |
cp plugin/$plugin/README plugin/$plugin.txt
|
|
|
5994929 |
done
|
|
|
5994929 |
|
|
|
a1419ca |
mkdir -m 755 -p $RPM_BUILD_ROOT%{_var}/run/%{name}
|
|
|
a1419ca |
|
|
|
5994929 |
%clean
|
|
|
5994929 |
rm -rf $RPM_BUILD_ROOT
|
|
|
5994929 |
|
|
|
5994929 |
%pre
|
|
|
5994929 |
if ! id openvpn > /dev/null 2>&1 ; then
|
|
|
5994929 |
/usr/sbin/useradd -r -s /sbin/nologin -c OpenVPN -d /etc/openvpn openvpn
|
|
|
5994929 |
fi
|
|
|
5994929 |
|
|
|
5994929 |
%post
|
|
|
5994929 |
/sbin/chkconfig --add %{name}
|
|
|
5994929 |
|
|
|
5994929 |
%preun
|
|
|
5994929 |
if [ "$1" = 0 ]; then
|
|
|
5994929 |
/sbin/service %{name} stop
|
|
|
5994929 |
/sbin/chkconfig --del %{name}
|
|
|
5994929 |
fi
|
|
|
5994929 |
|
|
|
5994929 |
%postun
|
|
|
5994929 |
if [ "$1" -ge 1 ]; then
|
|
|
5994929 |
/sbin/service %{name} condrestart >/dev/null 2>&1
|
|
|
5994929 |
fi
|
|
|
5994929 |
|
|
|
5994929 |
%files
|
|
|
5994929 |
%defattr(-,root,root,0755)
|
|
|
5994929 |
%doc AUTHORS COPYING COPYRIGHT.GPL INSTALL PORTS README
|
|
|
5994929 |
# Add NEWS when it isn't zero-length.
|
|
|
5994929 |
%doc plugin/*.txt
|
|
|
58a61c5 |
%doc contrib sample-config-files sample-keys sample-scripts
|
|
|
5994929 |
%{_mandir}/man8/%{name}.8*
|
|
|
5994929 |
%{_sbindir}/%{name}
|
|
|
5994929 |
%{_datadir}/%{name}/
|
|
|
170f728 |
%{_libdir}/%{name}/
|
|
|
fdf2e0f |
%{_initrddir}/%{name}
|
|
|
a1419ca |
%{_var}/run/%{name}/
|
|
|
5994929 |
%config %dir %{_sysconfdir}/%{name}/
|
|
|
5994929 |
|
|
|
5994929 |
%changelog
|
|
|
347a608 |
* Thu Aug 25 2005 Steven Pritchard <steve@kspei.com> 2.0.2-1
|
|
|
347a608 |
- Update to 2.0.2
|
|
|
347a608 |
- Refine roadwarrior-server.conf a bit
|
|
|
347a608 |
|
|
|
6f80732 |
* Mon Aug 22 2005 Steven Pritchard <steve@kspei.com> 2.0.1-1
|
|
|
6f80732 |
- Update to 2.0.1
|
|
|
6f80732 |
|
|
|
170f728 |
* Mon Jun 27 2005 Steven Pritchard <steve@kspei.com> 2.0-2
|
|
|
170f728 |
- Move the plugin directory to _libdir
|
|
|
170f728 |
- Drop the easy-rsa/Windows directory
|
|
|
170f728 |
- Comment cleanups
|
|
|
170f728 |
- Add "processname" header to init script
|
|
|
fdf2e0f |
- The init script isn't a config file
|
|
|
58a61c5 |
- Tag contrib, sample-config-files, sample-keys, and sample-scripts as doc
|
|
|
a1419ca |
- Create/own pid dir
|
|
|
170f728 |
|
|
|
5994929 |
* Sat Jun 25 2005 Steven Pritchard <steve@kspei.com> 2.0-1
|
|
|
5994929 |
- Update to 2.0 final
|
|
|
5994929 |
- Drop Epoch: 0 and rebuild for Fedora Extras
|
|
|
5994929 |
|
|
|
5994929 |
* Wed Feb 16 2005 Steven Pritchard <steve@kspei.com> 0:2.0-0.fdr.0.14.rc13
|
|
|
5994929 |
- Fix/add paths to useradd
|
|
|
5994929 |
|
|
|
5994929 |
* Mon Feb 14 2005 Steven Pritchard <steve@kspei.com> 0:2.0-0.fdr.0.13.rc13
|
|
|
5994929 |
- Update to 2.0_rc13
|
|
|
5994929 |
- More spec cleanup (suggestions from Matthias Saou)
|
|
|
5994929 |
|
|
|
5994929 |
* Tue Feb 08 2005 Steven Pritchard <steve@kspei.com> 0:2.0-0.fdr.0.12.rc12
|
|
|
5994929 |
- Update to 2.0_rc12
|
|
|
5994929 |
- Small spec cleanups
|
|
|
5994929 |
- Drop perl auto-requirements entirely
|
|
|
5994929 |
|
|
|
5994929 |
* Mon Dec 20 2004 Steven Pritchard <steve@kspei.com> 0:2.0-0.fdr.0.11.rc6
|
|
|
5994929 |
- Add down-root and auth-pam plugins
|
|
|
5994929 |
- Add --enable-password-save and --enable-iproute2
|
|
|
5994929 |
- Add crypto and loopback tests (somewhat time-consuming)
|
|
|
5994929 |
|
|
|
5994929 |
* Thu Dec 16 2004 Steven Pritchard <steve@kspei.com> 0:2.0-0.fdr.0.10.rc5
|
|
|
5994929 |
- Update to 2.0_rc5
|
|
|
5994929 |
- Change the port to 1194 in the roadwarrior-*.conf samples
|
|
|
5994929 |
- Change openvpn-init.patch to reformat the description in the init script
|
|
|
5994929 |
- Modify the Summary and description (OpenVPN isn't UDP-only)
|
|
|
5994929 |
|
|
|
5994929 |
* Tue Dec 14 2004 Steven Pritchard <steve@kspei.com> 0:2.0-0.fdr.0.9.rc1
|
|
|
5994929 |
- Remove the perl(Authen::PAM) dependency
|
|
|
5994929 |
|
|
|
5994929 |
* Thu Dec 09 2004 Steven Pritchard <steve@kspei.com> 0:2.0-0.fdr.0.8.rc1
|
|
|
5994929 |
- Update to 2.0_rc1
|
|
|
5994929 |
|
|
|
5994929 |
* Tue Nov 16 2004 Steven Pritchard <steve@kspei.com> 0:2.0-0.fdr.0.7.beta17
|
|
|
5994929 |
- Update to 2.0_beta17
|
|
|
5994929 |
- Require dev instead of /dev/net/tun (for udev compatibility)
|
|
|
5994929 |
- Change openvpn-init.patch to match upstream (starts even earlier now)
|
|
|
5994929 |
|
|
|
5994929 |
* Wed Aug 04 2004 Steven Pritchard <steve@kspei.com> 0:2.0-0.fdr.0.6.beta10
|
|
|
5994929 |
- Remove unnecessary BuildRequires: kernel-headers
|
|
|
5994929 |
|
|
|
5994929 |
* Tue Aug 03 2004 Steven Pritchard <steve@kspei.com> 0:2.0-0.fdr.0.5.beta10
|
|
|
5994929 |
- Update to 2.0_beta10
|
|
|
5994929 |
- Minor fix to configuration example
|
|
|
5994929 |
- Change the init script to start a little earlier and stop much later
|
|
|
5994929 |
(after netfs) by default
|
|
|
5994929 |
- Remove a lot of unnecessary macro use (install/mkdir/cp)
|
|
|
5994929 |
- Don't create /dev/net/tun, use Requires instead
|
|
|
5994929 |
|
|
|
5994929 |
* Sat Jul 17 2004 Steven Pritchard <steve@kspei.com> 0:2.0-0.fdr.0.4.beta7
|
|
|
5994929 |
- Update to 2.0_beta7
|
|
|
5994929 |
- Include gpg signature in source rpm
|
|
|
5994929 |
- Include 2.0-style configuration examples
|
|
|
5994929 |
- Minor spec cleanup
|
|
|
5994929 |
|
|
|
5994929 |
* Wed Apr 28 2004 Steven Pritchard <steve@kspei.com> 0:2.0-0.fdr.0.3.test23
|
|
|
5994929 |
- Add openvpn-init.patch to leave the init script disabled by default
|
|
|
5994929 |
|
|
|
5994929 |
* Wed Apr 28 2004 Steven Pritchard <steve@kspei.com> 0:2.0-0.fdr.0.2.test23
|
|
|
5994929 |
- Fix URL and Source0
|
|
|
5994929 |
- Add an openvpn user
|
|
|
5994929 |
|
|
|
5994929 |
* Wed Apr 28 2004 Steven Pritchard <steve@kspei.com> 0:2.0-0.fdr.0.1.test23
|
|
|
5994929 |
- Update to 2.0_test23
|
|
|
5994929 |
- BuildRequires lzo-devel, kernel-headers, openssl-devel
|
|
|
5994929 |
- Lots of spec cleanup
|
|
|
5994929 |
|
|
|
5994929 |
* Sun Feb 23 2003 Matthias Andree <matthias.andree@gmx.de> 1.3.2.14-1
|
|
|
5994929 |
- Have the version number filled in by autoconf.
|
|
|
5994929 |
|
|
|
5994929 |
* Wed Jul 10 2002 James Yonan <jim@yonan.net> 1.3.1-1
|
|
|
5994929 |
- Fixed %preun to only remove service on final uninstall
|
|
|
5994929 |
|
|
|
5994929 |
* Mon Jun 17 2002 bishop clark (LC957) <bishop@platypus.bc.ca> 1.2.2-1
|
|
|
5994929 |
- Added condrestart to openvpn.spec & openvpn.init.
|
|
|
5994929 |
|
|
|
5994929 |
* Wed May 22 2002 James Yonan <jim@yonan.net> 1.2.0-1
|
|
|
5994929 |
- Added mknod for Linux 2.4.
|
|
|
5994929 |
|
|
|
5994929 |
* Wed May 15 2002 Doug Keller <dsk@voidstar.dyndns.org> 1.1.1.16-2
|
|
|
5994929 |
- Added init scripts
|
|
|
5994929 |
- Added conf file support
|
|
|
5994929 |
|
|
|
5994929 |
* Mon May 13 2002 bishop clark (LC957) <bishop@platypus.bc.ca> 1.1.1.14-1
|
|
|
5994929 |
- Added new directories for config examples and such
|
|
|
5994929 |
|
|
|
5994929 |
* Sun May 12 2002 bishop clark (LC957) <bishop@platypus.bc.ca> 1.1.1.13-1
|
|
|
5994929 |
- Updated buildroot directive and cleanup command
|
|
|
5994929 |
- added easy-rsa utilities
|
|
|
5994929 |
|
|
|
5994929 |
* Mon Mar 25 2002 bishop clark (LC957) <bishop@platypus.bc.ca> 1.0-1
|
|
|
5994929 |
- Initial build.
|