%define _hardened_build 1

#define prerelease rc22

# Build conditionals

# tests_long - Enabled by default, enables long running tests in %%check

%bcond_without tests_long

Name:              openvpn

Version:           2.4.1

Release:           3_scratch1%{?prerelease:.%{prerelease}}%{?dist}

Summary:           A full-featured SSL VPN solution

URL:               https://community.openvpn.net/

Source0:           https://swupdate.openvpn.org/community/releases/%{name}-%{version}%{?prerelease:_%{prerelease}}.tar.xz

Source1:           https://swupdate.openvpn.org/community/releases/%{name}-%{version}%{?prerelease:_%{prerelease}}.tar.xz.asc

Source2:           roadwarrior-server.conf

Source3:           roadwarrior-client.conf

Source4:           README.systemd

# Deprecated systemd unit file.  Will be removed in Fedora 27

Source5:           openvpn@.service

Patch0:            0001-workaround-Allow-weaker-RSA-keys-and-MD-algorithms-i.patch

License:           GPLv2

Group:             Applications/Internet

BuildRequires:     systemd-devel

BuildRequires:     lzo-devel

#BuildRequires:     openssl-devel

BuildRequires:     mbedtls-devel

BuildRequires:     pam-devel

# For the perl_default_filter macro

BuildRequires:     perl-macros

BuildRequires:     pkcs11-helper-devel >= 1.11

BuildRequires:     systemd-units

# For /sbin/ip.

BuildRequires:     iproute

# For /sbin/ip.

Requires:          iproute

Requires(pre):     /usr/sbin/useradd

Requires(post):    systemd-sysv

Requires(post):    systemd-units

Requires(preun):   systemd-units

Requires(postun):  systemd-units

# Filter out the perl(Authen::PAM) dependency.

# No perl dependency is really needed at all.

%{?perl_default_filter}

%description

OpenVPN is a robust and highly flexible tunneling application that uses all

of the encryption, authentication, and certification features of the

OpenSSL library to securely tunnel IP networks over a single UDP or TCP

port.  It can use the Marcus Franz Xaver Johannes Oberhumers LZO library

for compression.

%package devel

Group:             Applications/Internet

Summary:           Development headers and examples for OpenVPN plug-ins

%description devel

OpenVPN can be extended through the --plugin option, which provides

possibilities to add specialized authentication, user accounting,

packet filtering and related features.  These plug-ins need to be

written in C and provides a more low-level and information rich access

to similar features as the various script-hooks.

%prep

%setup -q -n %{name}-%{version}%{?prerelease:_%{prerelease}}

%patch0 -p1

sed -i -e 's,%{_datadir}/openvpn/plugin,%{_libdir}/openvpn/plugin,' doc/openvpn.8

# %%doc items shouldn't be executable.

find contrib sample -type f -perm /100 \

    -exec chmod a-x {} \;

%build

%configure \

    --enable-iproute2 \

    --with-crypto-library=mbedtls \

    --enable-selinux \

    --enable-systemd \

    --docdir=%{_pkgdocdir} \

    SYSTEMD_UNIT_DIR=%{_unitdir} \

    TMPFILES_DIR=%{_tmpfilesdir} \

    IPROUTE=/sbin/ip

#    --enable-pkcs11 \

%{__make}

%check

# Test Crypto:

./src/openvpn/openvpn --genkey --secret key

./src/openvpn/openvpn --test-crypto --secret key

%if %{with tests_long}

# Randomize ports for tests to avoid conflicts on the build servers.

cport=$[ 50000 + ($RANDOM % 15534) ]

sport=$[ $cport + 1 ]

sed -e 's/^\(rport\) .*$/\1 '$sport'/' \

    -e 's/^\(lport\) .*$/\1 '$cport'/' \

    < sample/sample-config-files/loopback-client \

    > %{_tmppath}/%{name}-%{version}-%{release}-%(%{__id_u})-loopback-client

sed -e 's/^\(rport\) .*$/\1 '$cport'/' \

    -e 's/^\(lport\) .*$/\1 '$sport'/' \

    < sample/sample-config-files/loopback-server \

    > %{_tmppath}/%{name}-%{version}-%{release}-%(%{__id_u})-loopback-server

pushd sample

# Test SSL/TLS negotiations (runs for 2 minutes):

../src/openvpn/openvpn --config \

    %{_tmppath}/%{name}-%{version}-%{release}-%(%{__id_u})-loopback-client &

../src/openvpn/openvpn --config \

    %{_tmppath}/%{name}-%{version}-%{release}-%(%{__id_u})-loopback-server

wait

popd

rm -f %{_tmppath}/%{name}-%{version}-%{release}-%(%{__id_u})-loopback-client \

    %{_tmppath}/%{name}-%{version}-%{release}-%(%{__id_u})-loopback-server

%endif

%install

%{__make} install DESTDIR=$RPM_BUILD_ROOT

find $RPM_BUILD_ROOT -name '*.la' | xargs rm -f

mkdir -p -m 0750 $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/client $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/server

cp %{SOURCE2} %{SOURCE3} sample/sample-config-files/

# DEPRECATED openvpn@.service ... this unit file will be removed in Fedora 27

install -D -m 0644 %{SOURCE5} $RPM_BUILD_ROOT%{_unitdir}/

# Package installs into %%{_pkgdocdir} directly

# Add further files

cp -a AUTHORS contrib sample %{SOURCE4} $RPM_BUILD_ROOT%{_pkgdocdir}

# Remove some files which does not really belong here

rm -f $RPM_BUILD_ROOT%{_pkgdocdir}/sample/Makefile{,.in,.am}

rm -f  $RPM_BUILD_ROOT%{_pkgdocdir}/contrib/multilevel-init.patch

rm -rf $RPM_BUILD_ROOT%{_pkgdocdir}/sample/sample-keys

rm -rf $RPM_BUILD_ROOT%{_pkgdocdir}/contrib/keychain-mcd

%pre

getent group openvpn &>/dev/null || groupadd -r openvpn

getent passwd openvpn &>/dev/null || \

    /usr/sbin/useradd -r -g openvpn -s /sbin/nologin -c OpenVPN \

        -d /etc/openvpn openvpn

%post

%systemd_post openvpn-client@\*.service

%systemd_post openvpn-server@\*.service

%preun

%systemd_preun openvpn-client@\*.service

%systemd_preun openvpn-server@\*.service

%postun

%systemd_postun openvpn-client@\*.service

%systemd_postun openvpn-server@\*.service

%files

%{_pkgdocdir}

%exclude %{_pkgdocdir}/README.IPv6

%exclude %{_pkgdocdir}/README.polarssl

%exclude %{_pkgdocdir}/sample/sample-plugins

%{_mandir}/man8/%{name}.8*

%{_sbindir}/%{name}

%{_libdir}/%{name}/

%{_unitdir}/%{name}@.service

%{_unitdir}/%{name}-client@.service

%{_unitdir}/%{name}-server@.service

%{_tmpfilesdir}/%{name}.conf

%config %dir %{_sysconfdir}/%{name}/

%config %dir %{_sysconfdir}/%{name}/client

%config %dir %{_sysconfdir}/%{name}/server

%files devel

%{_pkgdocdir}/sample/sample-plugins

%{_includedir}/openvpn-plugin.h

%{_includedir}/openvpn-msg.h

%changelog

* Thu Apr 20 2017 David Sommerseth <dazo@eurephia.org> - 2.4.1-3_scratch1

- Testing enabling MD5 certificate support (#1443749)

* Wed Mar 29 2017 David Sommerseth <dazo@eurephia.org> - 2.4.1-3

- Splitting out -devel files into a separate package

- Removed several contrib and sample files which makes is not

  strictly needed in this package.

- build: Enable tests runs by default, long running tests can

  be disabled with "--without tests_long"

- build: Removed defined %%{plugins} macro not in use

* Fri Mar 24 2017 David Sommerseth <dazo@eurephia.org> - 2.4.1-2

- Various cleanups

- Use systemd-rpm macros (rhbz#850257)

- Updated openvpn@.service to use Type=notify instead of Type=forking (rhbz#1435831)

  BEWARE: openvpn@.service is DEPRECATED.

- Added README.systemd describing new systemd unit files (openvpn-client/server@.service)

* Thu Mar 23 2017 David Sommerseth <dazo@eurephia.org> - 2.4.1-1

- Updating to upstream release, v2.4.1

- Added mbed TLS patch to allow RSA keys down to 1024 bits plus SHA1

  and RIPE-160 hasing algorithms (based on OpenVPN 3 legacy profile)

- Removed no-functional ./configure options

- Use upstream tmfiles.d/openvpn

- Package newer openvpn-client/server@.service unit files

* Thu Feb 09 2017 Jon Ciesla <limburgher@gmail.com> 2.4.0-2

- Move to mbedtls to resolve FTBFS.

- Dropped, re-add once openvpn supports openssl 1.1.x

-    --enable-pkcs11 \

-    --enable-x509-alt-username \

* Tue Dec 27 2016 Jon Ciesla <limburgher@gmail.com> 2.4.0-1

- 2.4.0.

* Wed Dec 07 2016 Jon Ciesla <limburgher@gmail.com> 2.3.14-1

- 2.3.14.

* Thu Nov 03 2016 Jon Ciesla <limburgher@gmail.com> 2.3.13-1

- 2.3.13.

* Tue Aug 23 2016 Jon Ciesla <limburgher@gmail.com> 2.3.12-1

- 2.3.12.

* Tue May 10 2016 Jon Ciesla <limburgher@gmail.com> 2.3.11-1

- 2.3.11.

* Thu Feb 04 2016 Fedora Release Engineering <releng@fedoraproject.org> - 2.3.10-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

* Mon Jan 04 2016 Jon Ciesla <limburgher@gmail.com> 2.3.10-1

- 2.3.10.

* Wed Dec 16 2015 Jon Ciesla <limburgher@gmail.com> 2.3.9-1

- 2.3.9.

* Tue Aug 04 2015 Jon Ciesla <limburgher@gmail.com> 2.3.8-1

- 2.3.8.

* Thu Jun 18 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.3.7-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

* Tue Jun 09 2015 Jon Ciesla <limburgher@gmail.com> 2.3.7-1

- 2.3.7, BZ 1229504.

* Fri Nov 21 2014 Ralf Corsépius <corsepiu@fedoraproject.org> - 2.3.5-2

- Rework package doc handling (RHBZ #1165004).

* Tue Oct 28 2014 Jon Ciesla <limburgher@gmail.com> 2.3.5-1

- 2.3.5.

* Tue Aug 26 2014 Jan Vcelak <jvcelak@fedoraproject.org> 2.3.4-4

- Enable systemd support.

* Sun Aug 17 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.3.4-3

- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.3.4-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

* Fri May 02 2014 Jon Ciesla <limburgher@gmail.com> 2.3.4-1

- 2.3.4.

- Disable make check until upstream provides non-md5 sample keys.

- Filed upstream https://community.openvpn.net/openvpn/ticket/400#ticket

* Fri Apr 11 2014 Jon Ciesla <limburgher@gmail.com> 2.3.3-1

- Latest uptream, needs pkcs11-helper >= 1.11

* Sun Jan 19 2014 Ville Skyttä <ville.skytta@iki.fi> - 2.3.2-5

- Don't order service after syslog.target.

* Thu Sep 12 2013 Jon Ciesla <limburgher@gmail.com> 2.3.2-4

- Enable --enable-x509-alt-username, BZ 1007184.

* Wed Aug 07 2013 Jon Ciesla <limburgher@gmail.com> 2.3.2-3

- Fix find syntax to fix FTBFS, BZ 992411.

* Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.3.2-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

* Mon Jun 03 2013 Jon Ciesla <limburgher@gmail.com> 2.3.2-1

- 2.3.2, BZ 970089.

* Thu May 16 2013 Jon Ciesla <limburgher@gmail.com> 2.3.1-4

- chmod -x .service, BZ 963914.

* Thu May 16 2013 Jon Ciesla <limburgher@gmail.com> 2.3.1-3

- Enable --enable-pkcs11, BZ 963868.

* Mon Apr 08 2013 Kalev Lember <kalevlember@gmail.com> 2.3.1-2

- Update perl requires filtering

* Tue Apr 02 2013 Jon Ciesla <limburgher@gmail.com> 2.3.1-1

- 2.3.1, BZ 929402.

* Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.3.0-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild

* Tue Jan 15 2013 Jon Ciesla <limburgher@gmail.com> 2.3.0-1

- 2.3.0, BZ 893700.

* Wed Sep 26 2012 Jon Ciesla <limburgher@gmail.com> 2.2.2-9

- Dropped net-tools, BZ 785794.

* Wed Sep 05 2012 Jon Ciesla <limburgher@gmail.com> 2.2.2-8

- Dropped config from tmpfiles conf.

* Wed Sep 05 2012 Jon Ciesla <limburgher@gmail.com> 2.2.2-7

- Fix tmpfiles location, BZ 840188.

- Fix run ownership, BZ 854440.

* Fri Jul 20 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.2-6

- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

* Thu Apr 12 2012 Jon Ciesla <limburgher@gmail.com> 2.2.2-5

- Add hardened build.

* Mon Feb 13 2012 Jon Ciesla <limburgher@gmail.com> 2.2.2-4

- Use PrivateTmp=true, BZ 782522.

* Wed Feb  8 2012 Kay Sievers <kay@redhat.com> - 2.2.2-3

- Drop dependency on 'dev' package; it is gone since many years

* Fri Jan 13 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.2-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild

* Fri Dec 23 2011 Jon Ciesla <limburgher@gmail.com> 2.2.2-1

- Update to 2.2.2.

* Fri Sep  9 2011 Tom Callaway <spot@fedoraproject.org> 2.2.1-2

- convert to systemd

* Fri Jul 08 2011 Jon Ciesla <limb@jcomserv.net> 2.2.1-1

- Update to 2.2.1.

* Fri Jun 17 2011 Jon Ciesla <limb@jcomserv.net> 2.2.0-2

- Bump and rebuild for BZ 712251.

* Thu May 19 2011 Jon Ciesla <limb@jcomserv.net> 2.2.0-1

- Update to 2.2.0.

* Thu Mar 17 2011 Jon Ciesla <limb@jcomserv.net> 2.1.4-1

- Update to 2.1.4.

* Tue Feb 08 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.3-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

* Thu Oct 07 2010 Jon Ciesla <limb@jcomserv.net> 2.1.3-1

- Update to 2.1.3.

* Thu Aug 19 2010 Steven Pritchard <steve@kspei.com> 2.1.2-1

- Update to 2.1.2.

* Mon Jan 04 2010 Jon Ciesla <limb@jcomserv.net> 2.1.1-2

- Fix init script *.sh sourcing, BZ 498348.

- Added init script info block, BZ 392991, BZ 541219.

* Fri Dec 11 2009 Steven Pritchard <steve@kspei.com> 2.1.1-1

- Update to 2.1.1.

* Sat Nov 21 2009 Steven Pritchard <steve@kspei.com> 2.1-0.39.rc22

- Update to 2.1_rc22.

* Thu Nov 12 2009 Steven Pritchard <steve@kspei.com> 2.1-0.38.rc21

- Update to 2.1_rc21.

* Sun Oct 25 2009 Robert Scheck <robert@fedoraproject.org> 2.1-0.37.rc20

- Added script_security initialisation in initscript (#458594 #c20)

* Fri Oct 02 2009 Steven Pritchard <steve@kspei.com> 2.1-0.36.rc20

- Update to 2.1_rc20.

* Sun Sep 06 2009 Kalev Lember <kalev@smartlink.ee> - 2.1-0.35.rc19

- Update to 2.1_rc19

- Build with pkcs11-helper

* Fri Aug 21 2009 Tomas Mraz <tmraz@redhat.com> - 2.1-0.34.rc15

- rebuilt with new openssl

* Sat Jul 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1-0.33.rc15

- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

* Thu Feb 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1-0.32.rc15

- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild

* Sat Jan 17 2009 Tomas Mraz <tmraz@redhat.com> 2.1-0.31.rc15

- rebuild with new openssl

* Thu Dec 11 2008 Steven Pritchard <steve@kspei.com> 2.1-0.30.rc15

- Attempt to fix BZ#476129.

* Sat Nov 29 2008 Robert Scheck <robert@fedoraproject.org> 2.1-0.29.rc15

- Update to 2.1_rc15

* Wed Aug 13 2008 Steven Pritchard <steve@kspei.com> 2.1-0.28.rc9

- Add "--script-security 2" by default for backwards compatibility

  (see bug #458594).

* Fri Aug 01 2008 Steven Pritchard <steve@kspei.com> 2.1-0.27.rc9

- Update to 2.1_rc9.

* Sat Jun 14 2008 Steven Pritchard <steve@kspei.com> 2.1-0.26.rc8

- Update to 2.1_rc8.

- Update License tag.

* Tue Feb 19 2008 Fedora Release Engineering <rel-eng@fedoraproject.org> - 2.1-0.25.rc7

- Autorebuild for GCC 4.3

* Tue Jan 29 2008 Steven Pritchard <steve@kspei.com> 2.1-0.24.rc7

- Update to 2.1_rc7

- Drop BETA21-userpriv-fixups.patch (upstream)

* Fri Jan 25 2008 Steven Pritchard <steve@kspei.com> 2.1-0.23.rc6

- Apply update to BETA21-userpriv-fixups.patch from Alon Bar-Lev

* Thu Jan 24 2008 Steven Pritchard <steve@kspei.com> 2.1-0.22.rc6

- Update to 2.1_rc6

- Pass paths to ifconfig, ip, and route to configure

- BR iproute and Require iproute and net-tools

- Add BETA21-userpriv-fixups.patch from Alon Bar-Lev

* Wed Jan 23 2008 Steven Pritchard <steve@kspei.com> 2.1-0.21.rc5

- Update to 2.1_rc5

* Wed Dec 05 2007 Steven Pritchard <steve@kspei.com> 2.1-0.20.rc4

- Remove check macro cruft.

* Thu Apr 26 2007 Steven Pritchard <steve@kspei.com> 2.1-0.19.rc4

- Update to 2.1_rc4

* Mon Apr 23 2007 Steven Pritchard <steve@kspei.com> 2.1-0.18.rc3

- Update to 2.1_rc3

* Fri Mar 02 2007 Steven Pritchard <steve@kspei.com> 2.1-0.17.rc2

- Update to 2.1_rc2

* Tue Feb 27 2007 Steven Pritchard <steve@kspei.com> 2.1-0.16.rc1

- Randomize ports for tests to avoid conflicts on the build servers

* Tue Feb 27 2007 Steven Pritchard <steve@kspei.com> 2.1-0.15.rc1

- Update to 2.1_rc1

* Mon Oct 02 2006 Steven Pritchard <steve@kspei.com> 2.1-0.14.beta16

- Update to 2.1_beta16

- Drop Paul's patch (in upstream)

* Tue Sep 12 2006 Steven Pritchard <steve@kspei.com> 2.1-0.13.beta15

- Update to 2.1_beta15

- Add openvpn-2.1_beta15-test-timeout.patch to avoid test hang

  (from Paul Howarth)

* Mon Aug 28 2006 Steven Pritchard <steve@kspei.com> 2.1-0.12.beta14

- Rebuild

* Mon Jul 31 2006 Steven Pritchard <steve@kspei.com> 2.1-0.11.beta14

- Rebuild

* Fri Apr 14 2006 Steven Pritchard <steve@kspei.com> 2.1-0.10.beta14

- Update to 2.1_beta14

* Wed Apr 12 2006 Steven Pritchard <steve@kspei.com> 2.1-0.9.beta13

- Update to 2.1_beta13

* Wed Apr 05 2006 Steven Pritchard <steve@kspei.com> 2.1-0.8.beta12

- Update to 2.1_beta12 (BZ#188050/CVE-2006-1629)

* Tue Feb 21 2006 Steven Pritchard <steve@kspei.com> 2.1-0.7.beta11

- Update to 2.1_beta11

* Tue Feb 14 2006 Steven Pritchard <steve@kspei.com> 2.1-0.6.beta8

- Update to 2.1_beta8

* Wed Jan 04 2006 Steven Pritchard <steve@kspei.com> 2.1-0.5.beta7

- Man page shouldn't be executable (BZ#176953)

* Tue Dec 06 2005 Steven Pritchard <steve@kspei.com> 2.1-0.4.beta7

- Rebuild

* Fri Nov 18 2005 Steven Pritchard <steve@kspei.com> 2.1-0.3.beta7

- Update to 2.1_beta7

* Tue Nov 08 2005 Steven Pritchard <steve@kspei.com> 2.1-0.2.beta6

- Make sample-scripts (etc.) non-executable to avoid some dependencies

* Wed Nov 02 2005 Steven Pritchard <steve@kspei.com> 2.1-0.1.beta6

- Update to 2.1_beta6

* Mon Oct 17 2005 Steven Pritchard <steve@kspei.com> 2.1-0.1.beta4

- Update to 2.1_beta4

* Thu Aug 25 2005 Steven Pritchard <steve@kspei.com> 2.0.2-1

- Update to 2.0.2

- Refine roadwarrior-server.conf a bit

* Mon Aug 22 2005 Steven Pritchard <steve@kspei.com> 2.0.1-1

- Update to 2.0.1

* Mon Jun 27 2005 Steven Pritchard <steve@kspei.com> 2.0-2

- Move the plugin directory to _libdir

- Drop the easy-rsa/Windows directory

- Comment cleanups

- Add "processname" header to init script

- The init script isn't a config file

- Tag contrib, sample-config-files, sample-keys, and sample-scripts as doc

- Create/own pid dir

* Sat Jun 25 2005 Steven Pritchard <steve@kspei.com> 2.0-1

- Update to 2.0 final

- Drop Epoch: 0 and rebuild for Fedora Extras

* Wed Feb 16 2005 Steven Pritchard <steve@kspei.com> 0:2.0-0.fdr.0.14.rc13

- Fix/add paths to useradd

* Mon Feb 14 2005 Steven Pritchard <steve@kspei.com> 0:2.0-0.fdr.0.13.rc13

- Update to 2.0_rc13

- More spec cleanup (suggestions from Matthias Saou)

* Tue Feb 08 2005 Steven Pritchard <steve@kspei.com> 0:2.0-0.fdr.0.12.rc12

- Update to 2.0_rc12

- Small spec cleanups

- Drop perl auto-requirements entirely

* Mon Dec 20 2004 Steven Pritchard <steve@kspei.com> 0:2.0-0.fdr.0.11.rc6

- Add down-root and auth-pam plugins

- Add --enable-password-save and --enable-iproute2

- Add crypto and loopback tests (somewhat time-consuming)

* Thu Dec 16 2004 Steven Pritchard <steve@kspei.com> 0:2.0-0.fdr.0.10.rc5

- Update to 2.0_rc5

- Change the port to 1194 in the roadwarrior-*.conf samples

- Change openvpn-init.patch to reformat the description in the init script

- Modify the Summary and description (OpenVPN isn't UDP-only)

* Tue Dec 14 2004 Steven Pritchard <steve@kspei.com> 0:2.0-0.fdr.0.9.rc1

- Remove the perl(Authen::PAM) dependency

* Thu Dec 09 2004 Steven Pritchard <steve@kspei.com> 0:2.0-0.fdr.0.8.rc1

- Update to 2.0_rc1

* Tue Nov 16 2004 Steven Pritchard <steve@kspei.com> 0:2.0-0.fdr.0.7.beta17

- Update to 2.0_beta17

- Require dev instead of /dev/net/tun (for udev compatibility)

- Change openvpn-init.patch to match upstream (starts even earlier now)

* Wed Aug 04 2004 Steven Pritchard <steve@kspei.com> 0:2.0-0.fdr.0.6.beta10

- Remove unnecessary BuildRequires: kernel-headers

* Tue Aug 03 2004 Steven Pritchard <steve@kspei.com> 0:2.0-0.fdr.0.5.beta10

- Update to 2.0_beta10

- Minor fix to configuration example

- Change the init script to start a little earlier and stop much later

  (after netfs) by default

- Remove a lot of unnecessary macro use (install/mkdir/cp)

- Don't create /dev/net/tun, use Requires instead

* Sat Jul 17 2004 Steven Pritchard <steve@kspei.com> 0:2.0-0.fdr.0.4.beta7

- Update to 2.0_beta7

- Include gpg signature in source rpm

- Include 2.0-style configuration examples

- Minor spec cleanup

* Wed Apr 28 2004 Steven Pritchard <steve@kspei.com> 0:2.0-0.fdr.0.3.test23

- Add openvpn-init.patch to leave the init script disabled by default

* Wed Apr 28 2004 Steven Pritchard <steve@kspei.com> 0:2.0-0.fdr.0.2.test23

- Fix URL and Source0

- Add an openvpn user

* Wed Apr 28 2004 Steven Pritchard <steve@kspei.com> 0:2.0-0.fdr.0.1.test23

- Update to 2.0_test23

- BuildRequires lzo-devel, kernel-headers, openssl-devel

- Lots of spec cleanup

* Sun Feb 23 2003 Matthias Andree <matthias.andree@gmx.de> 1.3.2.14-1

- Have the version number filled in by autoconf.

* Wed Jul 10 2002 James Yonan <jim@yonan.net> 1.3.1-1

- Fixed %%preun to only remove service on final uninstall

* Mon Jun 17 2002 bishop clark (LC957) <bishop@platypus.bc.ca> 1.2.2-1

- Added condrestart to openvpn.spec & openvpn.init.

* Wed May 22 2002 James Yonan <jim@yonan.net> 1.2.0-1

- Added mknod for Linux 2.4.

* Wed May 15 2002 Doug Keller <dsk@voidstar.dyndns.org> 1.1.1.16-2

- Added init scripts

- Added conf file support

* Mon May 13 2002 bishop clark (LC957) <bishop@platypus.bc.ca> 1.1.1.14-1

- Added new directories for config examples and such

* Sun May 12 2002 bishop clark (LC957) <bishop@platypus.bc.ca> 1.1.1.13-1

- Updated buildroot directive and cleanup command

- added easy-rsa utilities

* Mon Mar 25 2002 bishop clark (LC957) <bishop@platypus.bc.ca> 1.0-1

- Initial build.