38e97b0
%global commit 5619e1771048e74b729804e8602f409af0f3faea
f526fca
bdc734d
Summary: Layer 2 Tunnelling Protocol Daemon (RFC 2661)
bdc734d
Name: xl2tpd
c748ec9
Version: 1.3.8
f60905f
Release: 7%{?dist}
333859d
License: GPL+
c748ec9
Url: https://github.com/xelerance/xl2tpd/
bdc734d
Group: System Environment/Daemons
c748ec9
# upstream isn't using proper names, we manually rename v-VERSION.tar.gz to xl2tpd-VERSION.tar.gz
c748ec9
Source0: https://github.com/xelerance/xl2tpd/archive/xl2tpd-%{version}.tar.gz
23c5a05
Source1: xl2tpd.service
23c5a05
Source2: tmpfiles-xl2tpd.conf
38e97b0
Patch1: xl2tpd-1.3.6-conf.patch
c748ec9
Patch2: xl2tpd-1.3.8-md5-fips.patch
c748ec9
Patch3: xl2tpd-1.3.8-saref.patch
c748ec9
Patch4: xl2tpd-1.3.8-kernelmode.patch
7484353
109565d
Requires: ppp >= 2.4.5-18, kmod(l2tp_ppp.ko)
c23582b
# If you want to authenticate against a Microsoft PDC/Active Directory
c23582b
# Requires: samba-winbind
f89a0cf
BuildRequires: libpcap-devel
23c5a05
BuildRequires: systemd-units
6c8bb05
BuildRequires: openssl-devel
d374fe8
Requires(post): systemd
d374fe8
Requires(preun): systemd
d374fe8
Requires(postun): systemd
c3b7e51
# dnf resolving prefers kernel-debug-modules-extra over kernel-modules-extra
c3b7e51
Suggests: kernel-modules-extra
bdc734d
bdc734d
%description
bdc734d
xl2tpd is an implementation of the Layer 2 Tunnelling Protocol (RFC 2661).
bdc734d
L2TP allows you to tunnel PPP over UDP. Some ISPs use L2TP to tunnel user
bdc734d
sessions from dial-in servers (modem banks, ADSL DSLAMs) to back-end PPP
bdc734d
servers. Another important application is Virtual Private Networks where
bdc734d
the IPsec protocol is used to secure the L2TP connection (L2TP/IPsec,
c748ec9
RFC 3193). The L2TP/IPsec protocol is mainly used by Windows and
bdc734d
Mac OS X clients. On Linux, xl2tpd can be used in combination with IPsec
bdc734d
implementations such as Openswan.
bdc734d
Example configuration files for such a setup are included in this RPM.
bdc734d
bdc734d
xl2tpd works by opening a pseudo-tty for communicating with pppd.
bdc734d
It runs completely in userspace.
bdc734d
f89a0cf
xl2tpd supports IPsec SA Reference tracking to enable overlapping internak
f89a0cf
NAT'ed IP's by different clients (eg all clients connecting from their
f89a0cf
linksys internal IP 192.168.1.101) as well as multiple clients behind
f89a0cf
the same NAT router.
f89a0cf
f89a0cf
xl2tpd supports the pppol2tp kernel mode operations on 2.6.23 or higher,
f89a0cf
or via a patch in contrib for 2.4.x kernels.
f89a0cf
f89a0cf
Xl2tpd is based on the 0.69 L2TP by Jeff McAdams <jeffm@iglou.com>
f89a0cf
It was de-facto maintained by Jacco de Leeuw <jacco2@dds.nl> in 2002 and 2003.
bdc734d
bdc734d
%prep
c748ec9
%setup
c748ec9
%patch1 -p1
bd5a80d
%patch2 -p1
9f28c44
%patch3 -p1
c748ec9
%patch4 -p1
bdc734d
bdc734d
%build
Paul Wouters b779b0c
#make DFLAGS="$RPM_OPT_FLAGS -g -DDEBUG_HELLO -DDEBUG_CLOSE -DDEBUG_FLOW -DDEBUG_PAYLOAD -DDEBUG_CONTROL -DDEBUG_CONTROL_XMIT -DDEBUG_FLOW_MORE -DDEBUG_MAGIC -DDEBUG_ENTROPY -DDEBUG_HIDDEN -DDEBUG_PPPD -DDEBUG_AAA -DDEBUG_FILE -DDEBUG_FLOW -DDEBUG_HELLO -DDEBUG_CLOSE -DDEBUG_ZLB -DDEBUG_AUTH"
7484353
35b1059
export CFLAGS="$CFLAGS -fPIC -Wall -DTRUST_PPPD_TO_DIE"
7484353
export DFLAGS="$RPM_OPT_FLAGS -g "
7484353
export LDFLAGS="$LDFLAGS -pie -Wl,-z,relro -Wl,-z,now"
35b1059
make
bdc734d
bdc734d
%install
bdc734d
rm -rf %{buildroot}
f89a0cf
make DESTDIR=%{buildroot} PREFIX=%{_prefix} install
23c5a05
install -d 0755 %{buildroot}%{_unitdir}
23c5a05
install -m 0644 %{SOURCE1} %{buildroot}%{_unitdir}/xl2tpd.service
38e97b0
mkdir -p %{buildroot}%{_prefix}/lib/tmpfiles.d/
38e97b0
install -m 0644 %{SOURCE2} %{buildroot}%{_prefix}/lib/tmpfiles.d/%{name}.conf
23c5a05
97dafa0
install -p -D -m644 examples/xl2tpd.conf %{buildroot}%{_sysconfdir}/xl2tpd/xl2tpd.conf
97dafa0
install -p -D -m644 examples/ppp-options.xl2tpd %{buildroot}%{_sysconfdir}/ppp/options.xl2tpd
97dafa0
install -p -D -m600 doc/l2tp-secrets.sample %{buildroot}%{_sysconfdir}/xl2tpd/l2tp-secrets
97dafa0
install -p -D -m600 examples/chapsecrets.sample %{buildroot}%{_sysconfdir}/ppp/chap-secrets.sample
b7229a8
install -p -D -m755 -d %{buildroot}%{_localstatedir}/run/xl2tpd
97dafa0
bdc734d
%preun
d374fe8
%systemd_preun xl2tpd.service
38e97b0
d374fe8
%post
d374fe8
%systemd_post xl2tpd.service
bdc734d
bdc734d
%postun
c748ec9
%systemd_postun_with_restart xl2tpd.service
bdc734d
23c5a05
%triggerun -- xl2td < 1.3.1-3
23c5a05
# Save the current service runlevel info
23c5a05
# User must manually run systemd-sysv-convert --apply xl2tpd
23c5a05
# to migrate them to systemd targets
23c5a05
/usr/bin/systemd-sysv-convert --save xl2tpd >/dev/null 2>&1 ||:
23c5a05
# Run these because the SysV package being removed won't do them
23c5a05
/sbin/chkconfig --del xl2tpd >/dev/null 2>&1 || :
23c5a05
/bin/systemctl try-restart xl2tpd.service >/dev/null 2>&1 || :
23c5a05
bdc734d
%files
c748ec9
%doc BUGS CHANGES CREDITS LICENSE README.* TODO
bdc734d
%doc doc/README.patents examples/chapsecrets.sample
bdc734d
%{_sbindir}/xl2tpd
Paul Wouters 24be306
%{_sbindir}/xl2tpd-control
f89a0cf
%{_bindir}/pfc
bdc734d
%{_mandir}/*/*
bdc734d
%dir %{_sysconfdir}/xl2tpd
bdc734d
%config(noreplace) %{_sysconfdir}/xl2tpd/*
bdc734d
%config(noreplace) %{_sysconfdir}/ppp/*
23c5a05
%dir %{_localstatedir}/run/xl2tpd
23c5a05
%{_unitdir}/%{name}.service
38e97b0
%{_prefix}/lib/tmpfiles.d/%{name}.conf
Paul Wouters 3ad4da4
%ghost %attr(0600,root,root) %{_localstatedir}/run/xl2tpd/l2tp-control
bdc734d
bdc734d
%changelog
f60905f
* Sun Apr 01 2018 Paul Wouters <pwouters@redhat.com> - 1.3.8-7
f60905f
- Resolves: rhbz#1562512 kernels 4.15 and 4.16 break xl2tpd
f60905f
cfcbc4e
* Fri Feb 09 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.3.8-6
cfcbc4e
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
cfcbc4e
9d289c2
* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.3.8-5
9d289c2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
9d289c2
cf7fbba
* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.3.8-4
cf7fbba
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
cf7fbba
d0eaf84
* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.3.8-3
d0eaf84
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
d0eaf84
c3b7e51
* Sun Jan 15 2017 Paul Wouters <pwouters@redhat.com> - 1.3.8-2
c3b7e51
- Very reluctantly add a Suggests: tag to work around dnf/kernel bug
c3b7e51
- Resolves: rhbz#1192189 Both kernel-debug-core and kernel-core are installed
c3b7e51
c748ec9
* Wed Aug 24 2016 Paul Wouters <pwouters@redhat.com> - 1.3.8-1
c748ec9
- Upgraded to 1.3.8 and updated existing patches still required
c748ec9
- Fix kernel mode breaking the closing tunnels
c748ec9
1f2b384
* Fri Feb 05 2016 Fedora Release Engineering <releng@fedoraproject.org> - 1.3.6-10
1f2b384
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
1f2b384
fcee1ba
* Fri Jun 19 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.6-9
fcee1ba
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
fcee1ba
f8e62d6
* Tue Mar 31 2015 Paul Wouters <pwouters@redhat.com> - 1.3.6-8
f8e62d6
- Bump EVR
f8e62d6
35b1059
* Tue Mar 31 2015 Paul Wouters <pwouters@redhat.com> - 1.3.6-7
35b1059
- Rebuild with -DTRUST_PPPD_TO_DIE so pppd will execute its down script
35b1059
ddc290b
* Thu Aug 21 2014 Kevin Fenzi <kevin@scrye.com> - 1.3.6-6
ddc290b
- Rebuild for rpm bug 1131960
ddc290b
8ad9760
* Mon Aug 18 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.6-5
8ad9760
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
8ad9760
9f28c44
* Sat Jun 14 2014 Paul Wouters <pwouters@redhat.com> - 1.3.6-4
9f28c44
- Resolves rhbz#1109470 l2tpd/ipsec breaks when "ipsec saref" not set
9f28c44
0781e90
* Sun Jun 08 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.6-3
0781e90
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
0781e90
109565d
* Wed May 14 2014 Josh Boyer <jwboyer@fedoraproject.org>
109565d
- Switch to using Requires on individual kernel modules
109565d
- Resolves rhbz#1056192
109565d
38e97b0
* Tue May 13 2014 Paul Wouters <pwouters@redhat.com> - 1.3.6-1
38e97b0
- Updated to 1.3.6 - using github-only monstrosity packaging
38e97b0
- Resolves: rhbz#1051785 (new upstream version available)
38e97b0
- Resolves: rhbz#868391 xl2tpd sends response packets from wrong IP address
38e97b0
- Revert: rhbz#929447 Incorrect "ipparam" manipulation
38e97b0
- Resolves: rhbz#1055196 Don't order service after syslog.target
38e97b0
- Resolves: rhbz#984332 xl2tpd tmpfiles configuration file in wrong directory
38e97b0
- Removed patches merged in upstream.
38e97b0
- FIPS patch updated with advertising clause for openssl in xl2tpd -V
38e97b0
  (although the GPL code was already basically taken from openssl)
38e97b0
19afcbe
* Sun Aug 04 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.1-14
19afcbe
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
19afcbe
6c8bb05
* Mon Apr 01 2013 Paul Wouters <pwouters@redhat.com> - 1.3.1-13
f526fca
- rhbz#929447 - Fix ipparam so ipv6-up does not fail (Michal Bruncko)
d374fe8
- rhbz#850372 - Introduce new systemd-rpm macros in xl2tpd spec file
6c8bb05
- Use relro,pie for compiling
10d9b5b
- rhbz#947209 - Use openssl's MD5 function instead of private copy
10d9b5b
  (so FIPS restrictions work)
f526fca
e64160b
* Fri Feb 15 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.1-11
e64160b
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
e64160b
c23582b
* Thu Jul 19 2012 Paul Wouters <pwouters@redhat.com> - 1.3.1-10
c23582b
- Updated comments in config files on how to authenticate against
c23582b
  a Windows PDC / Active Directory
c23582b
2dae248
* Tue Jul 03 2012 Paul Wouters <pwouters@redhat.com> - 1.3.1-9
2dae248
- Rename non-existing openswan.service to ipsec.service (rhbz#836783)
2dae248
- Start after ipsec.service, but do not require it
2dae248
66109b0
* Tue Jun 26 2012 Paul Wouters <pwouters@redhat.com> - 1.3.1-8
66109b0
- The l2tp_ppp kernel module is now in kernel-module-extra
5f8afd6
  (rhbz#832149)
66109b0
- Don't insist on openswan, some ISPS use L2TP without IPsec
66109b0
- Don't call grantpt(), it's not needed and triggers SElinux
66109b0
  block (rhbz#834861)
66109b0
Paul Wouters c73b62e
* Fri Jun 15 2012 Paul Wouters <pwouters@redhat.com> - 1.3.1-7
Paul Wouters c73b62e
- Moved modprobe code from daemon to initscript/systemd
Paul Wouters c73b62e
  (SElinux does not allow a daemon to do this, see rhbz#832149)
Paul Wouters c73b62e
Paul Wouters 56764a9
* Tue Jun 12 2012 Paul Wouters <pwouters@redhat.com> - 1.3.1-6
Paul Wouters 56764a9
- Added patch for xl2tpd.conf to improve interop settings
Paul Wouters 56764a9
  (no longer need to say "no encryption" on Windows)
Paul Wouters d63dbfa
- Improved patch, more doc fixed (esp. "force userspace" option)
Paul Wouters d63dbfa
- don't use old version of if_pppol2tp.h
Paul Wouters 56764a9
8ecc1e5
* Wed Apr 18 2012 Paul Wouters <pwouters@redhat.com> - 1.3.1-5
8ecc1e5
- Added support for CONFIG_PPPOL2TP by sigwall <fionov@gmail.com>
8ecc1e5
- Require current ppp because some old versions lacked pppol2tp.so plugin
8ecc1e5
bd5a80d
* Thu Apr 05 2012 Paul Wouters <pwouters@redhat.com> - 1.3.1-4
bd5a80d
- Fix parse error on lines > 80 chars, rhbz#806963
bd5a80d
23c5a05
* Tue Feb 28 2012 Paul Wouters <pwouters@redhat.com> - 1.3.1-3
23c5a05
- Converted to systemd
23c5a05
- Added -Wunused patch to fix two minor warnings
23c5a05
76d8d21
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.3.1-2
76d8d21
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
76d8d21
Paul Wouters 6b76eb0
* Thu Oct 06 2011 Paul Wouters <paul@xelerance.com> - 1.3.1-1
Paul Wouters 6b76eb0
- Upgraded to 1.3.1
Paul Wouters 6b76eb0
- Use ghost for /var/run files
Paul Wouters 6b76eb0
Paul Wouters b779b0c
* Sat Jul 23 2011 Paul Wouters <paul@xelerance.com> - 1.3.0-1
Paul Wouters b779b0c
- Upgraded to 1.3.0 with better NetworkManager support
Paul Wouters b779b0c
- Compiled without DEBUG per default to gain more performance
Paul Wouters 24be306
- Added xl2tpd-control
Paul Wouters b779b0c
Paul Wouters 9b71487
* Wed Feb 23 2011 Paul Wouters <paul@xelerance.com> - 1.2.8-1
Paul Wouters 9b71487
- Updated to 1.2.8
Paul Wouters 9b71487
- Add ghosting for l2tp pipe (bz#656725)
Paul Wouters 9b71487
71fca9d
* Mon Feb 07 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.7-3
71fca9d
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
71fca9d
Paul Wouters 742558a
* Tue Nov 30 2010 Paul Wouters <paul@xelerance.com> - 1.2.7-2
Paul Wouters 742558a
- fix md5 of init script in sources
Paul Wouters 742558a
Paul Wouters 66f0b27
* Tue Nov 30 2010 Paul Wouters <paul@xelerance.com> - 1.2.7-1
Paul Wouters 66f0b27
- Updated to 1.2.7
Paul Wouters 66f0b27
- Added more DEBUG build options to the make command
Paul Wouters 66f0b27
- Minor cleanups
Paul Wouters 66f0b27
df62e19
* Sat Jan 09 2010 Paul Wouters <paul@xelerance.com> - 1.2.5-2
df62e19
- Bump for EVR
df62e19
9af6d57
* Sat Jan 09 2010 Paul Wouters <paul@xelerance.com> - 1.2.5-1
9af6d57
- Upgraded to 1.2.5. (fixes interop with two Windows machines behind same NAT)
9af6d57
- Fix mix space/tab in spec file
9af6d57
- Added missing keyword Default-Stop
9af6d57
f891043
* Mon Jul 27 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.4-4
f891043
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
f891043
a05c064
* Sun Mar 08 2009 Paul Wouters <paul@xelerance.com> - 1.2.4-3
a05c064
- Bump version for tagging mistake
a05c064
ad80b84
* Sun Mar 08 2009 Paul Wouters <paul@xelerance.com> - 1.2.4-2
ad80b84
-Fix initscript for https://bugzilla.redhat.com/show_bug.cgi?id=247100
ad80b84
bba24c5
* Sun Mar 08 2009 Paul Wouters <paul@xelerance.com> - 1.2.4-1
bba24c5
- Upgraded to 1.2.4
f89a0cf
- Merged spec file with upstream
bba24c5
173fa11
* Thu Feb 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.2.0-2
173fa11
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
173fa11
550a740
* Thu Oct  9 2008 Paul Wouters <paul@xelerance.com> - 1.2.0-1
550a740
- Updated to new upstream release
550a740
333859d
* Sat Sep  6 2008 Tom "spot" Callaway <tcallawa@redhat.com> 1.1.12-3
333859d
- fix license tag
333859d
2606074
* Tue Feb 19 2008 Fedora Release Engineering <rel-eng@fedoraproject.org> - 1.1.12-2
2606074
- Autorebuild for GCC 4.3
2606074
72deb39
* Fri Oct 26 2007 Paul Wouters <paul@xelerance.com> 1.1.12-1
72deb39
- Upgraded to new release upstream
72deb39
- Removed l2tpd to xl2tpd migration in post
72deb39
1b9db3e
* Wed Aug 29 2007 Fedora Release Engineering <rel-eng at fedoraproject dot org> - 1.1.11-3
1b9db3e
- Rebuild for selinux ppc32 issue.
1b9db3e
6b6c0c4
* Sat Jul 28 2007 Paul Wouters <paul@xelerance.com> 1.1.11-2
06eb6c9
- Upgraded to 1.1.11
6b6c0c4
- Include new split README.*
06eb6c9
cf407c8
* Mon Mar 19 2007 Paul Wouters <paul@xelerance.com> 1.1.09-1
cf407c8
- Upgraded to 1.1.09
cf407c8
24bff0b
* Fri Feb 23 2007 Paul Wouters <paul@xelerance.com> 1.1.08-2
24bff0b
- Bump for EVR
24bff0b
8ba1415
* Fri Feb 23 2007 Paul Wouters <paul@xelerance.com> 1.1.08-1
8ba1415
- Upgraded to 1.1.08
8ba1415
- This works around the ppp-2.4.2-6.4 issue of not dying on SIGTERM
8ba1415
4f5868c
* Tue Feb 20 2007 Paul Wouters <paul@xelerance.com> 1.1.07-2
4f5868c
- Fixed version usage in source macro
4f5868c
b7229a8
* Tue Feb 20 2007 Paul Wouters <paul@xelerance.com> 1.1.07-1
b7229a8
- Upgraded to 1.1.07
b7229a8
- Added /var/run/xl2tpd to the spec file so this pacakge
b7229a8
  owns /var/run/xl2tpd
c748ec9
97dafa0
* Thu Dec  7 2006 Paul Wouters <paul@xelerance.com> 1.1.06-5
97dafa0
- Changed space/tab replacing method
97dafa0
97dafa0
* Wed Dec  6 2006 Paul Wouters <paul@xelerance.com> 1.1.06-4
97dafa0
- Added -p to keep original timestamps
97dafa0
- Added temporary hack to change space/tab in init file.
97dafa0
- Added /sbin/service dependancy
97dafa0
97dafa0
* Tue Dec  5 2006 Paul Wouters <paul@xelerance.com> 1.1.06-3
97dafa0
- Added Requires(post) / Requires(preun)
97dafa0
- changed init file to create /var/run/xl2tpd fixed a tab/space
97dafa0
- changed control file to be within /var/run/xl2tpd/
97dafa0
97dafa0
* Tue Dec  5 2006 Paul Wouters <paul@xelerance.com> 1.1.06-2
97dafa0
- Changed Mr. Karlsen's name to not be a utf8 problem
97dafa0
- Fixed Obosoletes/Provides to be more specific wrt l2tpd.
97dafa0
- Added dist tag which accidentally got deleted.
97dafa0
bdc734d
* Mon Dec  4 2006 Paul Wouters <paul@xelerance.com> 1.1.06-1
bdc734d
- Rebased spec file on Fedora Extras copy, but using xl2tpd as package name
bdc734d
bdc734d
* Sun Nov 27 2005 Paul Wouters <paul@xelerance.com> 0.69.20051030
bdc734d
- Pulled up sourceforget.net CVS fixes.
bdc734d
- various debugging added, but debugging should not be on by default.
bdc734d
- async/sync conversion routines must be ready for possibility that the read
bdc734d
  will block due to routing loops.
bdc734d
- refactor control socket handling.
bdc734d
- move all logic about pty usage to pty.c. Try ptmx first, if it fails try
bdc734d
  legacy ptys
bdc734d
- rename log() to l2tp_log(), as "log" is a math function.
bdc734d
- if we aren't deamonized, then log to stderr.
bdc734d
- added install: and DESTDIR support.
bdc734d
bdc734d
* Thu Oct 20 2005 Paul Wouters <paul@xelerance.com> 0.69-13
bdc734d
- Removed suse/mandrake specifics. Comply for Fedora Extras guidelines
bdc734d
bdc734d
* Tue Jun 21 2005 Jacco de Leeuw <jacco2@dds.nl> 0.69-12jdl
bdc734d
- Added log() patch by Paul Wouters so that l2tpd compiles on FC4.
bdc734d
bdc734d
* Sat Jun 4 2005 Jacco de Leeuw <jacco2@dds.nl>
bdc734d
- l2tpd.org has been hijacked. Project moved back to SourceForge:
c748ec9
  http://l2tpd.sourceforge.net
bdc734d
bdc734d
* Tue May 3 2005 Jacco de Leeuw <jacco2@dds.nl>
c748ec9
- Small Makefile fixes. Explicitly use gcc instead of cc.
bdc734d
  Network services library was not linked on Solaris due to typo.
bdc734d
bdc734d
* Thu Mar 17 2005 Jacco de Leeuw <jacco2@dds.nl> 0.69-11jdl
bdc734d
- Choosing between SysV or BSD style ptys is now configurable through
bdc734d
  a compile-time boolean "unix98pty".
bdc734d
bdc734d
* Fri Feb 4 2005 Jacco de Leeuw <jacco2@dds.nl>
bdc734d
- Added code from Roaring Penguin (rp-l2tp) to support SysV-style ptys.
c748ec9
  Requires the N_HDLC kernel module.
bdc734d
bdc734d
* Fri Nov 26 2004 Jacco de Leeuw <jacco2@dds.nl>
bdc734d
- Updated the README.
bdc734d
bdc734d
* Wed Nov 10 2004 Jacco de Leeuw <jacco2@dds.nl> 0.69-10jdl
bdc734d
- Patch by Marald Klein and Roger Luethi. Fixes writing PID file.
bdc734d
  (http://l2tpd.graffl.net/msg01790.html)
bdc734d
  Long overdue. Rereleasing 10jdl.
bdc734d
bdc734d
* Tue Nov 9 2004 Jacco de Leeuw <jacco2@dds.nl> 0.69-10jdl
bdc734d
- [SECURITY FIX] Added fix from Debian because of a bss-based
bdc734d
  buffer overflow.
bdc734d
  (http://www.mail-archive.com/l2tpd-devel@l2tpd.org/msg01071.html)
bdc734d
- Mandrake's FreeS/WAN, Openswan and Strongswan RPMS use configuration
bdc734d
  directories /etc/{freeswan,openswan,strongswan}. Install our
bdc734d
  configuration files to /etc/ipsec.d and create symbolic links in
bdc734d
  those directories.
bdc734d
38e97b0
* Wed Aug 18 2004 Jacco de Leeuw <jacco2@dds.nl>
bdc734d
- Removed 'leftnexthop=' lines. Not relevant for recent versions
bdc734d
  of FreeS/WAN and derivates.
bdc734d
bdc734d
* Tue Jan 20 2004 Jacco de Leeuw <jacco2@dds.nl>  0.69-9jdl
bdc734d
- Added "noccp" because of too much MPPE/CCP messages sometimes.
bdc734d
bdc734d
* Wed Dec 31 2003 Jacco de Leeuw <jacco2@dds.nl>
bdc734d
- Added patch in order to prevent StopCCN messages.
bdc734d
bdc734d
* Sat Aug 23 2003 Jacco de Leeuw <jacco2@dds.nl>
bdc734d
- MTU/MRU 1410 seems to be the lowest possible for MSL2TP.
bdc734d
  For Windows 2000/XP it doesn't seem to matter.
bdc734d
- Typo in l2tpd.conf (192.168.128/25).
bdc734d
bdc734d
* Fri Aug 8 2003 Jacco de Leeuw <jacco2@dds.nl>  0.69-8jdl
bdc734d
- Added MTU/MRU 1400 to options.l2tpd. I don't know the optimal
bdc734d
  value but some apps had problems with the default value.
bdc734d
bdc734d
* Fri Aug 1 2003 Jacco de Leeuw <jacco2@dds.nl>
bdc734d
- Added workaround for the missing hostname bug in the MSL2TP client
bdc734d
  ('Specify your hostname', error 629: "You have been disconnected
bdc734d
  from the computer you are dialing").
bdc734d
38e97b0
* Sun Jul 20 2003 Jacco de Leeuw <jacco2@dds.nl>  0.69-7jdl
bdc734d
- Added the "listen-addr" global parameter for l2tpd.conf. By
bdc734d
  default, the daemon listens on *all* interfaces. Use
bdc734d
  "listen-addr" if you want it to bind to one specific
bdc734d
  IP address (interface), for security reasons. (See also:
bdc734d
  http://www.jacco2.dds.nl/networking/freeswan-l2tp.html#Firewallwarning)
bdc734d
- Explained in l2tpd.conf that two different IP addresses should be
bdc734d
  used for 'listen-addr' and 'local ip'.
bdc734d
- Modified init script. Upgrades should work better now. You
bdc734d
  still need to start/chkconfig l2tpd manually.
bdc734d
- Renamed the example Openswan .conf files to better reflect
bdc734d
  the situation. There are two variants using different portselectors.
bdc734d
  Previously I thought Windows 2000/XP used portselector 17/0
c748ec9
  and the rest used 17/1701. But with the release of an updated
bdc734d
  IPsec client by Microsoft, it turns out that 17/0 must have
bdc734d
  been a mistake: the updated client now also uses 17/1701.
bdc734d
38e97b0
* Thu Apr 10 2003 Jacco de Leeuw <jacco2@dds.nl>  0.69-6jdl
bdc734d
- Changed sample chap-secrets to be valid only for specific
bdc734d
  IP addresses.
bdc734d
bdc734d
* Thu Mar 13 2003 Bernhard Thoni <tech-role@tronicplanet.de>
bdc734d
- Adjustments for SuSE8.x (thanks, Bernhard!)
bdc734d
- Added sample chap-secrets.
bdc734d
bdc734d
* Thu Mar 6 2003 Jacco de Leeuw <jacco2@dds.nl> 0.69-5jdl
bdc734d
- Replaced Dominique's patch by Damion de Soto's, which does not
c748ec9
  depend on the N_HDLC kernel module.
bdc734d
bdc734d
* Wed Feb 26 2003 Jacco de Leeuw <jacco2@dds.nl> 0.69-4jdl
bdc734d
- Seperate example config files for Win9x (MSL2TP) and Win2K/XP
bdc734d
  due to left/rightprotoport differences.
bdc734d
  Fixing preun for Red Hat.
bdc734d
bdc734d
* Mon Feb 3 2003 Jacco de Leeuw <jacco2@dds.nl> 0.69-3jdl
bdc734d
- Mandrake uses /etc/freeswan/ instead of /etc/ipsec.d/
bdc734d
  Error fixed: source6 was used for both PSK and CERT.
bdc734d
bdc734d
* Wed Jan 29 2003 Jacco de Leeuw <jacco2@dds.nl> 0.69-3jdl
bdc734d
- Added Dominique Cressatti's pty patch in another attempt to
bdc734d
  prevent the Windows 2000 Professional "loopback detected" error.
bdc734d
  Seems to work!
bdc734d
bdc734d
* Wed Dec 25 2002 Jacco de Leeuw <jacco2@dds.nl> 0.69-2jdl
bdc734d
- Added 'connect-delay' to PPP parameters in an attempt to
bdc734d
  prevent the Windows 2000 Professional "loopback detected" error.
bdc734d
  Didn't seem to work.
bdc734d
bdc734d
* Fri Dec 13 2002 Jacco de Leeuw <jacco2@dds.nl> 0.69-1jdl
bdc734d
- Did not build on Red Hat 8.0. Solved by adding comments(?!).
bdc734d
  Bug detected in spec file: chkconfig --list l2tpd does not work
bdc734d
  on Red Hat 8.0. Not important enough to look into yet.
bdc734d
bdc734d
* Sun Nov 17 2002 Jacco de Leeuw <jacco2@dds.nl> 0.69-1jdl
bdc734d
- Tested on Red Hat, required some changes. No gprintf. Used different
bdc734d
  pty patch, otherwise wouldn't run. Added buildroot sanity check.
bdc734d
bdc734d
* Sun Nov 10 2002 Jacco de Leeuw <jacco2@dds.nl>
bdc734d
- Specfile adapted from Mandrake Cooker. The original RPM can be
bdc734d
  retrieved through:
bdc734d
  http://www.rpmfind.net/linux/rpm2html/search.php?query=l2tpd
c748ec9
- Config path changed from /etc/l2tp/ to /etc/l2tpd/
bdc734d
  (Seems more logical and rp-l2tp already uses /etc/l2tp/).
bdc734d
- Do not run at boot or install. The original RPM uses a config file
bdc734d
  which is completely commented out, but it still starts l2tpd on all
bdc734d
  interfaces. Could be a security risk. This RPM does not start l2tpd,
bdc734d
  the sysadmin has to edit the config file and start l2tpd explicitly.
bdc734d
- Renamed patches to start with l2tpd-
bdc734d
- Added dependencies for pppd, glibc-devel.
bdc734d
- Use %%{name} as much as possible.
bdc734d
- l2tp-secrets contains passwords, thus should not be world readable.
bdc734d
- Removed dependency on rpm-helper.
bdc734d
bdc734d
* Mon Oct 21 2002 Lenny Cartier <lenny@mandrakesoft.com> 0.69-3mdk
97dafa0
- from Per 0yvind Karlsen <peroyvind@delonic.no> :
bdc734d
 - PreReq and Requires
bdc734d
 - Fix preun_service
bdc734d
97dafa0
* Thu Oct 17 2002 Per 0yvind Karlsen <peroyvind@delonic.no> 0.69-2mdk
bdc734d
- Move l2tpd from /usr/bin to /usr/sbin
bdc734d
- Added SysV initscript
bdc734d
- Patch0
bdc734d
- Patch1
bdc734d
97dafa0
* Thu Oct 17 2002 Per 0yvind Karlsen <peroyvind@delonic.no> 0.69-1mdk
bdc734d
- Initial release