4d6dc4bc45
Update to the new 1.2.22 release which adds IPv6 support. Resolves: RHEL-21875
391 lines
15 KiB
RPMSpec
391 lines
15 KiB
RPMSpec
%if 0%{?fedora} < 28 && 0%{?rhel} < 8
|
|
%bcond_without libnm_glib
|
|
%else
|
|
%bcond_with libnm_glib
|
|
%endif
|
|
%if 0%{?fedora} < 36 && 0%{?rhel} < 10
|
|
%bcond_with gtk4
|
|
%else
|
|
%bcond_without gtk4
|
|
%endif
|
|
|
|
%global real_version 1.2.22
|
|
%global rpm_version 1.2.22
|
|
%global release_version 1
|
|
|
|
%global real_version_major %(printf '%s' '%{real_version}' | sed -n 's/^\\([1-9][0-9]*\\.[1-9][0-9]*\\)\\.[1-9][0-9]*$/\\1/p')
|
|
|
|
%global nm_version 1:1.2.0
|
|
%global nma_version 1.2.0
|
|
|
|
|
|
Summary: NetworkManager VPN plug-in for IPsec VPN
|
|
Name: NetworkManager-libreswan
|
|
Version: %{rpm_version}
|
|
Release: %{release_version}%{?dist}
|
|
License: GPLv2+
|
|
URL: http://www.gnome.org/projects/NetworkManager/
|
|
Source0: https://download.gnome.org/sources/NetworkManager-libreswan/%{real_version_major}/%{name}-%{real_version}.tar.xz
|
|
|
|
# Patch1: 0001-some.patch
|
|
|
|
BuildRequires: make
|
|
BuildRequires: gcc
|
|
BuildRequires: gtk3-devel
|
|
BuildRequires: libnl3-devel
|
|
BuildRequires: NetworkManager-libnm-devel >= %{nm_version}
|
|
BuildRequires: libnma-devel >= %{nma_version}
|
|
BuildRequires: libsecret-devel
|
|
BuildRequires: intltool gettext
|
|
|
|
%if %with libnm_glib
|
|
BuildRequires: NetworkManager-devel >= %{nm_version}
|
|
BuildRequires: NetworkManager-glib-devel >= %{nm_version}
|
|
BuildRequires: libnm-gtk-devel >= %{nma_version}
|
|
%endif
|
|
|
|
%if %with gtk4
|
|
BuildRequires: libnma-gtk4-devel
|
|
%endif
|
|
|
|
Requires: NetworkManager >= %{nm_version}
|
|
Requires: dbus
|
|
Requires: /usr/sbin/ipsec
|
|
|
|
Provides: NetworkManager-openswan = %{version}-%{release}
|
|
Obsoletes: NetworkManager-openswan < %{version}-%{release}
|
|
|
|
%global _privatelibs libnm-libreswan-properties[.]so.*
|
|
%global __provides_exclude ^(%{_privatelibs})$
|
|
%global __requires_exclude ^(%{_privatelibs})$
|
|
|
|
|
|
%description
|
|
This package contains software for integrating the libreswan VPN software
|
|
with NetworkManager and the GNOME desktop
|
|
|
|
|
|
%package -n NetworkManager-libreswan-gnome
|
|
Summary: NetworkManager VPN plugin for libreswan - GNOME files
|
|
|
|
Requires: %{name}%{?_isa} = %{version}-%{release}
|
|
Requires: shared-mime-info
|
|
|
|
Provides: NetworkManager-openswan-gnome = %{version}-%{release}
|
|
Obsoletes: NetworkManager-openswan-gnome < %{version}-%{release}
|
|
|
|
%description -n NetworkManager-libreswan-gnome
|
|
This package contains software for integrating VPN capabilities with
|
|
the libreswan server with NetworkManager (GNOME files).
|
|
|
|
|
|
%prep
|
|
%autosetup -p1 -n "%{name}-%{real_version}"
|
|
|
|
|
|
%build
|
|
%configure \
|
|
--disable-static \
|
|
%if %with gtk4
|
|
--with-gtk4 \
|
|
%endif
|
|
%if %without libnm_glib
|
|
--without-libnm-glib \
|
|
%endif
|
|
--enable-more-warnings=yes \
|
|
--with-dist-version=%{version}-%{release}
|
|
make %{?_smp_mflags}
|
|
|
|
|
|
%install
|
|
make install DESTDIR=%{buildroot}
|
|
rm -f %{buildroot}%{_libdir}/NetworkManager/lib*.la
|
|
|
|
%find_lang %{name}
|
|
|
|
%files -f %{name}.lang
|
|
%{_libdir}/NetworkManager/libnm-vpn-plugin-libreswan.so
|
|
%{_sysconfdir}/dbus-1/system.d/nm-libreswan-service.conf
|
|
%{_prefix}/lib/NetworkManager/VPN/nm-libreswan-service.name
|
|
%{_libexecdir}/nm-libreswan-service
|
|
%{_libexecdir}/nm-libreswan-service-helper
|
|
%{_mandir}/man5/nm-settings-libreswan.5.gz
|
|
%doc AUTHORS NEWS
|
|
%license COPYING
|
|
|
|
|
|
%files -n NetworkManager-libreswan-gnome
|
|
%{_libexecdir}/nm-libreswan-auth-dialog
|
|
%{_libdir}/NetworkManager/libnm-vpn-plugin-libreswan-editor.so
|
|
%{_metainfodir}/network-manager-libreswan.metainfo.xml
|
|
|
|
%if %with libnm_glib
|
|
%{_libdir}/NetworkManager/libnm-*-properties.so
|
|
%{_sysconfdir}/NetworkManager/VPN/nm-libreswan-service.name
|
|
%endif
|
|
|
|
%if %with gtk4
|
|
%{_libdir}/NetworkManager/libnm-gtk4-vpn-plugin-libreswan-editor.so
|
|
%endif
|
|
|
|
%changelog
|
|
* Wed May 22 2024 Beniamino Galvani <bgalvani@redhat.com> - 1.2.22-1
|
|
- Add IPv6 support (RHEL-21875)
|
|
|
|
* Wed Apr 17 2024 Íñigo Huguet <ihuguet@redhat.com> - 1.2.20-1
|
|
- Support "leftsubnet" property (RHEL-26776)
|
|
- Support "rightcert" property (RHEL-30370)
|
|
|
|
* Wed Jan 17 2024 Fernando Fernandez Mancera <ferferna@redhat.com> - 1.2.18-2
|
|
- Support point-to-point IPSec tunnel (RHEL-20690)
|
|
- Fix crash in libreswan_nmstate_iface_dpd_rsa (RHEL-21221)
|
|
- Support configuring IPSec mode with 'type' (RHEL-21554)
|
|
|
|
* Fri Dec 15 2023 Fernando Fernandez Mancera <ferferna@redhat.com> - 1.2.18-1
|
|
- Update to 1.2.18 release
|
|
|
|
* Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 1.2.14-1.3
|
|
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
|
|
Related: rhbz#1991688
|
|
|
|
* Thu Apr 15 2021 Mohan Boddu <mboddu@redhat.com> - 1.2.14-1.2
|
|
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
|
|
|
|
* Mon Jan 25 2021 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.14-1.1
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
|
|
|
|
* Tue Jan 12 2021 Beniamino Galvani <bgalvani@redhat.com> - 1.2.14-1
|
|
- Update to 1.2.14 release
|
|
|
|
* Mon Jul 27 2020 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.12-1.2
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
|
|
|
|
* Tue Jan 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.12-1.1
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
|
|
|
|
* Wed Jul 31 2019 Francesco Giudici <fgiudici@redhat.com> - 1.2.12-1
|
|
- Updated to 1.2.12
|
|
|
|
* Wed Jul 24 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.10-1.2
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
|
|
|
|
* Thu Jan 31 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.10-1.1
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
|
|
|
|
* Thu Oct 18 2018 Francesco Giudici <fgiudici@redhat.com> - 1.2.10-1
|
|
- Updated to 1.2.10
|
|
- Import latest translations from upstream
|
|
|
|
* Wed Aug 22 2018 Paul Wouters <pwouters@redhat.com> - 1.2.6-1
|
|
- Updated to 1.2.6
|
|
- Upstream patches for IKEv2 support
|
|
|
|
* Thu Jul 12 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.4-7
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
|
|
|
|
* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.4-6
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
|
|
|
|
* Thu Nov 30 2017 Lubomir Rintel <lkundrak@v3.sk> - 1.2.4-4
|
|
- Drop libnm-glib for Fedora 28
|
|
|
|
* Wed Aug 02 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.4-4
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
|
|
|
|
* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.4-3
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
|
|
|
|
* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.4-2
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
|
|
|
|
* Thu Jun 30 2016 Thomas Haller <thaller@redhat.com> - 1.2.4-1
|
|
- Update to 1.2.4 release
|
|
- Move base VPN plugin library to base libreswan package
|
|
- Don't require nm-connection-editor anymore
|
|
|
|
* Wed May 11 2016 Lubomir Rintel <lkundrak@v3.sk> - 1.2.2-1
|
|
- Update to 1.2.2 release
|
|
|
|
* Wed Apr 20 2016 Lubomir Rintel <lkundrak@v3.sk> - 1.2.0-1
|
|
- Update to 1.2.0 release
|
|
|
|
* Tue Apr 5 2016 Lubomir Rintel <lkundrak@v3.sk> - 1.2.0-0.4.rc1
|
|
- Update to NetworkManager-libreswan 1.2-rc1
|
|
|
|
* Tue Mar 1 2016 Lubomir Rintel <lkundrak@v3.sk> - 1.2.0-0.4.beta2
|
|
- Update to NetworkManager-libreswan 1.2-beta2
|
|
|
|
* Wed Feb 03 2016 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.0-0.4.beta1
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
|
|
|
|
* Mon Feb 1 2016 Lubomir Rintel <lkundrak@v3.sk> - 1.2.0-0.3.beta1
|
|
- Update to support Main mode & better Libreswan integration
|
|
|
|
* Tue Jan 19 2016 Lubomir Rintel <lkundrak@v3.sk> - 1.2.0-0.2.beta1
|
|
- Update to NetworkManager-libreswan 1.2-beta1
|
|
|
|
* Wed Dec 16 2015 Lubomir Rintel <lkundrak@v3.sk> - 1.2.0-0.1.20151216gite52aff0
|
|
- A newer git snapshot with import/export support
|
|
|
|
* Mon Nov 16 2015 Lubomir Rintel <lkundrak@v3.sk> - 1.2.0-0.1.20151116git15db395
|
|
- Rename to NetworkManager-libreswan
|
|
- A newer git snapshot with multiple connection support
|
|
|
|
* Fri Oct 23 2015 Lubomir Rintel <lkundrak@v3.sk> - 1.2.0-0.1.20151023git8a39c0f
|
|
- Update to a newer git snapshot
|
|
|
|
* Tue Sep 1 2015 Lubomir Rintel <lkundrak@v3.sk> - 1.2.0-0.1.20150901git92f1611
|
|
- Update to 1.2 git snapshot with libnm-based properties plugin
|
|
|
|
* Fri Aug 28 2015 Lubomir Rintel <lkundrak@v3.sk> - 1.0.6-2
|
|
- Don't unconditionally set cisco-unity=yes
|
|
|
|
* Thu Aug 27 2015 Lubomir Rintel <lkundrak@v3.sk> - 1.0.6-1
|
|
- Update to 1.0.6 release
|
|
|
|
* Tue Jun 16 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.2-2
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
|
|
|
|
* Tue May 5 2015 Lubomir Rintel <lkundrak@v3.sk> - 1.0.2-1
|
|
- Update to 1.0.2 release
|
|
|
|
* Mon Dec 22 2014 Dan Williams <dcbw@redhat.com> - 1.0.0-1
|
|
- Update to 1.0
|
|
|
|
* Fri Aug 15 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.9.8.4-4
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
|
|
|
|
* Fri Jun 06 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.9.8.4-3
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
|
|
|
|
* Thu Dec 12 2013 Avesh Agarwal <avagarwa@redhat.com> - 0.9.8.4-2
|
|
- Fixes 1035786 (and its duplicate 1040924)
|
|
|
|
* Tue Dec 10 2013 Avesh Agarwal <avagarwa@redhat.com> - 0.9.8.4-1
|
|
- New upstream release 0.9.8.4
|
|
- Fixed 926225
|
|
- Fixed dependency to libreswan.
|
|
- Created a new sub package NetworkManager-openswan-gnome
|
|
- Various other spec file fixes.
|
|
- Additional code changes are as follows:
|
|
- Fixed an issue where proper network stack is not loaded unless
|
|
_stackmanager is run before starting pluto daemon service.
|
|
- Fixed the termination operation of pluto daemon to comply with
|
|
libreswan changes.
|
|
- Fixed various debug messages.
|
|
- Fixed initiation of pluto daemon by this plugin to reflect the
|
|
changes in libreaswan.
|
|
- Fixed defaults values for more parameters to help the VPN
|
|
connection stay more reliable.
|
|
- Rewrote pluto watch API which watches the pluto process for its status.
|
|
Fixed memory leak issues as not all child processes were reaped correctly.
|
|
Also g_spwan_close_pid was not being called after children were reaped.
|
|
Also modified debugs and added more to help with debugging in the future.
|
|
- Fixed an issue where nm-openswan service is searching for ipsec binary in
|
|
both /sbin and /usr/sbin leading to same operation twice, as /sbin is just
|
|
symlink to /usr/sbin, so removed /sbin from the search paths.
|
|
- Fixed some libreswan related macro changes.
|
|
- Fixed netmask issue when sending IP information to the nm openswan
|
|
plugin service.
|
|
- Fixed the current code as it does not set the default route field
|
|
NM_VPN_PLUGIN_IP4_CONFIG_NEVER_DEFAULT when sending VPN information
|
|
to nm-openswan plugin. This fix sets the field to TRUE.
|
|
- Fixed some issues found by coverity scan.
|
|
- Fixed an issue where writing configuration on stdin should not end with
|
|
\n as it gives error. It used to work previously, but not with latest
|
|
NetworkManager versions.
|
|
- libreswan related fixes, as some macros have been modified after forking
|
|
to libreswan from openswan.
|
|
- openswan/libreswan does not provide tun0 interface, so fixed the code
|
|
where it sends tun0 interface.
|
|
- Fix prcoessing of nm-openswan-dialog.ui file and added more error notifications.
|
|
- Fixed dead code based on coverity scan.
|
|
- Fixed gnomekeyring lib dependencies.
|
|
- Fixed Networkmanager and related lib dependencies.
|
|
- Fixed gtk label max width issue by setting it to 35.
|
|
- NM-openswan was missing support for nm-openswan-auth-dialog.desktop.in.in.
|
|
So added a new nm-openswan-auth-dialog.desktop.in.in, and modified related
|
|
Makefile and configure.ac files.
|
|
|
|
* Mon Aug 5 2013 Avesh Agarwal <avagarwa@redhat.com> - 0.9.8.0-1
|
|
- Rebase to latest upstream version 0.9.8.0
|
|
- Fixed several issues with the packaging
|
|
|
|
* Fri Aug 02 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.9.3.995-6.git20120302
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
|
|
|
|
* Wed Feb 13 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.9.3.995-5.git20120302
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
|
|
|
|
* Thu Dec 13 2012 Avesh Agarwal <avagarwa@redhat.com> - 0.9.3.995-4
|
|
Resolves: #845599, #865883
|
|
|
|
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.9.3.995-3.git20120302
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
|
|
|
|
* Fri Apr 27 2012 Avesh Agarwal <avagarwa@redhat.com> - 0.9.3.995-2
|
|
- Ported changes from rhel to fedora
|
|
|
|
* Fri Mar 2 2012 Dan Williams <dcbw@redhat.com> - 0.9.3.995-1
|
|
- Update to 0.9.3.995 (0.9.4-beta1)
|
|
- ui: add support for external UI mode, eg GNOME Shell
|
|
|
|
* Thu Jan 12 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.9.0-3
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
|
|
|
|
* Tue Dec 06 2011 Adam Jackson <ajax@redhat.com> - 0.9.0-2
|
|
- Rebuild for new libpng
|
|
|
|
* Fri Aug 26 2011 Dan Williams <dcbw@redhat.com> - 0.9.0-1
|
|
- Update to 0.9.0
|
|
- ui: translation fixes
|
|
|
|
* Thu Jul 21 2011 Dan Williams <dcbw@redhat.com> - 0.8.999-2.git20110721
|
|
- Update to git snapshot
|
|
- Fixes for secrets handling and saving
|
|
|
|
* Tue May 03 2011 Dan Williams <dcbw@redhat.com> - 0.8.999-1
|
|
- Update to 0.8.999 (0.9-rc2)
|
|
- Port to GTK 3.0 and GtkBuilder
|
|
- Fix some issues with secrets storage
|
|
|
|
* Sun Mar 27 2011 Christopher Aillon <caillon@redhat.com> - 0.8.0-9.20100411git
|
|
- Rebuild against NetworkManager 0.9
|
|
|
|
* Wed Feb 16 2011 Avesh Agarwal <avagarwa@redhat.com> - 0.8.0-8.20100411git
|
|
- fixes for compile time errors
|
|
|
|
* Mon Feb 07 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.8.0-7.20100411git
|
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
|
|
|
|
* Tue Sep 7 2010 Avesh Agarwal <avagarwa@redhat.com> - 0.8.0-6.20100411git
|
|
- Modified import and export interfaces to import_from_file and export_to_file, respectively,
|
|
due to changes in NMVpnPluginUiInterface struct in NM (bz 631159).
|
|
|
|
* Mon Jul 26 2010 Avesh Agarwal <avagarwa@redhat.com> - 0.8.0-5.20100411git
|
|
Resolves: #616910
|
|
- Support for reading phase1 and phase2 algorithms through GUI
|
|
|
|
* Tue Jul 13 2010 Avesh Agarwal <avagarwa@redhat.com> - 0.8.0-4.20100411git
|
|
- Modified fix for the bz 607352
|
|
- Fix to read connection configuration from stdin
|
|
- Fix to read Xauth user password from stdin
|
|
- Fix to delete the secret file as soon as read by Openswan
|
|
|
|
* Thu Jul 8 2010 Avesh Agarwal <avagarwa@redhat.com> - 0.8.0-3.20100411git
|
|
- Modified the patch so that it does not pass user password to
|
|
"ipsec whack" command.
|
|
|
|
* Thu Jul 8 2010 Avesh Agarwal <avagarwa@redhat.com> - 0.8.0-2.20100411git
|
|
- Modified to initiate VPN connections with openswan whack interface
|
|
- Fixed the issue of world readable conf and secret files
|
|
- Cleaned conf and secret files after VPN connection is stopped
|
|
- Fixed the issue of storing sensitive information like user
|
|
password in a file (rhbz# 607352)
|
|
- Changed PLUTO_SERVERBANNER to PLUTO_PEER_BANNER due
|
|
to the same change in Openswan
|
|
- Modifed GUI to remove unused configuration boxes
|
|
|
|
* Tue Jun 15 2010 Avesh Agarwal <avagarwa@redhat.com> - 0.8.0-1.20100%{version}t
|
|
- Initial build
|