* Sat Apr 13 2013 Paul Wouters <pwouters@redhat.com> - 3.2-1
- Initial package for Fedora
This commit is contained in:
Paul Wouters
parent
a8426a7ea9
commit
5f79f634af
1
.gitignore
vendored
1
.gitignore
vendored
@ -0,0 +1 @@
|
|||||||
|
/libreswan-3.2.tar.gz
|
||||||
188
libreswan.spec
Normal file
188
libreswan.spec
Normal file
@ -0,0 +1,188 @@
|
|||||||
|
%global USE_FIPSCHECK true
|
||||||
|
%global USE_LIBCAP_NG true
|
||||||
|
%global USE_LABELED_IPSEC true
|
||||||
|
%global USE_CRL_FETCHING true
|
||||||
|
%global USE_DNSSEC true
|
||||||
|
%global USE_NM true
|
||||||
|
%global USE_LINUX_AUDIT true
|
||||||
|
|
||||||
|
%global _hardened_build 1
|
||||||
|
|
||||||
|
%global fipscheck_version 1.3.0
|
||||||
|
%global buildefence 0
|
||||||
|
%global development 0
|
||||||
|
|
||||||
|
#global prever rc1
|
||||||
|
|
||||||
|
Name: libreswan
|
||||||
|
Summary: IPsec implementation with IKEv1 and IKEv2 keying protocols
|
||||||
|
Version: 3.2
|
||||||
|
Release: %{?prever:0.}1%{?prever:.%{prever}}%{?dist}
|
||||||
|
License: GPLv2
|
||||||
|
Url: https://www.libreswan.org/
|
||||||
|
Source: https://download.libreswan.org/%{name}-%{version}%{?prever}.tar.gz
|
||||||
|
Group: System Environment/Daemons
|
||||||
|
BuildRequires: gmp-devel bison flex redhat-rpm-config pkgconfig
|
||||||
|
BuildRequires: systemd
|
||||||
|
Requires(post): coreutils bash systemd
|
||||||
|
Requires(preun): systemd
|
||||||
|
Requires(postun): systemd
|
||||||
|
|
||||||
|
Conflicts: openswan < %{version}-%{release}
|
||||||
|
Obsoletes: openswan < %{version}-%{release}
|
||||||
|
Provides: openswan = %{version}-%{release}
|
||||||
|
|
||||||
|
BuildRequires: pkgconfig hostname
|
||||||
|
BuildRequires: nss-devel >= 3.12.6-2, nspr-devel
|
||||||
|
BuildRequires: pam-devel
|
||||||
|
%if %{USE_DNSSEC}
|
||||||
|
BuildRequires: unbound-devel
|
||||||
|
%endif
|
||||||
|
%if %{USE_FIPSCHECK}
|
||||||
|
BuildRequires: fipscheck-devel >= %{fipscheck_version}
|
||||||
|
# we need fipshmac
|
||||||
|
Requires: fipscheck%{_isa} >= %{fipscheck_version}
|
||||||
|
%endif
|
||||||
|
%if %{USE_LINUX_AUDIT}
|
||||||
|
Buildrequires: audit-libs-devel
|
||||||
|
%endif
|
||||||
|
|
||||||
|
%if %{USE_LIBCAP_NG}
|
||||||
|
BuildRequires: libcap-ng-devel
|
||||||
|
%endif
|
||||||
|
%if %{USE_CRL_FETCHING}
|
||||||
|
BuildRequires: openldap-devel curl-devel
|
||||||
|
%endif
|
||||||
|
%if %{buildefence}
|
||||||
|
BuildRequires: ElectricFence
|
||||||
|
%endif
|
||||||
|
# Only needed if xml man pages are modified and need regeneration
|
||||||
|
# BuildRequires: xmlto
|
||||||
|
|
||||||
|
Requires: nss-tools, nss-softokn
|
||||||
|
|
||||||
|
%description
|
||||||
|
Libreswan is a free implementation of IPsec & IKE for Linux. IPsec is
|
||||||
|
the Internet Protocol Security and uses strong cryptography to provide
|
||||||
|
both authentication and encryption services. These services allow you
|
||||||
|
to build secure tunnels through untrusted networks. Everything passing
|
||||||
|
through the untrusted net is encrypted by the ipsec gateway machine and
|
||||||
|
decrypted by the gateway at the other end of the tunnel. The resulting
|
||||||
|
tunnel is a virtual private network or VPN.
|
||||||
|
|
||||||
|
This package contains the daemons and userland tools for setting up
|
||||||
|
Libreswan. To build KLIPS, see the kmod-libreswan.spec file.
|
||||||
|
|
||||||
|
Libreswan also supports IKEv2 (RFC4309) and Secure Labeling
|
||||||
|
|
||||||
|
Libreswan is based on Openswan-2.6.38 which in turn is based on FreeS/WAN-2.04
|
||||||
|
|
||||||
|
%prep
|
||||||
|
%setup -q -n libreswan-%{version}%{?prever}
|
||||||
|
|
||||||
|
%build
|
||||||
|
%if %{buildefence}
|
||||||
|
%define efence "-lefence"
|
||||||
|
%endif
|
||||||
|
|
||||||
|
#796683: -fno-strict-aliasing
|
||||||
|
%{__make} \
|
||||||
|
%if %{development}
|
||||||
|
USERCOMPILE="-g -DGCC_LINT %(echo %{optflags} | sed -e s/-O[0-9]*/ /) %{?efence} -fPIE -pie -fno-strict-aliasing -Wformat-nonliteral -Wformat-security" \
|
||||||
|
%else
|
||||||
|
USERCOMPILE="-g -DGCC_LINT %{optflags} %{?efence} -fPIE -pie -fno-strict-aliasing -Wformat-nonliteral -Wformat-security" \
|
||||||
|
%endif
|
||||||
|
USERLINK="-g -pie -Wl,-z,relro,-z,now %{?efence}" \
|
||||||
|
INITSYSTEM=systemd \
|
||||||
|
USE_DYNAMICDNS="true" \
|
||||||
|
USE_NM=%{USE_NM} \
|
||||||
|
USE_XAUTHPAM=true \
|
||||||
|
USE_FIPSCHECK="%{USE_FIPSCHECK}" \
|
||||||
|
USE_LIBCAP_NG="%{USE_LIBCAP_NG}" \
|
||||||
|
USE_LABELED_IPSEC="%{USE_LABELED_IPSEC}" \
|
||||||
|
%if %{USE_CRL_FETCHING}
|
||||||
|
USE_LDAP=true \
|
||||||
|
USE_LIBCURL=true \
|
||||||
|
%endif
|
||||||
|
USE_DNSSEC="%{USE_DNSSEC}" \
|
||||||
|
INC_USRLOCAL=%{_prefix} \
|
||||||
|
FINALLIBDIR=%{_libexecdir}/ipsec \
|
||||||
|
FINALLIBEXECDIR=%{_libexecdir}/ipsec \
|
||||||
|
MANTREE=%{_mandir} \
|
||||||
|
INC_RCDEFAULT=%{_initrddir} \
|
||||||
|
programs
|
||||||
|
FS=$(pwd)
|
||||||
|
|
||||||
|
%if %{USE_FIPSCHECK}
|
||||||
|
# Add generation of HMAC checksums of the final stripped binaries
|
||||||
|
%define __spec_install_post \
|
||||||
|
%{?__debug_package:%{__debug_install_post}} \
|
||||||
|
%{__arch_install_post} \
|
||||||
|
%{__os_install_post} \
|
||||||
|
fipshmac -d %{buildroot}%{_libdir}/fipscheck ` ls %{buildroot}%{_libexecdir}/ipsec/*|grep -v setup` \
|
||||||
|
fipshmac -d %{buildroot}%{_libdir}/fipscheck %{buildroot}%{_sbindir}/ipsec \
|
||||||
|
%{nil}
|
||||||
|
%endif
|
||||||
|
|
||||||
|
%install
|
||||||
|
rm -rf ${RPM_BUILD_ROOT}
|
||||||
|
%{__make} \
|
||||||
|
DESTDIR=%{buildroot} \
|
||||||
|
INC_USRLOCAL=%{_prefix} \
|
||||||
|
FINALLIBDIR=%{_libexecdir}/ipsec \
|
||||||
|
FINALLIBEXECDIR=%{_libexecdir}/ipsec \
|
||||||
|
MANTREE=%{buildroot}%{_mandir} \
|
||||||
|
INC_RCDEFAULT=%{_initrddir} \
|
||||||
|
INSTMANFLAGS="-m 644" \
|
||||||
|
INITSYSTEM=systemd \
|
||||||
|
install
|
||||||
|
FS=$(pwd)
|
||||||
|
rm -rf %{buildroot}/usr/share/doc/libreswan
|
||||||
|
|
||||||
|
install -d -m 0755 %{buildroot}%{_localstatedir}/run/pluto
|
||||||
|
# used when setting --perpeerlog without --perpeerlogbase
|
||||||
|
install -d -m 0700 %{buildroot}%{_localstatedir}/log/pluto/peer
|
||||||
|
install -d %{buildroot}%{_sbindir}
|
||||||
|
|
||||||
|
%if %{USE_FIPSCHECK}
|
||||||
|
mkdir -p %{buildroot}%{_libdir}/fipscheck
|
||||||
|
%endif
|
||||||
|
|
||||||
|
echo "include /etc/ipsec.d/*.secrets" > %{buildroot}%{_sysconfdir}/ipsec.secrets
|
||||||
|
rm -fr %{buildroot}/etc/rc.d/rc*
|
||||||
|
|
||||||
|
%files
|
||||||
|
%doc BUGS CHANGES COPYING CREDITS README LICENSE
|
||||||
|
%doc docs/*.*
|
||||||
|
%attr(0644,root,root) %config(noreplace) %{_sysconfdir}/ipsec.conf
|
||||||
|
%attr(0644,root,root) %config(noreplace) %{_sysconfdir}/sysconfig/pluto
|
||||||
|
%attr(0600,root,root) %config(noreplace) %{_sysconfdir}/ipsec.secrets
|
||||||
|
%attr(0700,root,root) %dir %{_sysconfdir}/ipsec.d
|
||||||
|
%attr(0700,root,root) %dir %{_sysconfdir}/ipsec.d/cacerts
|
||||||
|
%attr(0700,root,root) %dir %{_sysconfdir}/ipsec.d/crls
|
||||||
|
%attr(0700,root,root) %dir %{_sysconfdir}/ipsec.d/policies
|
||||||
|
%attr(0644,root,root) %config(noreplace) %{_sysconfdir}/ipsec.d/policies/*
|
||||||
|
%attr(0700,root,root) %dir %{_localstatedir}/log/pluto/peer
|
||||||
|
%attr(0755,root,root) %dir %{_localstatedir}/run/pluto
|
||||||
|
%attr(0644,root,root) %{_unitdir}/ipsec.service
|
||||||
|
%attr(0644,root,root) %config(noreplace) %{_sysconfdir}/pam.d/pluto
|
||||||
|
%{_sbindir}/ipsec
|
||||||
|
%{_libexecdir}/ipsec
|
||||||
|
%attr(0644,root,root) %doc %{_mandir}/*/*
|
||||||
|
|
||||||
|
%if %{USE_FIPSCHECK}
|
||||||
|
%{_libdir}/fipscheck/*.hmac
|
||||||
|
%endif
|
||||||
|
|
||||||
|
%preun
|
||||||
|
%systemd_preun ipsec.service
|
||||||
|
|
||||||
|
%postun
|
||||||
|
%systemd_postun_with_restart ipsec.service
|
||||||
|
|
||||||
|
%post
|
||||||
|
%systemd_post ipsec.service
|
||||||
|
|
||||||
|
%changelog
|
||||||
|
* Sat Apr 13 2013 Paul Wouters <pwouters@redhat.com> - 3.2-1
|
||||||
|
- Initial package for Fedora
|
||||||
Loading…
Reference in New Issue
Block a user