[libreswan/f19] * Initial package for fedora 19

Thu May 16 22:40:40 UTC 2013

commit a1574ac8f5fe9038f66b683ecf44601d30abb0f6
Author: Paul Wouters <pwouters at redhat.com>
Date:   Thu May 16 18:40:17 2013 -0400

    * Initial package for fedora 19

 .gitignore     |    2 +
 libreswan.spec |  188 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 sources        |    1 +
 3 files changed, 191 insertions(+), 0 deletions(-)
---

diff --git a/.gitignore b/.gitignore
index e69de29..c3fc084 100644
--- a/.gitignore
+++ b/.gitignore
@@ -0,0 +1,2 @@
+/libreswan-3.2.tar.gz
+/libreswan-3.3.tar.gz
diff --git a/libreswan.spec b/libreswan.spec
new file mode 100644
index 0000000..fdc3ec5
--- /dev/null
+++ b/libreswan.spec
@@ -0,0 +1,188 @@
+%global USE_FIPSCHECK true
+%global USE_LIBCAP_NG true
+%global USE_LABELED_IPSEC true
+%global USE_CRL_FETCHING true
+%global USE_DNSSEC true
+%global USE_NM true
+%global USE_LINUX_AUDIT true
+
+%global _hardened_build 1
+
+%global fipscheck_version 1.3.0
+%global buildefence 0
+%global development 0
+
+#global prever rc1
+
+Name: libreswan
+Summary: IPsec implementation with IKEv1 and IKEv2 keying protocols
+Version: 3.3
+Release: %{?prever:0.}1%{?prever:.%{prever}}%{?dist}
+License: GPLv2
+Url: https://www.libreswan.org/
+Source: https://download.libreswan.org/%{name}-%{version}%{?prever}.tar.gz
+Group: System Environment/Daemons
+BuildRequires: gmp-devel bison flex redhat-rpm-config pkgconfig
+BuildRequires: systemd
+Requires(post): coreutils bash systemd
+Requires(preun): systemd
+Requires(postun): systemd
+
+Conflicts: openswan < %{version}-%{release}
+Obsoletes: openswan < %{version}-%{release}
+Provides: openswan = %{version}-%{release}
+
+BuildRequires: pkgconfig hostname
+BuildRequires: nss-devel >= 3.12.6-2, nspr-devel
+BuildRequires: pam-devel
+%if %{USE_DNSSEC}
+BuildRequires: unbound-devel
+%endif
+%if %{USE_FIPSCHECK}
+BuildRequires: fipscheck-devel >= %{fipscheck_version}
+# we need fipshmac
+Requires: fipscheck%{_isa} >= %{fipscheck_version}
+%endif
+%if %{USE_LINUX_AUDIT}
+Buildrequires: audit-libs-devel
+%endif
+
+%if %{USE_LIBCAP_NG}
+BuildRequires: libcap-ng-devel
+%endif
+%if %{USE_CRL_FETCHING}
+BuildRequires: openldap-devel curl-devel
+%endif
+%if %{buildefence}
+BuildRequires: ElectricFence
+%endif
+# Only needed if xml man pages are modified and need regeneration
+# BuildRequires: xmlto
+
+Requires: nss-tools, nss-softokn
+
+%description
+Libreswan is a free implementation of IPsec & IKE for Linux.  IPsec is
+the Internet Protocol Security and uses strong cryptography to provide
+both authentication and encryption services.  These services allow you
+to build secure tunnels through untrusted networks.  Everything passing
+through the untrusted net is encrypted by the ipsec gateway machine and
+decrypted by the gateway at the other end of the tunnel.  The resulting
+tunnel is a virtual private network or VPN.
+
+This package contains the daemons and userland tools for setting up
+Libreswan. To build KLIPS, see the kmod-libreswan.spec file.
+
+Libreswan also supports IKEv2 (RFC4309) and Secure Labeling
+
+Libreswan is based on Openswan-2.6.38 which in turn is based on FreeS/WAN-2.04
+
+%prep
+%setup -q -n libreswan-%{version}%{?prever}
+
+%build
+%if %{buildefence}
+ %define efence "-lefence"
+%endif
+
+#796683: -fno-strict-aliasing
+%{__make} \
+%if %{development}
+   USERCOMPILE="-g -DGCC_LINT %(echo %{optflags} | sed -e s/-O[0-9]*/ /) %{?efence} -fPIE -pie -fno-strict-aliasing -Wformat-nonliteral -Wformat-security" \
+%else
+  USERCOMPILE="-g -DGCC_LINT %{optflags} %{?efence} -fPIE -pie -fno-strict-aliasing -Wformat-nonliteral -Wformat-security" \
+%endif
+  USERLINK="-g -pie -Wl,-z,relro,-z,now %{?efence}" \
+  INITSYSTEM=systemd \
+  USE_DYNAMICDNS="true" \
+  USE_NM=%{USE_NM} \
+  USE_XAUTHPAM=true \
+  USE_FIPSCHECK="%{USE_FIPSCHECK}" \
+  USE_LIBCAP_NG="%{USE_LIBCAP_NG}" \
+  USE_LABELED_IPSEC="%{USE_LABELED_IPSEC}" \
+%if %{USE_CRL_FETCHING}
+  USE_LDAP=true \
+  USE_LIBCURL=true \
+%endif
+  USE_DNSSEC="%{USE_DNSSEC}" \
+  INC_USRLOCAL=%{_prefix} \
+  FINALLIBDIR=%{_libexecdir}/ipsec \
+  FINALLIBEXECDIR=%{_libexecdir}/ipsec \
+  MANTREE=%{_mandir} \
+  INC_RCDEFAULT=%{_initrddir} \
+  programs
+FS=$(pwd)
+
+%if %{USE_FIPSCHECK}
+# Add generation of HMAC checksums of the final stripped binaries
+%define __spec_install_post \
+    %{?__debug_package:%{__debug_install_post}} \
+    %{__arch_install_post} \
+    %{__os_install_post} \
+  fipshmac -d %{buildroot}%{_libdir}/fipscheck ` ls %{buildroot}%{_libexecdir}/ipsec/*|grep -v setup` \
+  fipshmac -d %{buildroot}%{_libdir}/fipscheck %{buildroot}%{_sbindir}/ipsec \
+%{nil}
+%endif
+
+%install
+rm -rf ${RPM_BUILD_ROOT}
+%{__make} \
+  DESTDIR=%{buildroot} \
+  INC_USRLOCAL=%{_prefix} \
+  FINALLIBDIR=%{_libexecdir}/ipsec \
+  FINALLIBEXECDIR=%{_libexecdir}/ipsec \
+  MANTREE=%{buildroot}%{_mandir} \
+  INC_RCDEFAULT=%{_initrddir} \
+  INSTMANFLAGS="-m 644" \
+  INITSYSTEM=systemd \
+  install
+FS=$(pwd)
+rm -rf %{buildroot}/usr/share/doc/libreswan
+
+install -d -m 0755 %{buildroot}%{_localstatedir}/run/pluto
+# used when setting --perpeerlog without --perpeerlogbase
+install -d -m 0700 %{buildroot}%{_localstatedir}/log/pluto/peer
+install -d %{buildroot}%{_sbindir}
+
+%if %{USE_FIPSCHECK}
+mkdir -p %{buildroot}%{_libdir}/fipscheck
+%endif
+
+echo "include /etc/ipsec.d/*.secrets" > %{buildroot}%{_sysconfdir}/ipsec.secrets
+rm -fr %{buildroot}/etc/rc.d/rc*
+
+%files
+%doc BUGS CHANGES COPYING CREDITS README LICENSE
+%doc docs/*.*
+%attr(0644,root,root) %config(noreplace) %{_sysconfdir}/ipsec.conf
+%attr(0644,root,root) %config(noreplace) %{_sysconfdir}/sysconfig/pluto
+%attr(0600,root,root) %config(noreplace) %{_sysconfdir}/ipsec.secrets
+%attr(0700,root,root) %dir %{_sysconfdir}/ipsec.d
+%attr(0700,root,root) %dir %{_sysconfdir}/ipsec.d/cacerts
+%attr(0700,root,root) %dir %{_sysconfdir}/ipsec.d/crls
+%attr(0700,root,root) %dir %{_sysconfdir}/ipsec.d/policies
+%attr(0644,root,root) %config(noreplace) %{_sysconfdir}/ipsec.d/policies/*
+%attr(0700,root,root) %dir %{_localstatedir}/log/pluto/peer
+%attr(0755,root,root) %dir %{_localstatedir}/run/pluto
+%attr(0644,root,root) %{_unitdir}/ipsec.service
+%attr(0644,root,root) %config(noreplace) %{_sysconfdir}/pam.d/pluto
+%{_sbindir}/ipsec
+%{_libexecdir}/ipsec
+%attr(0644,root,root) %doc %{_mandir}/*/*
+
+%if %{USE_FIPSCHECK}
+%{_libdir}/fipscheck/*.hmac
+%endif
+
+%preun
+%systemd_preun ipsec.service
+
+%postun
+%systemd_postun_with_restart ipsec.service
+
+%post
+%systemd_post ipsec.service
+
+%changelog
+* Mon May 16 2013 Paul Wouters <pwouters at redhat.com> - 3.3-1
+- Initial package for Fedora 18
diff --git a/sources b/sources
index e69de29..a5e5c14 100644
--- a/sources
+++ b/sources
@@ -0,0 +1 @@
+a3e8562dfa1a7f4384e0e66a26acec52  libreswan-3.3.tar.gz
