[sslsplit] * Initial package

[Paul Wouters]

commit dadf012eeac315537131b7fe217edba999b6be89
Author: Paul Wouters <paul at libreswan.org>
Date:   Mon Jul 30 10:05:13 2012 -0700

    * Initial package

 .gitignore    |    1 +
 sources       |    1 +
 sslsplit.spec |   61 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 3 files changed, 63 insertions(+), 0 deletions(-)
---
diff --git a/.gitignore b/.gitignore
index e69de29..029105a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -0,0 +1 @@
+/sslsplit-0.4.4.tar.bz2
diff --git a/sources b/sources
index e69de29..36ee2ca 100644
--- a/sources
+++ b/sources
@@ -0,0 +1 @@
+db3a32e0d3bf69ac3f4d95ce540dbc75  sslsplit-0.4.4.tar.bz2
diff --git a/sslsplit.spec b/sslsplit.spec
new file mode 100644
index 0000000..78b00be
--- /dev/null
+++ b/sslsplit.spec
@@ -0,0 +1,61 @@
+Summary: Transparent and scalable SSL/TLS interception
+Name: sslsplit
+Version: 0.4.4
+Release: 4%{?dist}
+License: BSD
+Url: http://www.roe.ch/SSLsplit
+Source: http://mirror.roe.ch/rel/sslsplit/%{name}-%{version}.tar.bz2
+Group: Applications/System
+Buildrequires: libevent-devel, openssl-devel, check-devel
+Requires: iptables, iproute
+
+%description
+SSLsplit is a tool for man-in-the-middle attacks against SSL/TLS encrypted
+network connections. Connections are transparently intercepted through a
+network address translation engine and redirected to SSLsplit. SSLsplit
+terminates SSL/TLS and initiates a new SSL/TLS connection to the original
+destination address, while logging all data transmitted. SSLsplit is
+intended to be useful for network forensics and penetration testing.
+
+It uses Linux netfilter REDIRECT and TPROXY
+
+%prep
+%setup -q 
+# disable the ecc test - ECC is not allowed in Fedora and stripped from openssl
+sed -i "s/rsa dsa ec/rsa dsa /" extra/pki/GNUmakefile
+
+%build
+# work around some odd build system option passing
+export CFLAGS="%{optflags}"
+export DEBUG_CFLAGS="%{optflags}"
+make %{?_smp_mflags} 
+
+%check
+# Requires a network connection
+# make test
+
+%install
+mkdir -p %{buildroot}%{_bindir} %{buildroot}%{_mandir}/man1/
+cp -a %{name} %{buildroot}%{_bindir}
+cp -a %{name}.1  %{buildroot}%{_mandir}/man1/
+
+%files 
+%attr(0755,root,root) %{_bindir}/%{name}
+%doc README TODO
+%{_mandir}/*/*
+
+%changelog
+* Mon Jul 30 2012 Paul Wouters <pwouters at redhat.com> - 0.4.4-4
+- Disable make test, as it requires a network connection
+
+* Sat Jul 28 2012 Paul Wouters <pwouters at redhat.com> - 0.4.4-3
+- Fix permission of binary to 755
+
+* Fri Jul 27 2012 Paul Wouters <pwouters at redhat.com> - 0.4.4-2
+- Fix missing buildrequire for check-devel
+- Run make check
+- No need to compress man pages
+- No mixing of macro styles
+
+* Mon May 28 2012 Paul Wouters <pwouters at redhat.com> - 0.4.4-1
+- Initial package