Summary: Openswan IPSEC implementationName: openswanVersion: 2.4.5rc6# Build KLIPS kernel module?%{!?buildklips: %{expand: %%define buildklips 0}}%{!?buildxen: %{expand: %%define buildxen 0}}# The default kernel version to build for is the latest of# the installed binary kernel# This can be overridden by "--define 'kversion x.x.x-y.y.y'"%define defkv %(rpm -q kernel kernel-smp| grep -v "not installed" | sed "s/kernel-smp-\\\(.\*\\\)$/\\1smp/"| sed "s/kernel-//"| sort | tail -1)%{!?kversion: %{expand: %%define kversion %defkv}}%define	krelver		%(echo %{kversion} | tr -s '-' '_')# Openswan -pre/-rc nomenclature has to co-exist with hyphen paranoia%define srcpkgver	%(echo %{version} | tr -s '_' '-')%define ourrelease 1%define debug_package %{nil}Release: %{ourrelease}License: GPLUrl: http://www.openswan.org/Source: openswan-%{srcpkgver}.tar.gzGroup: System Environment/DaemonsBuildRoot: /var/tmp/%{name}-%{PACKAGE_VERSION}-root%define __spec_install_post /usr/lib/rpm/brp-compress || :Provides: ipsec-userland%package userlandSummary: Openswan IPSEC usermod toolsGroup: System Environment/DaemonsProvides: ipsec-userlandObsoletes: freeswan superfreeswan super-freeswanRequires: ipsec-kernel, iproute >= 2.6.8, gmpBuildRequires: gmp-devel bison flexRelease: %{ourrelease}%package docSummary: Openswan IPSEC full documentationGroup: System Environment/DaemonsRelease: %{ourrelease}%if %{buildklips}%package klipsSummary: Openswan kernel moduleGroup:  System Environment/KernelRelease: %{krelver}_%{ourrelease}Provides: ipsec-kernelRequires: kernel = %{kversion}# only applies to FC3+, not RH7-9 BuildRequires: kernel-devel# do not make the dependancy circular for now.#Requires: ipsec-userland%endif%description userlandOpenswan is a free implementation of IPSEC & IKE for Linux.  IPSEC is the Internet Protocol Security and uses strong cryptography to provideboth authentication and encryption services.  These services allow youto build secure tunnels through untrusted networks.  Everything passingthrough the untrusted net is encrypted by the ipsec gateway machine and decrypted by the gateway at the other end of the tunnel.  The resultingtunnel is a virtual private network or VPN.This package contains the daemons and userland tools for setting upOpenswan on a freeswan enabled kernel.%if %{buildklips}%description klipsThis package contains only the ipsec module for the RedHat/Fedora series ofkernels.%endif%description docThis package contains extensive documentation of the Openswan IPSECsystem.%descriptionA dummy package that installs userland and kernel pieces.%preprm -rf ${RPM_BUILD_ROOT}%setup -q -n openswan-%{srcpkgver}%build%{__make} \  USERCOMPILE="-g %{optflags}" \  INC_USRLOCAL=%{_prefix} \  FINALLIBDIR=%{_libdir}/ipsec \  MANTREE=%{_mandir} \  INC_RCDEFAULT=%{_initrddir} \  programsFS=$(pwd)%if %{buildklips}mkdir -p BUILD.%{_target_cpu}cd packaging/redhat# rpm doesn't know we're compiling kernel code. optflags will give us -m64%{__make} -C $FS MOD26BUILDDIR=$FS/BUILD.%{_target_cpu} \    OPENSWANSRCDIR=$FS \    KLIPSCOMPILE="%{optflags}" \    KERNELSRC=/lib/modules/%{kversion}/build \%if %{buildxen}    ARCH=xen \%else    ARCH=%{_arch} \%endif    MODULE_DEF_INCLUDE=$FS/packaging/redhat/config-%{_target_cpu}.h \    MODULE_EXTRA_INCLUDE=$FS/packaging/redhat/extra_%{krelver}.h \    include module%endif%install%{__make} \  DESTDIR=%{buildroot} \  INC_USRLOCAL=%{_prefix} \  FINALLIBDIR=%{_libdir}/ipsec \  MANTREE=%{buildroot}%{_mandir} \  INC_RCDEFAULT=%{_initrddir} \  installFS=$(pwd)rm -rf %{buildroot}/usr/share/doc/openswan#this needs to be fixed in 'make install'rm -rf %{buildroot}/etc/rc.d/rc?.d/*ipsecinstall -d -m 0700 %{buildroot}%{_localstatedir}/run/plutoinstall -d %{buildroot}%{_sbindir}%if %{buildklips}mkdir -p %{buildroot}/lib/modules/%{kversion}/kernel/net/ipsecfor i in $FS/BUILD.%{_target_cpu}/ipsec.ko  $FS/modobj/ipsec.odo  if [ -f $i ]  then    cp $i %{buildroot}/lib/modules/%{kversion}/kernel/net/ipsec   fidone%endif%cleanrm -rf ${RPM_BUILD_ROOT}%files doc%defattr(-,root,root)%doc doc#%files userland%files %defattr(-,root,root)%doc BUGS CHANGES COPYING CREDITS README LICENSE ROADMAP.txt%doc doc/manpage.d/*# /usr/share/doc/openswan/*%attr(0644,root,root) %config(noreplace) %{_sysconfdir}/ipsec.conf%attr(0700,root,root) %dir %{_sysconfdir}/ipsec.d%attr(0644,root,root) %config(noreplace) %{_sysconfdir}/ipsec.d/policies/*%attr(0644,root,root) %{_sysconfdir}/ipsec.d/examples/*%{_localstatedir}/run/pluto%config(noreplace) %{_initrddir}/ipsec%{_libdir}/ipsec%{_sbindir}/ipsec%{_libexecdir}/ipsec%doc %{_mandir}/*/*%if %{buildklips}%files klips%defattr (-,root,root)/lib/modules/%{kversion}/kernel/net/ipsec%endif%pre %preun if [ $1 = 0 ]; then    /sbin/service ipsec stop || :    /sbin/chkconfig --del ipsecfi%postun userlandif [ $1 -ge 1 ] ; then  /sbin/service ipsec stop 2>&1 > /dev/null && /sbin/service ipsec start  2>&1 > /dev/null || :fi%if %{buildklips}%postun klips%post klips/sbin/depmod -ae %{kversion}%endif%post /sbin/chkconfig --add ipsec%changelog* Mon Oct 10 2005 Paul Wouters <paul@xelerance.com> - Updated for klips on xen - added ldconfig for %post klips to obtain ipsec module dependancies- Run 'make include' since on FC4 kernel source does not have the links yet.* Wed Jan  5 2005 Paul Wouters <paul@xelerance.com>- Updated for x86_64 and klips on 2.6* Sun Sep  5 2004 Paul Wouters <paul@xelerance.com>- Updated for openswan* Fri Aug 22 2003 Sam Sgro <sam@freeswan.org>- Juggling release/source package names to allow for   -pre/-rc releases to build.* Thu Aug 14 2003 Sam Sgro <sam@freeswan.org>- Reverting back to pre-x.509 version, cosmetic changes.* Tue May 20 2003 Charlie Brady <charlieb@e-smith.com> 2.0.0-x509_1.3.2_2es- Add "Obsoletes: freeswan" to userland RPM.* Fri May 16 2003 Charlie Brady <charlieb@e-smith.com> 2.0.0-x509_1.3.2_1es- Add version 1.3.2 of the x509 patch.- Add missing /usr/libexec/ipsec dir and files.- Minor tidy up of spec file.* Thu May 15 2003 Charlie Brady <charlieb@e-smith.com> 2.0.0-1es- Based on work by Paul Lahaie of Steamballoon, Michael  Richardson of freeS/WAN team and Tuomo Soini <tis@foobar.fi>.- Build freeswan RPMs from a single source RPM, for RedHat, but  should work on any RPM based system.