-
Notifications
You must be signed in to change notification settings - Fork 12
/
Copy pathnethserver-openvpn.spec
261 lines (191 loc) · 12 KB
/
nethserver-openvpn.spec
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
Summary: NethServer OpenVPN configuration
Name: nethserver-openvpn
Version: 1.15.0
Release: 1%{?dist}
License: GPL
URL: %{url_prefix}/%{name}
Source0: %{name}-%{version}.tar.gz
BuildArch: noarch
Requires: openvpn, bridge-utils
Requires: nethserver-firewall-base
Requires: nethserver-vpn-ui
Requires: pam_oath
BuildRequires: perl
BuildRequires: nethserver-devtools
%description
NethServer OpenVPN configuration
%prep
%setup
%build
%{makedocs}
perl createlinks
mkdir -p root%{perl_vendorlib}
mkdir -p root/etc/systemd/system/[email protected]/
mv -v lib/perl/NethServer root%{perl_vendorlib}
%install
rm -rf %{buildroot}
(cd root; find . -depth -print | cpio -dump %{buildroot})
%{genfilelist} %{buildroot} \
--dir /var/spool/openvpn 'attr(0700,srvmgr,srvmgr)' \
--dir /var/lib/nethserver/certs/clients 'attr(0740,srvmgr,adm)' \
--dir /var/lib/nethserver/openvpn-tunnels 'attr(0740,srvmgr,adm)' \
--dir /etc/systemd/system/[email protected] 'attr(0755,root,root)' \
--dir /etc/openvpn/ccd 'attr(0740,srvmgr,srvmgr)' > %{name}-%{version}-filelist \
--file /etc/sudoers.d/20_nethserver_openvpn 'attr(0440,root,root)'
echo "%doc COPYING" >> %{name}-%{version}-filelist
%pre
# ensure srvmgr user exists:
# tunnel files and spool must be owned by srvmgr user otherwise
# httpd-admin will not be able to manage them
if ! id srvmgr >/dev/null 2>&1 ; then
useradd -r -U -G adm srvmgr
fi
%post
%preun
%files -f %{name}-%{version}-filelist
%defattr(-,root,root)
%dir %{_nseventsdir}/%{name}-update
%dir %attr(0750,root,adm) /var/lib/nethserver/certs
%changelog
* Fri Mar 11 2022 Giacomo Sanchietti <[email protected]> - 1.15.0-1
- OpenVPN mail notification - NethServer/dev#6643
* Tue Jun 29 2021 Giacomo Sanchietti <[email protected]> - 1.14.0-1
- OpenVPN R2W: Display the server wan IP used by the client to connect - NethServer/dev#6531
* Thu Apr 29 2021 Giacomo Sanchietti <[email protected]> - 1.13.2-1
- Add OpenVPN-Tunnel to the configuration backup - Bug NethServer/dev#6498
* Wed Dec 23 2020 Giacomo Sanchietti <[email protected]> - 1.13.1-1
- Missing srvmgr user prevents OpenVPN file upload and cause wrong backup config history file owner - Bug NethServer/dev#6375
* Tue Dec 01 2020 Giacomo Sanchietti <[email protected]> - 1.13.0-1
- RemoteNetworks also with the subnet topology - NethServer/dev#6345
* Tue Aug 25 2020 Giacomo Sanchietti <[email protected]> - 1.12.1-1
- VPN Roadwarrior: unable to load accounts - Bug NethServer/dev#6242
* Fri May 29 2020 Giacomo Sanchietti <[email protected]> - 1.12.0-1
- OpenVPN RW: Don't restart service immediately on user creation/deletion - NethServer/dev#6177
* Wed May 06 2020 Giacomo Sanchietti <[email protected]> - 1.11.0-1
- VPN RW: optional push dhcp settings - NethServer/dev#6146
* Wed Apr 29 2020 Giacomo Sanchietti <[email protected]> - 1.10.1-1
- VPN R2W : Custom certificate EOL - NethServer/dev#6145
* Tue Apr 28 2020 Giacomo Sanchietti <[email protected]> - 1.10.0-1
- VPN: allow traffic between roadwarrior clients and tunnels - NethServer/dev#6136
- Use subnet topology for OpenVPN roadwarrior - NethServer/dev#6133
- OpenVPN: New policy certificate-otp for RW - NethServer/dev#6112
- Openvpn: verify the $username ENV matches the common-name ENV - NethServer/dev#6111
- Restore configuration without network override - NethServer/dev#6099
* Wed Mar 18 2020 Giacomo Sanchietti <[email protected]> - 1.9.2-1
- Bad sudoers permission - Bug Nethserver/dev#6081
* Thu Dec 19 2019 Giacomo Sanchietti <[email protected]> - 1.9.1-1
- Bad OpenVPN roadwarrior certificate permissions - Bug NethServer/dev#6000
* Wed Sep 18 2019 Giacomo Sanchietti <[email protected]> - 1.9.0-1
- Statistics on OpenVPN connections - NethServer/dev#5827
* Wed Jun 19 2019 Giacomo Sanchietti <[email protected]> - 1.8.0-1
- VPN Cockpit UI - NethServer/dev#5760
- Firewall library: do not break on empty value
- Always enable passtos for roadwarror server
* Tue Mar 26 2019 Giacomo Sanchietti <[email protected]> - 1.7.3-1
- OpenVPN server network validator - Bug NethServer/dev#5736
* Mon Jan 21 2019 Giacomo Sanchietti <[email protected]> - 1.7.2-1
- OpenVPN RoadWarrior: client configuration not working if LZO compression enabled - Bug NethServer/dev#5698
* Fri Jan 18 2019 Giacomo Sanchietti <[email protected]> - 1.7.1-1
- nethserver-openvpn: failure of template expansion on armhfp - Bug NethServer/dev#5681
* Mon Dec 03 2018 Davide Principi <[email protected]> - 1.7.0-1
- OpenVPN: remove deprecated comp-lzo option - NethServer/dev#5631
- OpenVPN: harden roadwarrior server - NethServer/dev#5632
* Thu Aug 23 2018 Stephane de Labrusse <[email protected]> - 1.6.15-1
- Openvpn Tunnel Client certificates are world readable - NethServer/dev#5569
- OpenVPN tunnel client not starting - NethServer/dev#5549
* Thu Aug 09 2018 Davide Principi <[email protected]> - 1.6.14-1
- Enhancement: (un)mask password fields - NethServer/dev#5554
* Wed Jun 20 2018 Giacomo Sanchietti <[email protected]> - 1.6.13-1
- OpenVPN: can't create P2P tunnel with default cipher - Bug NethServer/dev#5532
* Fri Jun 15 2018 Stephane de Labrusse <[email protected]> - 1.6.12-1
- Harden openvpn Tunnel - NethServer/dev#5498
* Mon Jun 04 2018 Giacomo Sanchietti <[email protected]> - 1.6.11-1
- OpenVPN log compressed multiple times - Bug NethServer/dev#5506
* Wed May 16 2018 Giacomo Sanchietti <[email protected]> - 1.6.10-1
- OpenVPN tunnel client doesn't switch to next remote IP - Bug NethServer/dev#5479
* Fri Apr 27 2018 Giacomo Sanchietti <[email protected]> - 1.6.9-1
- Create a specific logfile for each OpenVPN tunnel - nethserver/dev#5471
- Silence warning in the OpenVPN tunnels server config - Bug NethServer/dev#5469
* Wed Mar 28 2018 Davide Principi <[email protected]> - 1.6.8-1
- OpenVPN tunnels revert to UDP protocol - Bug NethServer/dev#5446
* Mon Nov 27 2017 Giacomo Sanchietti <[email protected]> - 1.6.7-1
- OpenVPN Tunnels don't restart after network modification - Bug NethServer/dev#5386
* Thu Oct 19 2017 Giacomo Sanchietti <[email protected]> - 1.6.6-1
- OpenVpn: bogus config on systems with a single red interface - Bug NethServer/dev#5362
* Fri Sep 08 2017 Giacomo Sanchietti <[email protected]> - 1.6.5-1
- CSRF and XSS vulnerabilities in server manager - Bug NethServer/dev#5345
* Tue Aug 08 2017 Giacomo Sanchietti <[email protected]> - 1.6.4-1
- OpenVPN: tunnel server stopped after runlevel-adjust - NethServer/dev#5340
* Wed Jul 26 2017 Giacomo Sanchietti <[email protected]> - 1.6.3-1
- net2net: fix typo for iroute option - NethServer/nethserver-openvpn#22
* Mon Jul 10 2017 Davide Principi <[email protected]> - 1.6.2-1
- Syntax error prevents ipsec tunnel from starting - Bug NethServer/dev#5332
* Fri Jul 07 2017 Giacomo Sanchietti <[email protected]> - 1.6.1-1
- OpenVPN firewall policy: allow ovpn to net - NethServer/dev#5328
* Fri Jun 30 2017 Giacomo Sanchietti <[email protected]> - 1.6.0-1
- OpenvPN: improve net2net tunnels - NethServer/dev#5313
- OpenVPN: add extra push options to roadwarrior server - NethServer/dev#5320
* Thu Jun 01 2017 Giacomo Sanchietti <[email protected]> - 1.5.1-1
- OpenVPN: can't edit existing system users - Bug NethServer/dev#5302
* Wed May 10 2017 Giacomo Sanchietti <[email protected]> - 1.5.0-1
- Upgrade from NS 6 via backup and restore - NethServer/dev#5234
* Thu Apr 20 2017 Giacomo Sanchietti <[email protected]> - 1.4.9-1
- OpenVPN 2.4 breaks CRL (Certificate Revocation List) - Bug NethServer/dev#5271
* Fri Mar 31 2017 Giacomo Sanchietti <[email protected]> - 1.4.8-1
- OpenVPN: road warrior network not added to trusted networks - NethServer/dev#5246
* Tue Mar 14 2017 Giacomo Sanchietti <[email protected]> - 1.4.7-1
- OpenVPN: no internet access if Route all client traffic through VPN is on - Bug NethServer/dev#5238
* Wed Feb 15 2017 Davide Principi <[email protected]> - 1.4.6-1
- OpenVPN: remove net2net client mode with user name and password authentication - NethServer/dev#5219
* Tue Feb 14 2017 Giacomo Sanchietti <[email protected]> - 1.4.5-1
- OpenVPN: clients not restarted after modification - Bug NethServer/dev#5213
* Wed Jan 18 2017 Giacomo Sanchietti <[email protected]> - 1.4.4-1
- OpenVPN: client not starting at boot - Bug NethServer/dev#5198
* Fri Dec 09 2016 Giacomo Sanchietti <[email protected]> - 1.4.3-1
- OpenVPN: bridged mode doesn't work - NethServer/dev#5173
* Tue Oct 04 2016 Giacomo Sanchietti <[email protected]> - 1.4.2-1
- Handle advanced static routes - NethServer/dev#5079
* Tue Sep 27 2016 Giacomo Sanchietti <[email protected]> - 1.4.1-1
- broken plugin link on nethserver-openvpn - Bug NethServer/dev#5115
* Thu Jul 07 2016 Stefano Fancello <[email protected]> - 1.4.0-1
- First NS7 release
* Fri May 20 2016 Giacomo Sanchietti <[email protected]> - 1.3.1-1
- Openvpn n2n not working after restore - Bug #3387 [NethServer]
* Fri Nov 20 2015 Davide Principi <[email protected]> - 1.3.0-1
- Public IP text field for OpenVPN - Enhancement #2635 [NethServer]
* Thu Aug 27 2015 Davide Principi <[email protected]> - 1.2.4-1
- Firewall rules: support hosts within VPN zones - Enhancement #3233 [NethServer]
* Thu Jul 16 2015 Giacomo Sanchietti <[email protected]> - 1.2.3-1
- IPsec tunnels (net2net) web interface - Feature #3194 [NethServer]
* Wed Jul 15 2015 Giacomo Sanchietti <[email protected]> - 1.2.2-1
- Event trusted-networks-modify - Enhancement #3195 [NethServer]
- With multiple GREEN networks configured, missing the route in host-to-net.conf for OpenVPN Client - Enhancement #3189 [NethServer]
* Tue May 19 2015 Giacomo Sanchietti <[email protected]> - 1.2.1-1
- OpenVPN fixed ip support via standard db prop - Feature #3169 [NethServer]
- OpenVPN: add UDP port to web interface - Enhancement #3164 [NethServer]
- Incorrect OpenVPN pushed DNS - Bug #3158 [NethServer]
- Network access via green lost if OpenVPN has a bad configuration - Bug #3074 [NethServer]
* Wed Mar 11 2015 Giacomo Sanchietti <[email protected]> - 1.2.0-1
- OpenVPN roadwarrior doesn't work with MultiWan configured - Bug #3061 [NethServer]
- VPN: missing firewall policy - Bug #3052 [NethServer]
- OpenVPN in bridged mode - missing gateway - Bug #3048 [NethServer]
- Adding a route should re-create vpn config files - Feature #3037 [NethServer]
- Template fragment for /etc/openvpn/host-to-net.conf add push for network added in networks db - Bug #3018 [NethServer]
* Tue Dec 09 2014 Giacomo Sanchietti <[email protected]> - 1.1.2-1.ns6
- DNS: remove role property from dns db key - Enhancement #2915 [NethServer]
* Tue Nov 04 2014 Giacomo Sanchietti <[email protected]> - 1.1.1-1.ns6
- Firewall fallback when IPS is not running - Enhancement #2935 [NethServer]
* Wed Aug 20 2014 Davide Principi <[email protected]> - 1.1.0-1.ns6
- OpenVPN: firewall rules for tun/tap devices - Enhancement #2813 [NethServer]
- IDS/IPS (snort) - Feature #1771 [NethServer]
* Wed Feb 05 2014 Davide Principi <[email protected]> - 1.0.2-1.ns6
- OpenVPN Downloaded client configuration contains a bad directive - Bug #2624 [NethServer]
- OpenVPN name resolution - Bug #2525 [NethServer]
- Move admin user in LDAP DB - Feature #2492 [NethServer]
- Dashboard: OpenVPN status widget - Enhancement #2300 [NethServer]
* Thu Oct 24 2013 Giacomo Sanchietti <[email protected]> - 1.0.1-1.ns6
- Avoid event block during bridge creation #1956
* Wed Oct 23 2013 Davide Principi <[email protected]> - 1.0.0-1.ns6
- VPN: add support for OpenVPN net2net - Feature #1958 [NethServer]
- VPN: support for OpenVPN roadwarrior - Feature #1956 [NethServer]
- VPN - Feature #1763 [NethServer]