diff --git a/README.md b/README.md index c7b1e3b..cace36e 100644 --- a/README.md +++ b/README.md @@ -1,2 +1,9 @@ # ipsec-tools +IPsec-Tools is a port of KAME's IPsec utilities to the Linux-2.5+ IPsec implementation. +Contents: +* libipsec: a library with PF_KEY implementation +* setkey: a tool to manipulate and dump the kernel Security Policy Database + (SPD) and Security Association Database (SAD) +* racoon: an IKEv1 (Internet Key Exchange) keying daemon + diff --git a/ipsec-tools-psk.txt b/ipsec-tools-psk.txt new file mode 100644 index 0000000..ee0a348 --- /dev/null +++ b/ipsec-tools-psk.txt @@ -0,0 +1,7 @@ +# file for pre-shared keys used for IKE authentication +# format is: 'identifier' 'key' +# For example: +# +# 10.1.1.1 flibbertigibbet +# www.example.com 12345 +# foo@www.example.com micropachycephalosaurus diff --git a/ipsec-tools-racoon.conf b/ipsec-tools-racoon.conf new file mode 100644 index 0000000..ff2db5d --- /dev/null +++ b/ipsec-tools-racoon.conf @@ -0,0 +1,16 @@ + +# Racoon IKE daemon configuration file. +# See 'man racoon.conf' for a description of the format and entries. + +path include "/etc/racoon"; +path pre_shared_key "/etc/racoon/psk.txt"; +path certificate "/etc/racoon/certs"; + +sainfo anonymous +{ + pfs_group 2; + lifetime time 1 hour ; + encryption_algorithm 3des, blowfish 448, rijndael ; + authentication_algorithm hmac_sha1, hmac_md5 ; + compression_algorithm deflate ; +} diff --git a/ipsec-tools.spec b/ipsec-tools.spec new file mode 100644 index 0000000..50d3ceb --- /dev/null +++ b/ipsec-tools.spec @@ -0,0 +1,126 @@ +Name: ipsec-tools +Version: 0.8.2 +Release: 1mamba +Summary: Tools for configuring and using IPSEC +Group: Applications/Networking +Vendor: openmamba +Distribution: openmamba +Packager: Silvan Calarco +URL: http://ipsec-tools.sourceforge.net/ +Source0: http://downloads.sourceforge.net/sourceforge/ipsec-tools/ipsec-tools-%{version}.tar.bz2 +Source1: ipsec-tools-racoon.conf +Source2: ipsec-tools-psk.txt +License: GPL +BuildRequires: libreadline-devel +BuildRequires: libopenssl-devel +BuildRequires: libkrb5-devel +BuildRequires: bison, flex +BuildRoot: %{_tmppath}/%{name}-%{version}-root + +%description +IPsec-Tools is a port of KAME's IPsec utilities to the Linux-2.5+ IPsec implementation. +Contents: +* libipsec: a library with PF_KEY implementation +* setkey: a tool to manipulate and dump the kernel Security Policy Database + (SPD) and Security Association Database (SAD) +* racoon: an IKEv1 (Internet Key Exchange) keying daemon + +%package devel +Summary: Devel package for ipsec-tools +Group: Development/Libraries +Requires: %{name} = %{?epoch:%epoch:}%{version}-%{release} + +%description devel +IPsec-Tools is a port of KAME's IPsec utilities to the Linux-2.6 IPsec implementation. +This package contains static libraries and header files need for development. + +%prep +%setup -q + +%build +%configure \ + --with-kernel-headers=%{_includedir} \ + --sysconfdir=%{_sysconfdir}/racoon \ + --enable-adminport \ + --enable-dpd \ + --enable-frag \ + --enable-gssapi \ + --enable-hybrid \ + --enable-natt \ + --enable-shared \ + --without-readline + +%make -j1 + +%install +[ "%{buildroot}" != / ] && rm -rf "%{buildroot}" +%makeinstall + +install -d %{buildroot}/sbin +mv %{buildroot}%{_sbindir}/setkey %{buildroot}/sbin + +install -D -m600 %{S:1} %{buildroot}%{_sysconfdir}/racoon/racoon.conf +install -D -m600 %{S:2} %{buildroot}%{_sysconfdir}/racoon/psk.txt + +install -d %{buildroot}%{buildroot}%{_sysconfdir}/racoon +install -d -m0700 %{buildroot}%{_sysconfdir}/racoon/certs + +%clean +[ "%{buildroot}" != / ] && rm -rf "%{buildroot}" + +%post -p /sbin/ldconfig +%postun -p /sbin/ldconfig + +%files +%defattr(-,root,root) +/sbin/* +%{_sbindir}/* +%dir %{_sysconfdir}/racoon +%dir %{_sysconfdir}/racoon/certs +%config(noreplace) /etc/racoon/psk.txt +%config(noreplace) /etc/racoon/racoon.conf +%{_libdir}/*.so.* +%dir /var/racoon +%{_mandir}/man5/* +%{_mandir}/man8/* +%doc ChangeLog NEWS README +%doc src/racoon/samples/{racoon.conf,psk.txt} +%doc src/racoon/doc/FAQ + +%files devel +%defattr(-,root,root) +%dir %{_includedir}/libipsec +%{_includedir}/libipsec/*.h +%dir %{_includedir}/racoon +%{_includedir}/racoon/*.h +%{_libdir}/*.a +%{_libdir}/*.la +%{_libdir}/*.so +%{_mandir}/man3/* + +%changelog +* Fri Apr 11 2014 Automatic Build System 0.8.2-1mamba +- automatic version update by autodist + +* Tue Jan 22 2013 Automatic Build System 0.8.1-1mamba +- automatic version update by autodist + +* Fri Mar 18 2011 Automatic Build System 0.8.0-1mamba +- automatic update by autodist + +* Tue Jan 27 2009 Silvan Calarco 0.7.1-1mamba +- automatic update by autodist + +* Wed May 14 2008 Aleph0 0.7-1mamba +- update to 0.7 + +* Tue Feb 07 2006 Davide Madrisan 0.6.5-1qilnx +- update to version 0.6.5 by autospec +- fixed package groups +- moved man3 pages to devel package +- added documentation and configuration files +- fixed kernel-headers path +- added missing build requirements + +* Mon May 24 2004 Silvan Calarco 0.3.2-1qilnx +- first build