-
Notifications
You must be signed in to change notification settings - Fork 1
/
openconnect.spec
449 lines (321 loc) · 15 KB
/
openconnect.spec
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
#% define gitcount 211
#% define gitrev 584c84f
%if 0%{?gitcount} > 0
%define gitsuffix -%{gitcount}-g%{gitrev}
%define relsuffix .git%{gitcount}_%{gitrev}
%endif
# RHEL6 still has ancient GnuTLS
%define use_gnutls 0%{?fedora} || 0%{?rhel} >= 7
# RHEL5 has no libproxy, and no make_install macro
%if 0%{?rhel} && 0%{?rhel} <= 5
%define use_libproxy 0
%define make_install %{__make} install DESTDIR=%{?buildroot}
%define use_tokens 0
%else
%define use_libproxy 1
%define use_tokens 1
%endif
%{!?_pkgdocdir: %global _pkgdocdir %{_docdir}/%{name}-%{version}}
Name: openconnect
Version: 7.07
Release: 3%{?relsuffix}%{?dist}
Summary: Open client for Cisco AnyConnect VPN
Group: Applications/Internet
License: LGPLv2+
URL: http://www.infradead.org/openconnect.html
Source0: ftp://ftp.infradead.org/pub/openconnect/openconnect-%{version}%{?gitsuffix}.tar.gz
%if 0%{?gitcount} == 0
Source1: ftp://ftp.infradead.org/pub/openconnect/openconnect-%{version}%{?gitsuffix}.tar.gz.asc
%endif
Source2: gpgkey-BE07D9FD54809AB2C4B0FF5F63762CDA67E2F359.asc
Source3: macros.gpg
Patch0: openconnect-7.07_library.c_juniper_hack.patch
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
BuildRequires: pkgconfig(libxml-2.0) pkgconfig(libpcsclite) krb5-devel gnupg2
BuildRequires: autoconf automake libtool python gettext pkgconfig(liblz4)
BuildRequires: pkgconfig(uid_wrapper) pkgconfig(socket_wrapper)
%if 0%{?fedora} || 0%{?rhel} >= 7
Obsoletes: openconnect-lib-compat%{?_isa} < %{version}-%{release}
Requires: vpnc-script
%else
Requires: vpnc
%endif
%if %{use_gnutls}
BuildRequires: pkgconfig(gnutls) trousers-devel
%else
BuildRequires: pkgconfig(openssl) pkgconfig(libp11) pkgconfig(p11-kit-1)
%endif
%if %{use_libproxy}
BuildRequires: pkgconfig(libproxy-1.0)
%endif
%if %{use_tokens}
BuildRequires: pkgconfig(stoken) pkgconfig(libpskc)
%endif
%description
This package provides a client for the Cisco AnyConnect VPN protocol, which
is based on HTTPS and DTLS.
%package devel
Summary: Development package for OpenConnect VPN authentication tools
Group: Applications/Internet
Requires: %{name}%{?_isa} = %{version}-%{release}
# RHEL5 needs these spelled out because it doesn't automatically infer from pkgconfig
%if 0%{?rhel} && 0%{?rhel} <= 5
Requires: openssl-devel zlib-devel
%endif
%description devel
This package provides the core HTTP and authentication support from
the OpenConnect VPN client, to be used by GUI authentication dialogs
for NetworkManager etc.
%prep
%setup -q -n openconnect-%{version}%{?gitsuffix}
%patch0 -p1 -b .juniper_default
%build
%configure --with-vpnc-script=/etc/vpnc/vpnc-script \
--with-default-gnutls-priority="@SYSTEM" \
%if !%{use_gnutls}
--with-openssl --without-openssl-version-check \
%endif
--htmldir=%{_pkgdocdir}
make %{?_smp_mflags} V=1
%install
rm -rf $RPM_BUILD_ROOT
%make_install
mkdir -p $RPM_BUILD_ROOT/%{_pkgdocdir}
rm -f $RPM_BUILD_ROOT/%{_libdir}/libopenconnect.la
%find_lang %{name}
%check
make check
%clean
rm -rf $RPM_BUILD_ROOT
%post -p /sbin/ldconfig
%postun -p /sbin/ldconfig
%files -f %{name}.lang
%defattr(-,root,root,-)
%{_libdir}/libopenconnect.so.5*
%{_sbindir}/openconnect
%{_mandir}/man8/*
%doc TODO COPYING.LGPL
%doc %{_pkgdocdir}
%files devel
%defattr(-,root,root,-)
%{_libdir}/libopenconnect.so
/usr/include/openconnect.h
%{_libdir}/pkgconfig/openconnect.pc
%changelog
* Wed Jul 27 2016 Jonathan Steffan <[email protected]> 7.07-3
- Force Juniper mode by default patch
* Mon Jul 11 2016 David Woodhouse <[email protected]> - 7.07-2
- Enable Kerberos and PSKC support
* Mon Jul 11 2016 David Woodhouse <[email protected]> - 7.07-1
- Update to 7.07 release (#1268198)
- Enable PKCS#11 and Yubikey OATH support for OpenSSL (i.e. EL6) build
* Tue Mar 22 2016 David Woodhouse <[email protected]> - 7.06-7
- Switch to using GPGv2 for signature check
* Mon Mar 21 2016 David Woodhouse <[email protected]> - 7.06-6
- Check GPG signature as part of build
* Tue Feb 02 2016 Dennis Gilmore <[email protected]> - 7.06-4
- add upstream patch to fix ipv6 only setups
* Thu Oct 29 2015 Peter Robinson <[email protected]> 7.06-3
- Fix FTBFS by including packaged docs
* Wed Jun 17 2015 Fedora Release Engineering <[email protected]> - 7.06-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
* Tue Mar 17 2015 David Woodhouse <[email protected]> - 7.06-1
- Update to 7.06 release
* Wed Mar 11 2015 Nikos Mavrogiannopoulos <[email protected]> - 7.05-2
- Utilize and enforce system-wide policies (#1179331)
* Tue Mar 10 2015 David Woodhouse <[email protected]> - 7.05-1
- Update to 7.05 release
* Sun Jan 25 2015 David Woodhouse <[email protected]> - 7.04-1
- Update to 7.04 release
* Fri Jan 09 2015 David Woodhouse <[email protected]> - 7.03-1
- Update to 7.03 release (#1179681)
* Fri Dec 19 2014 David Woodhouse <[email protected]> - 7.02-1
- Update to 7.02 release (#1175951)
* Sun Dec 07 2014 David Woodhouse <[email protected]> - 7.01-1
- Update to 7.01 release
* Thu Nov 27 2014 David Woodhouse <[email protected]> - 7.00-2
- Add upstreamed version of Nikos' curve patch with version.c fixed
* Thu Nov 27 2014 David Woodhouse <[email protected]> - 7.00-1
- Update to 7.00 release
* Tue Sep 16 2014 Nikos Mavrogiannopoulos <[email protected]> - 6.00-2
- When compiling with old gnutls version completely disable ECDHE instead
of disabling the curves.
* Sun Aug 17 2014 Fedora Release Engineering <[email protected]> - 6.00-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
* Tue Jul 08 2014 David Woodhouse <[email protected]> - 6.00-1
- Update to 6.00 release
* Sat Jun 07 2014 Fedora Release Engineering <[email protected]> - 5.99-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Wed Mar 05 2014 David Woodhouse <[email protected]> - 5.99-1
- Update to 5.99 release
* Wed Jan 01 2014 David Woodhouse <[email protected]> - 5.02-1
- Update to 5.02 release (#981911, #991653, #1031886)
* Sat Aug 17 2013 Peter Robinson <[email protected]> 5.01-4
- Fix install of docs
* Sat Aug 03 2013 Fedora Release Engineering <[email protected]> - 5.01-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
* Thu Jun 06 2013 David Woodhouse <[email protected]> - 5.01-2
- Build with stoken and OATH support.
* Sat Jun 01 2013 David Woodhouse <[email protected]> - 5.01-1
- Update to 5.01 release (#955710, #964329, #964650)
* Wed May 15 2013 David Woodhouse <[email protected]> - 5.00-1
- Update to 5.00 release
* Thu Feb 07 2013 David Woodhouse <[email protected]> - 4.99-1
- Update to 4.99 release
* Fri Aug 31 2012 David Woodhouse <[email protected]> - 4.07-2
- Obsolete openconnect-lib-compat (#842840)
* Fri Aug 31 2012 David Woodhouse <[email protected]> - 4.07-1
- Update to 4.07 release (Fix #845636 CSTP write stall handling)
* Mon Jul 23 2012 David Woodhouse <[email protected]> - 4.06-1
- Update to 4.06 release
* Fri Jul 20 2012 Fedora Release Engineering <[email protected]> - 4.05-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
* Thu Jul 12 2012 David Woodhouse <[email protected]> - 4.05-1
- Update to 4.05 release (PKCS#11 fixes)
* Thu Jul 05 2012 David Woodhouse <[email protected]> - 4.04-1
- Update to 4.04 release (Fix PKCS#8 password handling)
* Mon Jul 02 2012 David Woodhouse <[email protected]> - 4.03-1
- Update to 4.03 release (#836558)
* Thu Jun 28 2012 David Woodhouse <[email protected]> - 4.02-1
- Update to 4.02 release
* Thu Jun 28 2012 David Woodhouse <[email protected]> - 4.01-1
- Update to 4.01 release
* Thu Jun 21 2012 David Woodhouse <[email protected]> - 4.00-3
- Remove zlib from openconnect.pc dependencies
* Thu Jun 21 2012 David Woodhouse <[email protected]> - 4.00-2
- Fix dependencies for RHEL[56]
* Wed Jun 20 2012 David Woodhouse <[email protected]> - 4.00-1
- Update to 4.00 release
* Wed Jun 20 2012 David Woodhouse <[email protected]> - 3.99-8
- Add support for building on RHEL[56]
* Wed Jun 20 2012 David Woodhouse <[email protected]> - 3.99-7
- Add OpenSSL encrypted PEM file support for GnuTLS
* Mon Jun 18 2012 David Woodhouse <[email protected]> - 3.99-6
- Fix crash on cleanup when no client certificate is set (#833141)
* Sat Jun 16 2012 David Woodhouse <[email protected]> - 3.99-5
- Enable building compatibility libopenconnect.so.1
* Thu Jun 14 2012 David Woodhouse <[email protected]> - 3.99-4
- Last patch needs autoreconf
* Thu Jun 14 2012 David Woodhouse <[email protected]> - 3.99-3
- Fix library not to reference OpenSSL symbols when linked against GnuTLS 2
* Thu Jun 14 2012 David Woodhouse <[email protected]> - 3.99-2
- Fix GnuTLS BuildRequires
* Thu Jun 14 2012 David Woodhouse <[email protected]> - 3.99-1
- Update to OpenConnect v3.99, use GnuTLS (enables PKCS#11 support)
* Sat May 19 2012 David Woodhouse <[email protected]> - 3.20-2
- openconnect-devel package should require precisely matching openconnect
* Fri May 18 2012 David Woodhouse <[email protected]> - 3.20-1
- Update to 3.20.
* Thu May 17 2012 David Woodhouse <[email protected]> - 3.19-1
- Update to 3.19.
* Thu Apr 26 2012 David Woodhouse <[email protected]> - 3.18-1
- Update to 3.18.
* Fri Apr 20 2012 David Woodhouse <[email protected]> - 3.17-1
- Update to 3.17.
* Sun Apr 08 2012 David Woodhouse <[email protected]> - 3.16-1
- Update to 3.16.
* Fri Jan 13 2012 Fedora Release Engineering <[email protected]> - 3.15-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
* Fri Nov 25 2011 David Woodhouse <[email protected]> - 3.15-1
- Update to 3.15.
* Fri Sep 30 2011 David Woodhouse <[email protected]> - 3.14-1
- Update to 3.14.
* Fri Sep 30 2011 David Woodhouse <[email protected]> - 3.13-1
- Update to 3.13. (Add localisation support, --cert-expire-warning)
* Mon Sep 12 2011 David Woodhouse <[email protected]> - 3.12-1
* Update to 3.12. (Fix DTLS compatibility issue with new ASA firmware)
* Wed Jul 20 2011 David Woodhouse <[email protected]> - 3.11-1
- Update to 3.11. (Fix compatibility issue with servers requiring TLS)
* Thu Jun 30 2011 David Woodhouse <[email protected]> - 3.10-1
- Update to 3.10. (Drop static library, ship libopenconnect.so.1)
* Tue Apr 19 2011 David Woodhouse <[email protected]> - 3.02-2
- Fix manpage (new tarball)
* Tue Apr 19 2011 David Woodhouse <[email protected]> - 3.02-1
- Update to 3.02.
* Thu Mar 17 2011 David Woodhouse <[email protected]> - 3.01-2
- Provide openconnect-devel-static (#688349)
* Wed Mar 9 2011 David Woodhouse <[email protected]> - 3.01-1
- Update to 3.01.
* Wed Mar 9 2011 David Woodhouse <[email protected]> - 3.00-1
- Update to 3.00.
* Tue Feb 08 2011 Fedora Release Engineering <[email protected]> - 2.26-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
* Sun Nov 21 2010 David Woodhouse <[email protected]> - 2.26-4
- Fix bug numbers in changelog
* Wed Sep 29 2010 jkeating - 2.26-3
- Rebuilt for gcc bug 634757
* Wed Sep 22 2010 David Woodhouse <[email protected]> - 2.26-1
- Update to 2.26. (#629979: SIGSEGV in nm-openconnect-auth-dialog)
* Thu Aug 12 2010 David Woodhouse <[email protected]> - 2.25-2
- Rebuild for new libproxy
* Sat May 15 2010 David Woodhouse <[email protected]> - 2.25-1
- Update to 2.25.
* Fri May 7 2010 David Woodhouse <[email protected]> - 2.24-1
- Update to 2.24.
* Fri Apr 9 2010 David Woodhouse <[email protected]> - 2.23-1
- Update to 2.23.
* Sun Mar 7 2010 David Woodhouse <[email protected]> - 2.22-1
- Update to 2.22. (Works around server bug in ASA version 8.2.2.5)
* Sun Jan 10 2010 David Woodhouse <[email protected]> - 2.21-1
- Update to 2.21.
* Mon Jan 4 2010 David Woodhouse <[email protected]> - 2.20-1
- Update to 2.20.
* Mon Dec 7 2009 David Woodhouse <[email protected]> - 2.12-1
- Update to 2.12.
* Tue Nov 17 2009 David Woodhouse <[email protected]> - 2.11-1
- Update to 2.11.
* Wed Nov 4 2009 David Woodhouse <[email protected]> - 2.10-1
- Update to 2.10.
* Fri Aug 21 2009 Tomas Mraz <[email protected]> - 2.01-3
- rebuilt with new openssl
* Sat Jul 25 2009 Fedora Release Engineering <[email protected]> - 2.01-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
* Wed Jun 24 2009 David Woodhouse <[email protected]> - 2.01-1
- Update to 2.01.
* Wed Jun 3 2009 David Woodhouse <[email protected]> - 2.00-1
- Update to 2.00.
* Wed May 27 2009 David Woodhouse <[email protected]> - 1.40-1
- Update to 1.40.
* Wed May 13 2009 David Woodhouse <[email protected]> - 1.30-1
- Update to 1.30.
* Fri May 8 2009 David Woodhouse <[email protected]> - 1.20-1
- Update to 1.20.
* Tue Apr 21 2009 David Woodhouse <[email protected]> - 1.10-2
- Require openssl0.9.8k-4, which has all required DTLS patches.
* Wed Apr 1 2009 David Woodhouse <[email protected]> - 1.10-1
- Update to 1.10.
* Wed Mar 18 2009 David Woodhouse <[email protected]> - 1.00-1
- Update to 1.00.
* Thu Feb 26 2009 Fedora Release Engineering <[email protected]> - 0.99-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
* Sat Jan 17 2009 Tomas Mraz <[email protected]> - 0.99-2
- rebuild with new openssl
* Tue Dec 16 2008 David Woodhouse <[email protected]> - 0.99-1
- Update to 0.99.
- Fix BuildRequires
* Mon Nov 24 2008 David Woodhouse <[email protected]> - 0.98-1
- Update to 0.98.
* Thu Nov 13 2008 David Woodhouse <[email protected]> - 0.97-1
- Update to 0.97. Add man page, validate server certs.
* Tue Oct 28 2008 David Woodhouse <[email protected]> - 0.96-1
- Update to 0.96. Handle split-includes, MacOS port, more capable SecurID.
* Thu Oct 09 2008 David Woodhouse <[email protected]> - 0.95-1
- Update to 0.95. A few bug fixes.
* Thu Oct 09 2008 David Woodhouse <[email protected]> - 0.94-3
- Include COPYING.LGPL file
* Tue Oct 07 2008 David Woodhouse <[email protected]> - 0.94-2
- Fix auth-dialog crash
* Mon Oct 06 2008 David Woodhouse <[email protected]> - 0.94-1
- Take cookie on stdin so it's not visible in ps.
- Support running 'script' and passing traffic to it via a socket
- Fix abort when fetching XML config fails
* Sun Oct 05 2008 David Woodhouse <[email protected]> - 0.93-1
- Work around unexpected disconnection (probably OpenSSL bug)
- Handle host list and report errors in NM auth dialog
* Sun Oct 05 2008 David Woodhouse <[email protected]> - 0.92-1
- Rename to 'openconnect'
- Include NetworkManager auth helper
* Thu Oct 02 2008 David Woodhouse <[email protected]> - 0.91-1
- Update to 0.91
* Thu Oct 02 2008 David Woodhouse <[email protected]> - 0.90-1
- First package