%global selinuxtype targeted %global moduletype contrib %global modulename arachne Name: arachne Version: 1.3.10.git_2407291427_8628f1c Release: 1 License: GPLv3 Source0: %{name}-%{version}.tar.gz Summary: Administration server for openVPN BuildArch: noarch Url: https://github.com/nieslony/arachne BuildRequires: maven-openjdk17 BuildRequires: java-17-openjdk-devel BuildRequires: systemd-rpm-macros BuildRequires: selinux-policy-devel BuildRequires: pkgconfig(systemd) %{?selinux_requires} Requires: java-17-openjdk-headless Requires: openvpn Requires: openvpn-plugin-arachne Requires: arachne-dbus Recommends: httpd %description Administration server for openVPN %prep %setup #-n % source_dir %build mvn --no-transfer-progress package make -f /usr/share/selinux/devel/Makefile arachne.pp %install mkdir -pv %{buildroot}/%{_datadir}/%{name} mkdir -pv %{buildroot}/%{_unitdir} install -v %{_builddir}/%{?buildsubdir}/target/Arachne.jar %{buildroot}/%{_datadir}/%{name} install -v %{name}.service %{buildroot}/%{_unitdir} install -d %{buildroot}%{_datadir}/selinux/packages install -m 0644 arachne.pp %{buildroot}%{_datadir}/selinux/packages %pre %selinux_relabel_pre -s %{selinuxtype} %post %selinux_modules_install -s %{selinuxtype} %{_datadir}/selinux/packages/arachne.pp semanage boolean --modify --on httpd_can_network_connect_db getent group arachne || groupadd --system arachne getent passwd arachne || \ useradd \ --comment "Arachne openVPN Administrator" \ --home-dir /var/lib/arachne \ --create-home \ --gid arachne \ --system \ --shell /bin/false \ arachne mkdir -pv /var/lib/arachne/{arachneconfig,vpnconfig} chown -v arachne.arachne /var/lib/arachne/{arachneconfig,vpnconfig} ln -fsv \ /var/lib/arachne/vpnconfig/openvpn-user-server.conf \ /etc/openvpn/server/arachne-user.conf ln -fsv \ /var/lib/arachne/vpnconfig/openvpn-site-server.conf \ /etc/openvpn/server/arachne-site.conf %postun if [ $1 -eq 0 ]; then %selinux_modules_uninstall -s %{selinuxtype} arachne || : fi %posttrans %selinux_relabel_post -s %{selinuxtype} || : %files %{_unitdir}/%{name}.service %dir %{_datadir}/%{name}/ %{_datadir}/%{name}/Arachne.jar %license LICENSE %attr(0644,root,root) %{_datadir}/selinux/packages/arachne.pp %changelog * Mon Jul 29 2024 Claas Nieslony 1.3.10.git_2407291427_8628f1c-1 - Bump version of in.virit (github@nieslony.at) - Fix: download site VPN config (github@nieslony.at) - Add status of site VPN (github@nieslony.at) - Fix: initialization order (github@nieslony.at) - Fix: file name (github@nieslony.at) - Make ArachneDbus ready for site vpn (github@nieslony.at) - - switch from CentOS stream9 to AlmaLinux 9 - optimize custom provisioners (github@nieslony.at) - Update and rename README.txt -> README. (github@nieslony.at) - Update and rename README.txt -> README.md (github@nieslony.at) * Mon Jul 22 2024 Claas Nieslony 1.3.10.git_2407221316_a37f326-1 - Bump spring-security-kerberos, spring-boot-starter-parent (github@nieslony.at) - Ignore src/main/bundles (github@nieslony.at) - Get SSL cert from IPA server, openfirewall for 8443 (github@nieslony.at) - Bump vaadin version (github@nieslony.at) - Open API docs in new tab (github@nieslony.at) - Bump vaadin vertsion to 24.4 (github@nieslony.at) * Fri Jun 14 2024 Claas Nieslony 1.3.10.git_2406141752_1e6049b-1 - Enable HTTPS by default (github@nieslony.at) - Bump dependencies (github@nieslony.at) - Bump dependency versions (github@nieslony.at) * Wed May 29 2024 Claas Nieslony 1.3.10.git_2405292333_b74de79-1 - - Fix: connect to host - make upload progress dialog prettier (github@nieslony.at) * Wed May 29 2024 Claas Nieslony 1.3.10.git_2405291215_b7819cd-1 - Make clear which 'remote host' is meant (github@nieslony.at) * Thu May 23 2024 Claas Nieslony 1.3.10.git_2405232055_d18c4d1-1 - Move classes for site upload to own package (github@nieslony.at) - Move .ovpn upload to OvpnConfigUploadThread (github@nieslony.at) - Add NetworkManager connection for site VPN, implement ConfigUploadThread (github@nieslony.at) - Add /site and /site/{id} (github@nieslony.at) - Removed unused attributes, add NM con uuid (github@nieslony.at) - Bump vaadin version (github@nieslony.at) - Add upload type NetworkManager (github@nieslony.at) - Fix: update value (github@nieslony.at) - Bump vaadin and spring versions (github@nieslony.at) - Make API simpler (github@nieslony.at) - Replace attachment name (github@nieslony.at) - Handle MailSendException (github@nieslony.at) - Bump version of dependency (github@nieslony.at) - Change permissions of remote config (github@nieslony.at) - Bump version of bouncycastle (github@nieslony.at) - Add icons, set button as primary (github@nieslony.at) * Sun May 05 2024 Claas Nieslony 1.3.10.git_2405052121_b2c0998-1 - Add symlink for site vpn (github@nieslony.at) - Give more hints on ENV variables (github@nieslony.at) - Write CRL when saving site VPN basics (github@nieslony.at) * Sun May 05 2024 Claas Nieslony 1.3.10.git_2405052034_fe3f0ad-1 - * Wed May 01 2024 Claas Nieslony 1.3.10.git_2405012121_8ebfbf8-1 - Fix: empty SSH key (github@nieslony.at) - Prepare site-client-conf.d before saving site config (github@nieslony.at) - Save only if site is valid (github@nieslony.at) - Select correct site after saving (github@nieslony.at) - Split site vpn settings and vpn sites, create table vpn-sites (github@nieslony.at) - Update sites when switching tab (github@nieslony.at) - Add update-version.sh (github@nieslony.at) - Automatic commit of package [arachne] release [1.3.6.git_2404022217_5886f45-1]. (github@nieslony.at) - Fix: typo (github@nieslony.at) - Fix: config folder, notification message, no color output (github@nieslony.at) - Ad empty text instead of null (github@nieslony.at) - Automatic commit of package [arachne] release [0.1.3.git_2403211021_85d8b28-1]. (github@nieslony.at) - Show HTML messager (github@nieslony.at) - Automatic commit of package [arachne] release [1.3.5.git_2403211001_016b011-1]. (github@nieslony.at) - Bump dependencies (github@nieslony.at) - Bump dependencies (github@nieslony.at) - Fix: config file name (github@nieslony.at) - add extra_vars (github@nieslony.at) - Automatic commit of package [arachne] release [0.1.3.git_2403011547_2b59921-1]. (github@nieslony.at) - Specify destination host on upload (github@nieslony.at) - Remove some debugging code (github@nieslony.at) - - enable IPs allowed\n- enable DNS check (github@nieslony.at) - Replace constructor by with... (github@nieslony.at) - Automatic commit of package [arachne] release [0.1.3.git_2402212143_ad0faa6-1]. (github@nieslony.at) - Add dependency (github@nieslony.at) - Automatic commit of package [arachne] release [0.1.3_testing-1]. (github@nieslony.at) - Support copr (github@nieslony.at) - Add supported files (github@nieslony.at) - Fix: enable whitelist on non default page (github@nieslony.at) - use EditableListBox's default button (github@nieslony.at) - use EditableListBox's default button (github@nieslony.at) - Fix:page title (github@nieslony.at) - Write plugin site configuration (github@nieslony.at) - Remove debug message (github@nieslony.at) - Fix: disable/enable cpomponents (github@nieslony.at) - Handle empty sskKeys (github@nieslony.at) - Handle null value (github@nieslony.at) - Write plugin config for site VPN, renme method (github@nieslony.at) - Remove useless import (github@nieslony.at) - Add createInfo(String headerText) (github@nieslony.at) - Replace FileDownloadWrapper by DynamicFileDownloader (github@nieslony.at) - standard fole name (github@nieslony.at) - Add getOpenVpnSiteRemoiteConfigName (github@nieslony.at) - Add Detach listener (github@nieslony.at) - Add @PreDestroy (github@nieslony.at) - Enable polling (github@nieslony.at) - Configure status update interval (claas@nieslony.at) - Implement listener for signal handler (claas@nieslony.at) - Make member final (claas@nieslony.at) - Enable push (claas@nieslony.at) - Add signal handler (claas@nieslony.at) - Remove old openvpn management (claas@nieslony.at) - Replace OpenVpnManagement by ArachneDbus (claas@nieslony.at) - Replace OpenVpnManagement by ArachneDbus (claas@nieslony.at) - Add method ServerStatus (claas@nieslony.at) - Restart via new dbus interface (claas@nieslony.at) - - don't restart after writing server config\n- add openvpn status and pid file (claas@nieslony.at) - Add openvpn run dir (claas@nieslony.at) - Add dbus-java (claas@nieslony.at) - Add ArachneDbus (claas@nieslony.at) - Enable multiline strings (claas@nieslony.at) - set value after adding listener (claas@nieslony.at) - - enable SSH key auth - show notifications on config upload/failure (claas@nieslony.at) - Add SSHkey to backup (claas@nieslony.at) - Fix: Configuration upload (claas@nieslony.at) - SSH key moved to SshKeyRepository (claas@nieslony.at) - Improve GUI (claas@nieslony.at) - Add and delete SSH keys (claas@nieslony.at) - Add package at.nieslony.arachne.ssh (claas@nieslony.at) - Handle enabled/disabled on (non-)default site (claas@nieslony.at) - Change client -> site (claas@nieslony.at) - Remove useless code (claas@nieslony.at) - Create site with builder (claas@nieslony.at) - . (claas@nieslony.at) - Mark some methods as @Transactional (claas@nieslony.at) - Rearrange imports (claas@nieslony.at) - Add clear button (claas@nieslony.at) - Make use of ticket cache (claas@nieslony.at) - Add getDefaultSearchDomains() (claas@nieslony.at) - Copy config to remote host (claas@nieslony.at) - Fixes (github@nieslony.at) - Save status (github@nieslony.at) - Add SiteConfigUploader.java (github@nieslony.at) - Introduce enum SshAuthType (github@nieslony.at) - Add jsch (github@nieslony.at) - Add validators (github@nieslony.at) - Get netmask from value if no Supplier provided (github@nieslony.at) - Simplify handling of disabling components (github@nieslony.at) - Download remote config (github@nieslony.at) - Show create and remote config (github@nieslony.at) - Site saved ⇒ not modified (github@nieslony.at) - Some ignore some fields for default site (github@nieslony.at) - Make VpnSite outer class (github@nieslony.at) - Fix: save site when saving vpn; update list after renaming site (github@nieslony.at) - Add properties (github@nieslony.at) - Save site settings (github@nieslony.at) - Make valueChangeListeneer work (github@nieslony.at) - Write server config (github@nieslony.at) - Change default for keepalive (github@nieslony.at) - Edit push DNS servers and routes (github@nieslony.at) - Save OpenVpnSite (github@nieslony.at) - Remove site (github@nieslony.at) - Switch to settings API, add new site (github@nieslony.at) - Change site name (github@nieslony.at) - Add more settings (github@nieslony.at) - Add OpenVpnSiteSettings.java (github@nieslony.at) - Add empty OpenVpnSiteView.java (github@nieslony.at) * Thu Mar 21 2024 Claas Nieslony 1.3.5.git_2403211001_016b011-1 - Bump dependencies (github@nieslony.at) - add extra_vars (github@nieslony.at) >>>>>>> openvpn-site - Specify destination host on upload (github@nieslony.at) - Remove some debugging code (github@nieslony.at) - - enable IPs allowed\n- enable DNS check (github@nieslony.at) - Replace constructor by with... (github@nieslony.at) <<<<<<< HEAD * Wed Feb 21 2024 Claas Nieslony - Add dependency (github@nieslony.at) * Wed Feb 21 2024 Claas Nieslony ======= >>>>>>> openvpn-site - Support copr (github@nieslony.at) - Add supported files (github@nieslony.at) - Fix: enable whitelist on non default page (github@nieslony.at) - use EditableListBox's default button (github@nieslony.at) - use EditableListBox's default button (github@nieslony.at) - Fix:page title (github@nieslony.at) <<<<<<< HEAD - Show page title above content (github@nieslony.at) - Set default values (github@nieslony.at) - Replace button text by icon, add optional default value supplier (github@nieslony.at) - Merge from branch origin/openvpn-site (github@nieslony.at) - Merge from branch origin/master (github@nieslony.at) - - bump vaadin version\n- revert to older version of autocomplete (github@nieslony.at) - Fix: styling (github@nieslony.at) - Make use of EditableListbox (github@nieslony.at) - Validate ip/prefix without supplier (github@nieslony.at) - Remove the arachne (github@nieslony.at) ======= >>>>>>> openvpn-site - Write plugin site configuration (github@nieslony.at) - Remove debug message (github@nieslony.at) - Fix: disable/enable cpomponents (github@nieslony.at) - Handle empty sskKeys (github@nieslony.at) - Handle null value (github@nieslony.at) - Write plugin config for site VPN, renme method (github@nieslony.at) - Remove useless import (github@nieslony.at) - Add createInfo(String headerText) (github@nieslony.at) <<<<<<< HEAD - Adjust widget width (github@nieslony.at) - Add icon (github@nieslony.at) - Handle json read and write differently (github@nieslony.at) - Remove debug message (github@nieslony.at) - Many GUI improvements for API index (github@nieslony.at) - Show Lists (github@nieslony.at) - Hide getLdapTemplate from Json (github@nieslony.at) - Fix links, show possible enum values (github@nieslony.at) - Hide some methdos from json (github@nieslony.at) - Hide methods from json, make TemplateConfigType public (github@nieslony.at) - TomcatView: GUI improvements (github@nieslony.at) - Enable message to info notofications (github@nieslony.at) - Bump dependency versions (github@nieslony.at) - Show more information (github@nieslony.at) - Add SiteNav item (github@nieslony.at) - Replace FileDownloadWrapper by DynamicFileDownloader (github@nieslony.at) - standard fole name (github@nieslony.at) - Start woth API index (github@nieslony.at) - Add getOpenVpnSiteRemoiteConfigName (github@nieslony.at) - Add Detach listener (github@nieslony.at) - Fix: permissions on admin home page (github@nieslony.at) ======= - Replace FileDownloadWrapper by DynamicFileDownloader (github@nieslony.at) - standard fole name (github@nieslony.at) - Add getOpenVpnSiteRemoiteConfigName (github@nieslony.at) - Add Detach listener (github@nieslony.at) >>>>>>> openvpn-site - Add @PreDestroy (github@nieslony.at) - Enable polling (github@nieslony.at) - Configure status update interval (claas@nieslony.at) - Implement listener for signal handler (claas@nieslony.at) - Make member final (claas@nieslony.at) - Enable push (claas@nieslony.at) - Add signal handler (claas@nieslony.at) <<<<<<< HEAD - removver logging (github@nieslony.at) ======= >>>>>>> openvpn-site - Remove old openvpn management (claas@nieslony.at) - Replace OpenVpnManagement by ArachneDbus (claas@nieslony.at) - Replace OpenVpnManagement by ArachneDbus (claas@nieslony.at) - Add method ServerStatus (claas@nieslony.at) - Restart via new dbus interface (claas@nieslony.at) - - don't restart after writing server config\n- add openvpn status and pid file (claas@nieslony.at) - Add openvpn run dir (claas@nieslony.at) - Add dbus-java (claas@nieslony.at) - Add ArachneDbus (claas@nieslony.at) - Enable multiline strings (claas@nieslony.at) - set value after adding listener (claas@nieslony.at) - - enable SSH key auth - show notifications on config upload/failure (claas@nieslony.at) - Add SSHkey to backup (claas@nieslony.at) - Fix: Configuration upload (claas@nieslony.at) - SSH key moved to SshKeyRepository (claas@nieslony.at) - Improve GUI (claas@nieslony.at) - Add and delete SSH keys (claas@nieslony.at) - Add package at.nieslony.arachne.ssh (claas@nieslony.at) - Handle enabled/disabled on (non-)default site (claas@nieslony.at) - Change client -> site (claas@nieslony.at) - Remove useless code (claas@nieslony.at) - Create site with builder (claas@nieslony.at) - . (claas@nieslony.at) - Mark some methods as @Transactional (claas@nieslony.at) - Rearrange imports (claas@nieslony.at) - Add clear button (claas@nieslony.at) - Make use of ticket cache (claas@nieslony.at) - Add getDefaultSearchDomains() (claas@nieslony.at) - Copy config to remote host (claas@nieslony.at) - Fixes (github@nieslony.at) - Save status (github@nieslony.at) - Add SiteConfigUploader.java (github@nieslony.at) - Introduce enum SshAuthType (github@nieslony.at) - Add jsch (github@nieslony.at) - Add validators (github@nieslony.at) - Get netmask from value if no Supplier provided (github@nieslony.at) - Simplify handling of disabling components (github@nieslony.at) - Download remote config (github@nieslony.at) - Show create and remote config (github@nieslony.at) - Site saved ⇒ not modified (github@nieslony.at) - Some ignore some fields for default site (github@nieslony.at) - Make VpnSite outer class (github@nieslony.at) - Fix: save site when saving vpn; update list after renaming site (github@nieslony.at) - Add properties (github@nieslony.at) - Save site settings (github@nieslony.at) - Make valueChangeListeneer work (github@nieslony.at) - Write server config (github@nieslony.at) - Change default for keepalive (github@nieslony.at) - Edit push DNS servers and routes (github@nieslony.at) - Save OpenVpnSite (github@nieslony.at) - Remove site (github@nieslony.at) - Switch to settings API, add new site (github@nieslony.at) - Change site name (github@nieslony.at) - Add more settings (github@nieslony.at) - Add OpenVpnSiteSettings.java (github@nieslony.at) - Add empty OpenVpnSiteView.java (github@nieslony.at) * Wed May 01 2024 Claas Nieslony 1.3.10-1 - Document Tomcat Settings (github@nieslony.at) - Enable PreAuth with HTTP header (github@nieslony.at) - Configure Tomcat HTTPS (github@nieslony.at) * Wed May 01 2024 Claas Nieslony 1.3.9-1 - Bump dependencies (github@nieslony.at) - Bump to vaadin 24.3.9 (github@nieslony.at) - set key file permissisons (github@nieslony.at) - Enable SSL on port 8443, create RSA key and certificate if not exists (github@nieslony.at) - Add version template (github@nieslony.at) * Fri Mar 29 2024 Claas Nieslony 1.3.8-1 - add version * Fri Mar 29 2024 Claas Nieslony 1.3.7-1 - add version * Fri Mar 29 2024 Claas Nieslony 1.3.6-1 - Bump dependencies (github@nieslony.at) <<<<<<< HEAD ======= * Thu Mar 14 2024 Claas Nieslony - Bump dependencies (github@nieslony.at) - Handle unavailable LDAP server on authentication (github@nieslony.at) - Allow components as message text (github@nieslony.at) * Sun Mar 10 2024 Claas Nieslony - Fix: shell syntax (github@nieslony.at) - UserMatcher matches user not username now\n- LdapGroupUserMatcher retruns false for not LDAP users (github@nieslony.at) - Bump dependencies (github@nieslony.at) - Fix: make member final (github@nieslony.at) - API requires role (github@nieslony.at) - Add some documentation (github@nieslony.at) - Show page title above content (github@nieslony.at) - Set default values (github@nieslony.at) - Replace button text by icon, add optional default value supplier (github@nieslony.at) - Merge from branch origin/openvpn-site (github@nieslony.at) - Merge from branch origin/master (github@nieslony.at) - - bump vaadin version\n- revert to older version of autocomplete (github@nieslony.at) - Fix: styling (github@nieslony.at) - Make use of EditableListbox (github@nieslony.at) - Validate ip/prefix without supplier (github@nieslony.at) - Remove the arachne (github@nieslony.at) - Adjust widget width (github@nieslony.at) - Add icon (github@nieslony.at) - Handle json read and write differently (github@nieslony.at) - Remove debug message (github@nieslony.at) - Many GUI improvements for API index (github@nieslony.at) - Show Lists (github@nieslony.at) - Hide getLdapTemplate from Json (github@nieslony.at) - Fix links, show possible enum values (github@nieslony.at) - Hide some methdos from json (github@nieslony.at) - Hide methods from json, make TemplateConfigType public (github@nieslony.at) - TomcatView: GUI improvements (github@nieslony.at) - Enable message to info notofications (github@nieslony.at) - Bump dependency versions (github@nieslony.at) - Show more information (github@nieslony.at) - Add SiteNav item (github@nieslony.at) - Start woth API index (github@nieslony.at) - Fix: permissions on admin home page (github@nieslony.at) - removver logging (github@nieslony.at) >>>>>>> openvpn-site * Thu Jan 25 2024 Claas Nieslony 1.3.3-1 - * Thu Jan 25 2024 Claas Nieslony - * Sun Jan 21 2024 Claas Nieslony 1.3.2-1 - * Wed Jan 17 2024 Claas Nieslony 1.3.1-1 - Bump arachne version to 1.3.1 (claas@nieslony.at) - Tell details about plugin location (claas@nieslony.at) - Change plugin search order (claas@nieslony.at) - Fix: open management console with password (claas@nieslony.at) - Remove useless code (claas@nieslony.at) - Write management passwort file (github@nieslony.at) - Set default button (claas@nieslony.at) - Fix: user context menu (claas@nieslony.at) - Fix: add annotation EnableMethodSecurity (claas@nieslony.at) * Fri Jan 12 2024 Claas Nieslony 1.3-1 - new package built with tito * Thu Jan 11 2024 Claas Nieslony - Initial changelog