From fdcc203679d3f3ab2f70e8d331f76db4e461f283 Mon Sep 17 00:00:00 2001 From: Carlos Rodriguez-Fernandez Date: Mon, 25 Aug 2025 08:42:03 -0700 Subject: [PATCH] Fix ipsec.d cacerts removing system ca --- strongswan.spec | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/strongswan.spec b/strongswan.spec index 57544d4..370dffa 100644 --- a/strongswan.spec +++ b/strongswan.spec @@ -16,7 +16,7 @@ Name: strongswan Version: 5.9.14 -Release: 11%{?dist} +Release: 12%{?dist} Summary: An OpenSource IPsec-based VPN and TNC solution # Automatically converted from old format: GPLv2+ - review is highly recommended. License: GPL-2.0-or-later @@ -325,7 +325,6 @@ install -d -m 700 %{buildroot}%{_sysconfdir}/strongswan/ipsec.d for i in aacerts acerts certs cacerts crls ocspcerts private reqs; do install -d -m 700 %{buildroot}%{_sysconfdir}/strongswan/ipsec.d/${i} done -ln -s /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem %{buildroot}%{_sysconfdir}/strongswan/ipsec.d/cacerts/tls-ca-bundle.pem install -d -m 0700 %{buildroot}%{_rundir}/strongswan install -D -m 0644 %{SOURCE3} %{buildroot}/%{_tmpfilesdir}/strongswan.conf install -D -m 0644 %{SOURCE3} %{buildroot}/%{_tmpfilesdir}/strongswan-starter.conf @@ -427,6 +426,9 @@ install -D -m 0644 %{SOURCE3} %{buildroot}/%{_tmpfilesdir}/strongswan-starter.co %endif %changelog +* Mon Aug 25 2025 Carlos Rodriguez-Fernandez - 5.9.14-12 +- Fix ipsec.d cacerts removing system ca + * Fri Aug 22 2025 Carlos Rodriguez-Fernandez - 5.9.14-11 - Link new system ca bundle in the ipsec.d cacerts