Fix ipsec.d cacerts removing system ca
This commit is contained in:
@@ -16,7 +16,7 @@
|
|||||||
|
|
||||||
Name: strongswan
|
Name: strongswan
|
||||||
Version: 5.9.14
|
Version: 5.9.14
|
||||||
Release: 11%{?dist}
|
Release: 12%{?dist}
|
||||||
Summary: An OpenSource IPsec-based VPN and TNC solution
|
Summary: An OpenSource IPsec-based VPN and TNC solution
|
||||||
# Automatically converted from old format: GPLv2+ - review is highly recommended.
|
# Automatically converted from old format: GPLv2+ - review is highly recommended.
|
||||||
License: GPL-2.0-or-later
|
License: GPL-2.0-or-later
|
||||||
@@ -325,7 +325,6 @@ install -d -m 700 %{buildroot}%{_sysconfdir}/strongswan/ipsec.d
|
|||||||
for i in aacerts acerts certs cacerts crls ocspcerts private reqs; do
|
for i in aacerts acerts certs cacerts crls ocspcerts private reqs; do
|
||||||
install -d -m 700 %{buildroot}%{_sysconfdir}/strongswan/ipsec.d/${i}
|
install -d -m 700 %{buildroot}%{_sysconfdir}/strongswan/ipsec.d/${i}
|
||||||
done
|
done
|
||||||
ln -s /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem %{buildroot}%{_sysconfdir}/strongswan/ipsec.d/cacerts/tls-ca-bundle.pem
|
|
||||||
install -d -m 0700 %{buildroot}%{_rundir}/strongswan
|
install -d -m 0700 %{buildroot}%{_rundir}/strongswan
|
||||||
install -D -m 0644 %{SOURCE3} %{buildroot}/%{_tmpfilesdir}/strongswan.conf
|
install -D -m 0644 %{SOURCE3} %{buildroot}/%{_tmpfilesdir}/strongswan.conf
|
||||||
install -D -m 0644 %{SOURCE3} %{buildroot}/%{_tmpfilesdir}/strongswan-starter.conf
|
install -D -m 0644 %{SOURCE3} %{buildroot}/%{_tmpfilesdir}/strongswan-starter.conf
|
||||||
@@ -427,6 +426,9 @@ install -D -m 0644 %{SOURCE3} %{buildroot}/%{_tmpfilesdir}/strongswan-starter.co
|
|||||||
%endif
|
%endif
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
|
* Mon Aug 25 2025 Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com> - 5.9.14-12
|
||||||
|
- Fix ipsec.d cacerts removing system ca
|
||||||
|
|
||||||
* Fri Aug 22 2025 Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com> - 5.9.14-11
|
* Fri Aug 22 2025 Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com> - 5.9.14-11
|
||||||
- Link new system ca bundle in the ipsec.d cacerts
|
- Link new system ca bundle in the ipsec.d cacerts
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user