]> git.ipfire.org Git - people/pmueller/ipfire-2.x.git/blame - lfs/openvpn
suricata: Change midstream policy to "pass-flow"
[people/pmueller/ipfire-2.x.git] / lfs / openvpn
CommitLineData
a9b17001 1###############################################################################
a9b17001 2# #
70df8302 3# IPFire.org - A linux based firewall #
c7e223e5 4# Copyright (C) 2007-2023 IPFire Team <info@ipfire.org> #
70df8302
MT
5# #
6# This program is free software: you can redistribute it and/or modify #
a9b17001 7# it under the terms of the GNU General Public License as published by #
70df8302 8# the Free Software Foundation, either version 3 of the License, or #
a9b17001
MT
9# (at your option) any later version. #
10# #
70df8302 11# This program is distributed in the hope that it will be useful, #
a9b17001
MT
12# but WITHOUT ANY WARRANTY; without even the implied warranty of #
13# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
14# GNU General Public License for more details. #
15# #
16# You should have received a copy of the GNU General Public License #
70df8302 17# along with this program. If not, see <http://www.gnu.org/licenses/>. #
a9b17001 18# #
a9b17001
MT
19###############################################################################
20
21###############################################################################
22# Definitions
23###############################################################################
24
25include Config
26
c7e223e5 27VER = 2.5.9
a9b17001
MT
28
29THISAPP = openvpn-$(VER)
75072c77 30DL_FILE = $(THISAPP).tar.gz
fd3e7da0 31DL_FROM = $(URL_IPFIRE)
a9b17001
MT
32DIR_APP = $(DIR_SRC)/$(THISAPP)
33TARGET = $(DIR_INFO)/$(THISAPP)
34
35###############################################################################
36# Top-level Rules
37###############################################################################
38
39objects = $(DL_FILE)
40
41$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
42
c7e223e5 43$(DL_FILE)_BLAKE2 = e5110ebb9149121c11de45f085f66d30a89fb674ad96c5792d83b16dc29c95215a91e682adb3c800b91ed4d88d6d24b5bcae0799cdb855a284832f0668ffcb82
a9b17001
MT
44
45install : $(TARGET)
46
47check : $(patsubst %,$(DIR_CHK)/%,$(objects))
48
49download :$(patsubst %,$(DIR_DL)/%,$(objects))
50
9a7e4d85 51b2 : $(subst %,%_BLAKE2,$(objects))
a9b17001 52
a9b17001 53###############################################################################
9a7e4d85 54# Downloading, checking, b2sum
a9b17001
MT
55###############################################################################
56
57$(patsubst %,$(DIR_CHK)/%,$(objects)) :
58 @$(CHECK)
59
60$(patsubst %,$(DIR_DL)/%,$(objects)) :
61 @$(LOAD)
62
9a7e4d85
PM
63$(subst %,%_BLAKE2,$(objects)) :
64 @$(B2SUM)
a9b17001
MT
65
66###############################################################################
67# Installation Details
68###############################################################################
69
70$(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
71 @$(PREBUILD)
75072c77 72 @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE)
eb12fca1
MT
73 cd $(DIR_APP) && ./configure \
74 --prefix=/usr \
75 --sysconfdir=/var/ipfire/ovpn \
1e6ce289 76 --enable-iproute2 \
1e6ce289
EK
77 --enable-plugins \
78 --enable-plugin-auth-pam \
79 --enable-plugin-down-root
80
fd3e7da0 81 cd $(DIR_APP) && make $(MAKETUNING)
a9b17001 82 cd $(DIR_APP) && make install
6e13d0a5 83 cd $(DIR_APP) && cp -Rvf $(DIR_SRC)/config/ovpn /var/ipfire
1e6ce289 84 -mkdir -vp /usr/lib/openvpn/plugins
5795fc1b 85 -mkdir -vp /var/log/openvpn
7a1fb216 86 -mkdir -vp /var/ipfire/ovpn/ca
6140e7e0 87 -mkdir -vp /var/ipfire/ovpn/ccd
7a1fb216 88 -mkdir -vp /var/ipfire/ovpn/crls
32e754c1 89 -mkdir -vp /var/ipfire/ovpn/n2nconf
eb12fca1 90 -mkdir -vp /var/ipfire/ovpn/scripts
7a1fb216 91 touch /var/ipfire/ovpn/ovpn-leases.db
9cb1dc19 92 chmod 600 /var/ipfire/ovpn/ovpn-leases.db
eb12fca1 93 chown -R root:root /var/ipfire/ovpn/scripts
6e13d0a5 94 chown -R nobody:nobody /var/ipfire/ovpn
6e13d0a5 95 chmod 700 /var/ipfire/ovpn/certs
1d0a260a 96 mv -v /var/ipfire/ovpn/verify /usr/lib/openvpn/verify
ea6d6642 97 chown root:root /usr/lib/openvpn/verify
1d0a260a 98 chmod 755 /usr/lib/openvpn/verify
bd42f9f9
EK
99 # Add crl updater
100 mv -v /var/ipfire/ovpn/openvpn-crl-updater /etc/fcron.daily
101 chown root:root /etc/fcron.daily/openvpn-crl-updater
102 chmod 750 /etc/fcron.daily/openvpn-crl-updater
103
339b84d5
MT
104 # Install authenticator
105 install -v -m 755 $(DIR_SRC)/config/ovpn/openvpn-authenticator \
106 /usr/sbin/openvpn-authenticator
107
a9b17001
MT
108 @rm -rf $(DIR_APP)
109 @$(POSTBUILD)