From d11cfcec74e25ee2b88acea62ca5ef973ab7204b Mon Sep 17 00:00:00 2001 From: Ivo Timmermans Date: Tue, 18 Apr 2000 15:09:11 +0000 Subject: [PATCH] Submitted by Mads Kiilerich. --- redhat/tinc | 229 +++++++++++++++++++++++++++++++++++++++++++++++ redhat/tinc.spec | 92 +++++++++++++++++++ 2 files changed, 321 insertions(+) create mode 100644 redhat/tinc create mode 100644 redhat/tinc.spec diff --git a/redhat/tinc b/redhat/tinc new file mode 100644 index 00000000..aa404b34 --- /dev/null +++ b/redhat/tinc @@ -0,0 +1,229 @@ +#!/bin/sh +# +# tinc tincd VPN setup script +# +# chkconfig: 2345 15 85 +# +# author: Lubomir Bulej +# Modified for RPM by Mads Kiilerich +# version: 1.0.3 +# +# description: this script takes care of starting and setting up of VPNs \ +# provided by tincd daemon. It parses the configuration files \ +# in all VPN directories and sets up the interfaces and routing +# +# processname: tincd + +# Source function library. +. /etc/rc.d/init.d/functions + +# Source networking configuration. +. /etc/sysconfig/network + +# Check that networking is up. +[ ${NETWORKING} = "no" ] && exit 0 + +############################################################################# +# configuration + +TINCD=/usr/sbin/tincd +TCONF=/etc/tinc +TPIDS=/var/run +#DEBUG_OPT=-dddd + +# Check if ip-route is installed +if [ ! -f /sbin/ip ]; then + echo "**tinc: ip-route utilities not installed!" + exit +fi + + +############################################################################## +# vpn_load () Loads VPN configuration +# +# $1 ... VPN to load + +vpn_load () { + CFG="$TCONF/$1/tincd.conf" + [ -f $CFG ] || { echo "Error: $CFG does not exist" >&2 ; return 1 } + + # load TINCD config + DEV=`grep -i -e '^TapDevice' $CFG | sed 's/[[:space:]]//g;s/^.*=//g'` + VPN=`grep -i -e '^(MyOwnVPNIP|MyVirtualIP)' -E $CFG | head -1 | sed 's/[[:space:]]//g;s/^.*=//g'` + + # discourage empty and multiple entries + [ -z "$DEV" ] && \ + { echo "Error: TapDevice needed" >&2 ; return 2 } + echo $DEV | grep -q '^/dev/tap' || + { echo "Error: TapDevice needs /dev/tapX" >&2 ; return 2 } + [ `echo $DEV | wc -l` -gt 1 ] && \ + { echo "Error in TapDevice" >&2 ; return 3 } + [ -z "$VPN" ] && \ + { echo "Error: MyOwnVPNIP/MyVirtualIP needed" >&2 ; return 2 } + [ `echo $VPN | wc -l` -gt 1 ] && \ + { echo "Error in MyOwnVPNIP/MyVirtualIP" >&2 ; return 3 } + echo $VPN | grep -q -x \ + '\([[:digit:]]\{1,3\}\.\)\{3\}[[:digit:]]\{1,3\}/[[:digit:]]\{1,2\}' || + { echo "Error in MyOwnVPNIP/MyVirtualIP address $VPN" ; + return 3 } + + # network device + TAP=`echo $DEV | cut -d"/" -f3` + NUM=`echo $TAP | sed 's/tap//'` + + # IP address, netmask length + ADR=`echo $VPN | cut -d"/" -f1` + LEN=`echo $VPN | cut -d"/" -f2` + + # Expand bitlength to netmask + MSK=""; len=$LEN + for cnt in 1 1 1 0; do + if [ $len -ge 8 ]; then + msk=8 + else + msk=$len + fi + + MSK="$MSK$((255 & (255 << (8 - msk))))" + [ $cnt -ne 0 ] && MSK="$MSK." + len=$((len-msk)) + done + + # Network & broadcast + BRD=`ipcalc --broadcast $ADR $MSK | cut -d"=" -f2` + NET=`ipcalc --network $ADR $MSK | cut -d"=" -f2` + + # MAC address + MAC=`printf "fe:fd:%0.2x:%0.2x:%0.2x:%0.2x" $(echo $ADR | sed 's/\./ /g')` + # echo "TAP $TAP NUM $NUM ADR $ADR LEN $LEN MSK $MSK BRD $BRD NET $NET MAC $MAC" >&2 + return 0 +} + + +############################################################################## +# vpn_start () starts specified VPN +# +# $1 ... VPN to start + +vpn_start () { + + vpn_load $1 || { echo "Error: Could not vpn_load $1" >&2 ; return 1 } + + # create device file + if [ ! -c $DEV ]; then + [ -e $DEV ] && rm -f $DEV + mknod --mode=0600 $DEV c 36 $((16 + NUM)) + fi + + # load device module + { insmod ethertap --name="ethertap$NUM" unit="$NUM" 2>&1 || \ + { echo "Error: cannot insmod ethertap$NUM" >&2 ; return 2 } + } | grep -v '^Us' + + # configure the interface + ip link set $TAP address $MAC #&> /dev/null + ip link set $TAP up #&> /dev/null + ip addr flush dev $TAP 2>&1 | grep -v -x '^Nothing to flush.' #&> /dev/null + ip addr add $VPN brd $BRD dev $TAP #&> /dev/null + + # start tincd + $TINCD --net="$1" $DEBUG_OPT || { echo "Error: Cannot start $TINCD" >&2; + return 3 } + + # default interface route + ip route add $NET/$LEN dev $TAP #&> /dev/null + + # setup routes + /etc/sysconfig/network-scripts/ifup-routes $TAP + + return 0 +} # vpn_start + + +############################################################################## +# vpn_stop () Stops specified VPN +# +# $1 ... VPN to stop + +vpn_stop () { + + vpn_load $1 || return 1 + + # flush the routing table + ip route flush dev $TAP &> /dev/null + + # kill the tincd daemon + PID="$TPIDS/tincd.$1.pid" + if [ -f $PID ]; then + $TINCD --net="$1" --kill &> /dev/null + RET=$? + + if [ $RET -eq 0 ]; then + dly=0 + while [ $dly -le 5 ]; do + [ -f $PID ] || break + sleep 1; dly=$((dly+1)) + done + else + rm -f $PID &> /dev/null + fi + fi + + # bring the interface down + ip link set $TAP down &> /dev/null + + # remove kernel module + rmmod "ethertap$NUM" &> /dev/null + + return 0 +} # vpn_stop + + +# See how we were called. +case "$1" in + start) + echo -n "Bringing up VPNs: " + for vpn in `ls -1 $TCONF`; do + vpn_start $vpn && echo -n "$vpn " + done + + touch /var/lock/subsys/tinc + action "" /bin/true + ;; + + stop) + echo -n "Shutting down VPNs: " + for vpn in `ls -1 $TCONF`; do + vpn_stop $vpn && echo -n "$vpn " + done + + rm -f /var/lock/susbsys/tinc + action "" /bin/true + ;; + + status) + echo -n "Currently running VPNs: " + for vpn in `ls -1 $TCONF`; do + PID="$TPIDS/tincd.$vpn.pid" + echo -n "$vpn " + if [ -f $PID -a `ps ax | grep "^ *$(cat $PID)" | wc -l` -eq 1 ] + then + echo -n "OK " + else + echo -n "Dead " + fi + done + echo + ;; + + restart) + $0 stop + $0 start + ;; + + *) + echo "Usage: tinc {start|stop|status|restart}" + exit 1 +esac + +exit 0 diff --git a/redhat/tinc.spec b/redhat/tinc.spec new file mode 100644 index 00000000..b0a4d4ea --- /dev/null +++ b/redhat/tinc.spec @@ -0,0 +1,92 @@ +Summary: tinc vpn daemon +Name: tinc +Version: cvs_2000_04_17 +Release: mk1 +Copyright: GPL +Group: Networking +URL: http://tinc.nl.linux.org/ +Source0: cabal.tgz +Source1: tinc +Buildroot: /var/tmp/%{name}-%{version} +#Requires: + +%description +tinc is cool! +See http://tinc.nl.linux.org/ + +%prep + +%setup -q -n cabal + +%build +autoconf +automake +./configure --prefix=/usr --sysconfdir=/etc +make + +%install +ME=my.vpn.ip.number +PEER=peer.vpn.ip.number +PEEREAL=peer.real.ip.number + +rm -rf $RPM_BUILD_ROOT + +make install DESTDIR=$RPM_BUILD_ROOT + +install -D $RPM_SOURCE_DIR/tinc $RPM_BUILD_ROOT/etc/rc.d/init.d/ + +mkdir -p $RPM_BUILD_ROOT/etc/tinc/$PEER/passphrases +cat <$RPM_BUILD_ROOT/etc/tinc/$PEER/tincd.conf +#sample +TapDevice = /dev/tap0 +ConnectTo = $PEEREAL +MyVirtualIP = $ME/32 +AllowConnect = no +END +cat <$RPM_BUILD_ROOT/etc/tinc/$PEER/passphrases/local +128 0c647a1fd34da9d04c1d340ae9363f31 +END +cat <$RPM_BUILD_ROOT/etc/tinc/$PEER/passphrases/$PEER +128 aea5a5d414fea63ee3829b592afc0fba +END + +%clean +rm -rf $RPM_BUILD_ROOT + +%pre +%post + +/sbin/chkconfig --add tinc + +grep -q '^tinc[[:space:]]' /etc/services || patch -s /etc/services << END +*** services.org Tue Apr 18 13:22:22 2000 +--- services Tue Apr 18 13:24:19 2000 +*************** +*** 145,148 **** +--- 145,150 ---- + hmmp-ind 612/tcp dqs313_intercell# HMMP Indication / DQS + hmmp-ind 612/udp dqs313_intercell# HMMP Indication / DQS ++ tinc 655/tcp TINC # tinc vpn ++ tinc 655/udp TINC # tinc.nl.linux.org + # + # UNIX specific services +END + +%preun +%postun + +%files + +%doc AUTHORS ChangeLog NEWS README THANKS TODO + +#%defattr(-,root,root) +%config /etc/tinc +/etc/rc.d +/usr/sbin +/usr/lib/tinc +/usr/man +/usr/info + +%changelog +* Tue Apr 18 2000 Mads Kiileric +- initial rpm -- 2.39.5