Submitted by Mads Kiilerich.

diff --git a/redhat/tinc b/redhat/tinc
new file mode 100644 (file)
index 0000000..aa404b3
--- /dev/null
+++ b/redhat/tinc
@@ -0,0 +1,229 @@
+#!/bin/sh
+#
+# tinc         tincd VPN setup script
+#
+# chkconfig:   2345 15 85
+#
+# author:      Lubomir Bulej <pallas@kadan.cz>
+#               Modified for RPM by Mads Kiilerich <mads@kiilerich.com>
+# version:     1.0.3
+#
+# description: this script takes care of starting and setting up of VPNs \
+#              provided by tincd daemon. It parses the configuration files \
+#              in all VPN directories and sets up the interfaces and routing
+#
+# processname: tincd
+
+# Source function library.
+. /etc/rc.d/init.d/functions
+
+# Source networking configuration.
+. /etc/sysconfig/network
+
+# Check that networking is up.
+[ ${NETWORKING} = "no" ] && exit 0
+
+#############################################################################
+# configuration
+
+TINCD=/usr/sbin/tincd
+TCONF=/etc/tinc
+TPIDS=/var/run
+#DEBUG_OPT=-dddd
+
+# Check if ip-route is installed
+if [ ! -f /sbin/ip ]; then
+    echo "**tinc: ip-route utilities not installed!"
+    exit
+fi
+                
+
+##############################################################################
+# vpn_load ()          Loads VPN configuration
+# 
+# $1 ... VPN to load
+
+vpn_load () {
+    CFG="$TCONF/$1/tincd.conf"
+    [ -f $CFG ] || { echo "Error: $CFG does not exist" >&2 ; return 1 }
+    
+    # load TINCD config
+    DEV=`grep -i -e '^TapDevice' $CFG | sed 's/[[:space:]]//g;s/^.*=//g'`
+    VPN=`grep -i -e '^(MyOwnVPNIP|MyVirtualIP)' -E $CFG | head -1 | sed 's/[[:space:]]//g;s/^.*=//g'`
+    
+    # discourage empty and multiple entries
+    [ -z "$DEV" ] && \
+               { echo "Error: TapDevice needed" >&2 ; return 2 }
+    echo $DEV | grep -q '^/dev/tap' ||
+               { echo "Error: TapDevice needs /dev/tapX" >&2 ; return 2 }
+    [ `echo $DEV | wc -l` -gt 1 ] && \
+               { echo "Error in TapDevice" >&2 ; return 3 }
+    [ -z "$VPN" ] && \
+               { echo "Error: MyOwnVPNIP/MyVirtualIP needed" >&2 ; return 2 }
+    [ `echo $VPN | wc -l` -gt 1 ] && \
+               { echo "Error in MyOwnVPNIP/MyVirtualIP" >&2 ; return 3 }
+    echo $VPN | grep -q -x  \
+       '\([[:digit:]]\{1,3\}\.\)\{3\}[[:digit:]]\{1,3\}/[[:digit:]]\{1,2\}' ||
+               { echo "Error in MyOwnVPNIP/MyVirtualIP address $VPN" ; 
+                       return 3 }
+    
+    # network device
+    TAP=`echo $DEV | cut -d"/" -f3`
+    NUM=`echo $TAP | sed 's/tap//'`
+
+    # IP address, netmask length
+    ADR=`echo $VPN | cut -d"/" -f1`
+    LEN=`echo $VPN | cut -d"/" -f2`
+
+    # Expand bitlength to netmask    
+    MSK=""; len=$LEN
+    for cnt in 1 1 1 0; do
+       if [ $len -ge 8 ]; then
+           msk=8
+       else
+           msk=$len
+       fi
+           
+       MSK="$MSK$((255 & (255 << (8 - msk))))"
+       [ $cnt -ne 0 ] && MSK="$MSK."
+       len=$((len-msk))
+    done
+
+    # Network & broadcast
+    BRD=`ipcalc --broadcast $ADR $MSK | cut -d"=" -f2`
+    NET=`ipcalc --network $ADR $MSK | cut -d"=" -f2`
+        
+    # MAC address
+    MAC=`printf "fe:fd:%0.2x:%0.2x:%0.2x:%0.2x" $(echo $ADR | sed 's/\./ /g')`
+    # echo "TAP $TAP NUM $NUM ADR $ADR LEN $LEN MSK $MSK BRD $BRD NET $NET MAC $MAC" >&2
+    return 0
+}
+
+
+##############################################################################
+# vpn_start ()         starts specified VPN
+# 
+# $1 ... VPN to start
+
+vpn_start () {    
+
+    vpn_load $1 || { echo "Error: Could not vpn_load $1" >&2 ; return 1 }
+            
+    # create device file
+    if [ ! -c $DEV ]; then
+       [ -e $DEV ] && rm -f $DEV
+       mknod --mode=0600 $DEV c 36 $((16 + NUM))
+    fi
+    
+    # load device module
+    { insmod ethertap --name="ethertap$NUM" unit="$NUM" 2>&1  || \
+               { echo "Error: cannot insmod ethertap$NUM" >&2 ; return 2 }
+    } | grep -v '^Us'
+    
+    # configure the interface
+    ip link set $TAP address $MAC #&> /dev/null
+    ip link set $TAP up #&> /dev/null
+    ip addr flush dev $TAP 2>&1 | grep -v -x '^Nothing to flush.' #&> /dev/null
+    ip addr add $VPN brd $BRD dev $TAP #&> /dev/null
+    
+    # start tincd
+    $TINCD --net="$1" $DEBUG_OPT || { echo "Error: Cannot start $TINCD" >&2; 
+               return 3 }
+
+    # default interface route
+    ip route add $NET/$LEN dev $TAP #&> /dev/null
+
+    # setup routes
+    /etc/sysconfig/network-scripts/ifup-routes $TAP
+
+    return 0
+} # vpn_start
+
+
+##############################################################################
+# vpn_stop ()          Stops specified VPN
+#
+# $1 ... VPN to stop
+
+vpn_stop () {
+
+    vpn_load $1 || return 1
+    
+    # flush the routing table
+    ip route flush dev $TAP &> /dev/null
+    
+    # kill the tincd daemon
+    PID="$TPIDS/tincd.$1.pid"
+    if [ -f $PID ]; then
+        $TINCD --net="$1" --kill &> /dev/null
+        RET=$?
+    
+        if [ $RET -eq 0 ]; then
+           dly=0
+           while [ $dly -le 5 ]; do
+               [ -f $PID ] || break
+               sleep 1; dly=$((dly+1))
+           done
+       else
+           rm -f $PID &> /dev/null
+       fi
+    fi
+    
+    # bring the interface down
+    ip link set $TAP down &> /dev/null
+    
+    # remove kernel module
+    rmmod "ethertap$NUM" &> /dev/null
+    
+    return 0
+} # vpn_stop
+
+
+# See how we were called.
+case "$1" in
+    start)
+        echo -n "Bringing up VPNs: "
+       for vpn in `ls -1 $TCONF`; do
+           vpn_start $vpn && echo -n "$vpn "
+       done
+       
+       touch /var/lock/subsys/tinc
+        action "" /bin/true
+        ;;
+       
+    stop)
+        echo -n "Shutting down VPNs: "
+       for vpn in `ls -1 $TCONF`; do
+           vpn_stop $vpn && echo -n "$vpn "
+       done
+       
+       rm -f /var/lock/susbsys/tinc
+        action "" /bin/true
+       ;;
+       
+    status)
+       echo -n "Currently running VPNs: "
+       for vpn in `ls -1 $TCONF`; do
+           PID="$TPIDS/tincd.$vpn.pid"
+           echo -n "$vpn "
+           if [ -f $PID -a `ps ax | grep "^ *$(cat $PID)" | wc -l` -eq 1 ] 
+           then
+               echo -n "OK "
+           else
+               echo -n "Dead "
+           fi
+       done
+       echo             
+       ;;      
+       
+    restart)
+        $0 stop
+       $0 start
+       ;;
+               
+    *)
+        echo "Usage: tinc {start|stop|status|restart}"
+        exit 1
+esac
+
+exit 0

diff --git a/redhat/tinc.spec b/redhat/tinc.spec
new file mode 100644 (file)
index 0000000..b0a4d4e
--- /dev/null
+++ b/redhat/tinc.spec
@@ -0,0 +1,92 @@
+Summary: tinc vpn daemon
+Name: tinc
+Version: cvs_2000_04_17
+Release: mk1
+Copyright: GPL
+Group: Networking
+URL: http://tinc.nl.linux.org/
+Source0: cabal.tgz
+Source1: tinc
+Buildroot: /var/tmp/%{name}-%{version}
+#Requires: 
+
+%description
+tinc is cool!
+See http://tinc.nl.linux.org/
+
+%prep
+
+%setup -q -n cabal
+
+%build
+autoconf
+automake
+./configure --prefix=/usr --sysconfdir=/etc
+make
+
+%install
+ME=my.vpn.ip.number
+PEER=peer.vpn.ip.number
+PEEREAL=peer.real.ip.number
+
+rm -rf $RPM_BUILD_ROOT
+
+make install DESTDIR=$RPM_BUILD_ROOT
+
+install -D $RPM_SOURCE_DIR/tinc $RPM_BUILD_ROOT/etc/rc.d/init.d/
+
+mkdir -p $RPM_BUILD_ROOT/etc/tinc/$PEER/passphrases
+cat <<END >$RPM_BUILD_ROOT/etc/tinc/$PEER/tincd.conf
+#sample
+TapDevice = /dev/tap0
+ConnectTo = $PEEREAL
+MyVirtualIP = $ME/32
+AllowConnect = no
+END
+cat <<END >$RPM_BUILD_ROOT/etc/tinc/$PEER/passphrases/local
+128 0c647a1fd34da9d04c1d340ae9363f31
+END
+cat <<END >$RPM_BUILD_ROOT/etc/tinc/$PEER/passphrases/$PEER
+128 aea5a5d414fea63ee3829b592afc0fba
+END
+
+%clean
+rm -rf $RPM_BUILD_ROOT
+
+%pre
+%post
+
+/sbin/chkconfig --add tinc
+
+grep -q '^tinc[[:space:]]' /etc/services || patch -s /etc/services << END
+*** services.org        Tue Apr 18 13:22:22 2000
+--- services    Tue Apr 18 13:24:19 2000
+***************
+*** 145,148 ****
+--- 145,150 ----
+  hmmp-ind     612/tcp         dqs313_intercell# HMMP Indication / DQS
+  hmmp-ind     612/udp         dqs313_intercell# HMMP Indication / DQS
++ tinc         655/tcp         TINC            # tinc vpn
++ tinc         655/udp         TINC            # tinc.nl.linux.org
+  #
+  # UNIX specific services
+END
+
+%preun
+%postun
+
+%files
+
+%doc AUTHORS ChangeLog NEWS README THANKS TODO
+
+#%defattr(-,root,root)
+%config /etc/tinc
+/etc/rc.d
+/usr/sbin
+/usr/lib/tinc
+/usr/man
+/usr/info
+
+%changelog
+* Tue Apr 18 2000 Mads Kiileric <mads@kiilerich.com>
+- initial rpm