%define aversion 1.0.2

Summary: OpenSSH free Secure Shell (SSH) implementation

Name: openssh

Version: 2.2.0p1

Release: 5

URL: http://www.openssh.com/portable.html

Source0: ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-%{version}.tar.gz

Source1: http://www.ntrnet.net/~jmknoble/software/x11-ssh-askpass/x11-ssh-askpass-%{aversion}.tar.gz

Source2: openssh.init

Source3: gnome-ssh-askpass.sh

Source4: gnome-ssh-askpass.csh

Patch0: openssh-2.2.0p1-redhat.patch

Patch1: openssh-2.2.0p1-agent.patch

Copyright: BSD

Group: Applications/Internet

BuildRoot: %{_tmppath}/openssh-%{version}-buildroot

Obsoletes: ssh

PreReq: openssl >= 0.9.5a, initscripts >= 5.20

Requires: openssl >= 0.9.5a

BuildPreReq: perl, openssl-devel, tcp_wrappers, gnome-libs-devel

BuildPreReq: /bin/login, /usr/bin/rsh, /usr/include/security/pam_appl.h

%package clients

Summary: OpenSSH Secure Shell protocol clients

Requires: openssh = %{version}-%{release}

Group: Applications/Internet

Obsoletes: ssh-clients

%package server

Summary: OpenSSH Secure Shell protocol server (sshd)

Group: System Environment/Daemons

Obsoletes: ssh-server

PreReq: openssh = %{version}-%{release}, chkconfig >= 0.9

Requires: /etc/pam.d/system-auth

%package askpass

Summary: OpenSSH X11 passphrase dialog

Group: Applications/Internet

Requires: openssh = %{version}-%{release}

Obsoletes: ssh-extras

%package askpass-gnome

Summary: OpenSSH GNOME passphrase dialog

Group: Applications/Internet

Requires: openssh = %{version}-%{release}

Obsoletes: ssh-extras

%description

Ssh (Secure Shell) a program for logging into a remote machine and for

executing commands in a remote machine.  It is intended to replace

rlogin and rsh, and provide secure encrypted communications between

two untrusted hosts over an insecure network.  X11 connections and

arbitrary TCP/IP ports can also be forwarded over the secure channel.

OpenSSH is OpenBSD's rework of the last free version of SSH, bringing it

up to date in terms of security and features, as well as removing all 

patented algorithms to separate libraries (OpenSSL).

This package includes the core files necessary for both the OpenSSH

client and server.  To make this package useful, you should also

install openssh-clients, openssh-server, or both.

%description clients

Ssh (Secure Shell) a program for logging into a remote machine and for

executing commands in a remote machine.  It is intended to replace

rlogin and rsh, and provide secure encrypted communications between

two untrusted hosts over an insecure network.  X11 connections and

arbitrary TCP/IP ports can also be forwarded over the secure channel.

OpenSSH is OpenBSD's rework of the last free version of SSH, bringing it

up to date in terms of security and features, as well as removing all 

patented algorithms to separate libraries (OpenSSL).

This package includes the clients necessary to make encrypted connections

to SSH servers.

%description server

Ssh (Secure Shell) a program for logging into a remote machine and for

executing commands in a remote machine.  It is intended to replace

rlogin and rsh, and provide secure encrypted communications between

two untrusted hosts over an insecure network.  X11 connections and

arbitrary TCP/IP ports can also be forwarded over the secure channel.

OpenSSH is OpenBSD's rework of the last free version of SSH, bringing it

up to date in terms of security and features, as well as removing all 

patented algorithms to separate libraries (OpenSSL).

This package contains the secure shell daemon. The sshd is the server 

part of the secure shell protocol and allows ssh clients to connect to 

your host.

%description askpass

Ssh (Secure Shell) a program for logging into a remote machine and for

executing commands in a remote machine.  It is intended to replace

rlogin and rsh, and provide secure encrypted communications between

two untrusted hosts over an insecure network.  X11 connections and

arbitrary TCP/IP ports can also be forwarded over the secure channel.

OpenSSH is OpenBSD's rework of the last free version of SSH, bringing it

up to date in terms of security and features, as well as removing all 

patented algorithms to separate libraries (OpenSSL).

This package contains Jim Knoble's <jmknoble@pobox.com> X11 passphrase 

dialog.

%description askpass-gnome

Ssh (Secure Shell) a program for logging into a remote machine and for

executing commands in a remote machine.  It is intended to replace

rlogin and rsh, and provide secure encrypted communications between

two untrusted hosts over an insecure network.  X11 connections and

arbitrary TCP/IP ports can also be forwarded over the secure channel.

OpenSSH is OpenBSD's rework of the last free version of SSH, bringing it

up to date in terms of security and features, as well as removing all 

patented algorithms to separate libraries (OpenSSL).

This package contains the GNOME passphrase dialog.

%changelog

* Thu Oct  5 2000 Nalin Dahyabhai <nalin@redhat.com>

- Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always

  build PAM authentication in.

- Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.

- Clean out no-longer-used patches.

- Patch ssh-add to try to add both identity and id_dsa, and to error only

  when neither exists.

* Mon Oct  2 2000 Nalin Dahyabhai <nalin@redhat.com>

- Update x11-askpass to 1.0.2. (#17835)

- Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will

  always find them in the right place. (#17909)

- Set the default path to be the same as the one supplied by /bin/login, but

  add /usr/X11R6/bin. (#17909)

- Try to handle obsoletion of ssh-server more cleanly.  Package names

  are different, but init script name isn't. (#17865)

* Wed Sep  6 2000 Nalin Dahyabhai <nalin@redhat.com>

- Update to 2.2.0p1. (#17835)

- Tweak the init script to allow proper restarting. (#18023)

* Wed Aug 23 2000 Nalin Dahyabhai <nalin@redhat.com>

- Update to 20000823 snapshot.

- Change subpackage requirements from %%{version} to %%{version}-%%{release}

- Back out the pipe patch.

* Mon Jul 17 2000 Nalin Dahyabhai <nalin@redhat.com>

- Update to 2.1.1p4, which includes fixes for config file parsing problems.

- Move the init script back.

- Add Damien's quick fix for wackiness.

* Wed Jul 12 2000 Nalin Dahyabhai <nalin@redhat.com>

- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().

* Thu Jul  6 2000 Nalin Dahyabhai <nalin@redhat.com>

- Move condrestart to server postun.

- Move key generation to init script.

- Actually use the right patch for moving the key generation to the init script.

- Clean up the init script a bit.

* Wed Jul  5 2000 Nalin Dahyabhai <nalin@redhat.com>

- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.

* Sun Jul  2 2000 Nalin Dahyabhai <nalin@redhat.com>

- Update to 2.1.1p2.

- Use of strtok() considered harmful.

* Sat Jul  1 2000 Nalin Dahyabhai <nalin@redhat.com>

- Get the build root out of the man pages.

* Thu Jun 29 2000 Nalin Dahyabhai <nalin@redhat.com>

- Add and use condrestart support in the init script.

- Add newer initscripts as a prereq.

* Tue Jun 27 2000 Nalin Dahyabhai <nalin@redhat.com>

- Build in new environment (release 2)

- Move -clients subpackage to Applications/Internet group

* Fri Jun  9 2000 Nalin Dahyabhai <nalin@redhat.com>

- Update to 2.2.1p1

* Sat Jun  3 2000 Nalin Dahyabhai <nalin@redhat.com>

- Patch to build with neither RSA nor RSAref.

- Miscellaneous FHS-compliance tweaks.

- Fix for possibly-compressed man pages.

* Wed Mar 15 2000 Damien Miller <djm@ibs.com.au>

- Updated for new location

- Updated for new gnome-ssh-askpass build

* Sun Dec 26 1999 Damien Miller <djm@mindrot.org>

- Added Jim Knoble's <jmknoble@pobox.com> askpass

* Mon Nov 15 1999 Damien Miller <djm@mindrot.org>

- Split subpackages further based on patch from jim knoble <jmknoble@pobox.com>

* Sat Nov 13 1999 Damien Miller <djm@mindrot.org>

- Added 'Obsoletes' directives

* Tue Nov 09 1999 Damien Miller <djm@ibs.com.au>

- Use make install

- Subpackages

* Mon Nov 08 1999 Damien Miller <djm@ibs.com.au>

- Added links for slogin

- Fixed perms on manpages

* Sat Oct 30 1999 Damien Miller <djm@ibs.com.au>

- Renamed init script

* Fri Oct 29 1999 Damien Miller <djm@ibs.com.au>

- Back to old binary names

* Thu Oct 28 1999 Damien Miller <djm@ibs.com.au>

- Use autoconf

- New binary names

* Wed Oct 27 1999 Damien Miller <djm@ibs.com.au>

- Initial RPMification, based on Jan "Yenya" Kasprzak's <kas@fi.muni.cz> spec.

%prep

%setup -q -a 1

%patch0 -p1 -b .redhat

%patch1 -p1 -b .agent

autoconf

%build

%configure \

	--sysconfdir=%{_sysconfdir}/ssh \

	--with-tcp-wrappers \

	--with-ipv4-default \

	--with-rsh=/usr/bin/rsh \

	--with-default-path=/usr/local/bin:/bin:/usr/bin:/usr/X11R6/bin

make

pushd x11-ssh-askpass-%{aversion}

xmkmf -a

make

popd

pushd contrib

gcc -O -g `gnome-config --cflags gnome gnomeui` \

        gnome-ssh-askpass.c -o gnome-ssh-askpass \

        `gnome-config --libs gnome gnomeui`

popd

%install

rm -rf $RPM_BUILD_ROOT

%{makeinstall} sysconfdir=$RPM_BUILD_ROOT%{_sysconfdir}/ssh

install -d $RPM_BUILD_ROOT/etc/pam.d/

install -d $RPM_BUILD_ROOT/etc/rc.d/init.d

install -d $RPM_BUILD_ROOT%{_libexecdir}/ssh

install -m644 contrib/redhat/sshd.pam $RPM_BUILD_ROOT/etc/pam.d/sshd

install -m755 $RPM_SOURCE_DIR/openssh.init $RPM_BUILD_ROOT/etc/rc.d/init.d/sshd

install -s x11-ssh-askpass-%{aversion}/x11-ssh-askpass $RPM_BUILD_ROOT%{_libexecdir}/ssh/x11-ssh-askpass

ln -s x11-ssh-askpass $RPM_BUILD_ROOT%{_libexecdir}/ssh/ssh-askpass

install -s contrib/gnome-ssh-askpass $RPM_BUILD_ROOT%{_libexecdir}/ssh/gnome-ssh-askpass

install -d $RPM_BUILD_ROOT/etc/profile.d/

install -m 755 %{SOURCE3} %{SOURCE4} $RPM_BUILD_ROOT/etc/profile.d/

perl -pi -e "s|$RPM_BUILD_ROOT||g" $RPM_BUILD_ROOT%{_mandir}/man*/*

%clean

rm -rf $RPM_BUILD_ROOT

%triggerun server -- ssh-server

if [ "$1" != 0 -a -r /var/run/sshd.pid ] ; then

	touch /var/run/sshd.restart

fi

%triggerpostun server -- ssh-server

if [ "$1" != 0 ] ; then

	/sbin/chkconfig --add sshd

	if test -f /var/run/sshd.restart ; then

		rm -f /var/run/sshd.restart

		/sbin/service sshd start > /dev/null 2>&1

	fi

fi

%post server

/sbin/chkconfig --add sshd

%postun server

/sbin/service sshd condrestart > /dev/null 2>&1 || :

%preun server

if [ "$1" = 0 ]

then

	/sbin/service sshd stop > /dev/null 2>&1

	/sbin/chkconfig --del sshd

fi

%files

%defattr(-,root,root)

%doc ChangeLog OVERVIEW COPYING.Ylonen README* INSTALL 

%doc CREDITS UPGRADING TODO

%attr(0755,root,root) %{_bindir}/ssh-keygen

%attr(0755,root,root) %{_bindir}/scp

%attr(0644,root,root) %{_mandir}/man1/ssh-keygen.1*

%attr(0644,root,root) %{_mandir}/man1/scp.1*

%attr(0755,root,root) %dir /etc/ssh

%attr(0755,root,root) %dir %{_libexecdir}/ssh

%files clients

%defattr(-,root,root)

%attr(4755,root,root) %{_bindir}/ssh

%attr(0755,root,root) %{_bindir}/ssh-agent

%attr(0755,root,root) %{_bindir}/ssh-add

%attr(0644,root,root) %{_mandir}/man1/ssh.1*

%attr(0644,root,root) %{_mandir}/man1/ssh-agent.1*

%attr(0644,root,root) %{_mandir}/man1/ssh-add.1*

%attr(0644,root,root) %config(noreplace) /etc/ssh/ssh_config

%attr(-,root,root) %{_bindir}/slogin

%attr(-,root,root) %{_mandir}/man1/slogin.1*

%files server

%defattr(-,root,root)

%attr(0755,root,root) %{_sbindir}/sshd

%attr(0644,root,root) %{_mandir}/man8/sshd.8*

%attr(0600,root,root) %config(noreplace) /etc/ssh/sshd_config

%attr(0600,root,root) %config(noreplace) /etc/pam.d/sshd

%attr(0755,root,root) %config /etc/rc.d/init.d/sshd

%files askpass

%defattr(-,root,root)

%doc x11-ssh-askpass-%{aversion}/README

%doc x11-ssh-askpass-%{aversion}/ChangeLog

%doc x11-ssh-askpass-%{aversion}/SshAskpass*.ad

%attr(0755,root,root) %{_libexecdir}/ssh/ssh-askpass

%attr(0755,root,root) %{_libexecdir}/ssh/x11-ssh-askpass

%files askpass-gnome

%defattr(-,root,root)

%attr(0755,root,root) %{_sysconfdir}/profile.d/gnome-ssh-askpass.*

%attr(0755,root,root) %{_libexecdir}/ssh/gnome-ssh-askpass