%define aversion 1.0

Summary: OpenSSH free Secure Shell (SSH) implementation

Name: openssh

Version: 2.1.1p4

Release: 1

URL: http://www.openssh.com/portable.html

Source0: ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-%{version}.tar.gz

Source1: http://www.ntrnet.net/~jmknoble/software/x11-ssh-askpass/x11-ssh-askpass-%{aversion}.tar.gz

Patch0: openssh-2.1.0p3-no_rsa.patch

Patch1: openssh-2.1.0p3-redhat.patch

Patch2: openssh-2.1.1p2-init.patch

Patch3: openssh-2.1.1p2-strtok.patch

Patch4: openssh-2.1.1p2-x11.patch

Patch5: openssh-2.1.1p4-pipe.patch

Copyright: BSD

Group: Applications/Internet

BuildRoot: %{_tmppath}/openssh-%{version}-buildroot

Obsoletes: ssh

PreReq: openssl >= 0.9.5a, initscripts >= 5.20

Requires: openssl >= 0.9.5a

BuildPreReq: perl, openssl-devel, tcp_wrappers, gnome-libs-devel

%package clients

Summary: OpenSSH Secure Shell protocol clients

Requires: openssh = %{version}

Group: Applications/Internet

Obsoletes: ssh-clients

%package server

Summary: OpenSSH Secure Shell protocol server (sshd)

Group: System Environment/Daemons

Obsoletes: ssh-server

PreReq: openssh = %{version}, chkconfig >= 0.9

Requires: /etc/pam.d/system-auth

%package askpass

Summary: OpenSSH X11 passphrase dialog

Group: Applications/Internet

Requires: openssh = %{version}

Obsoletes: ssh-extras

%package askpass-gnome

Summary: OpenSSH GNOME passphrase dialog

Group: Applications/Internet

Requires: openssh = %{version}

Obsoletes: ssh-extras

%description

Ssh (Secure Shell) a program for logging into a remote machine and for

executing commands in a remote machine.  It is intended to replace

rlogin and rsh, and provide secure encrypted communications between

two untrusted hosts over an insecure network.  X11 connections and

arbitrary TCP/IP ports can also be forwarded over the secure channel.

OpenSSH is OpenBSD's rework of the last free version of SSH, bringing it

up to date in terms of security and features, as well as removing all 

patented algorithms to separate libraries (OpenSSL).

This package includes the core files necessary for both the OpenSSH

client and server.  To make this package useful, you should also

install openssh-clients, openssh-server, or both.

%description clients

Ssh (Secure Shell) a program for logging into a remote machine and for

executing commands in a remote machine.  It is intended to replace

rlogin and rsh, and provide secure encrypted communications between

two untrusted hosts over an insecure network.  X11 connections and

arbitrary TCP/IP ports can also be forwarded over the secure channel.

OpenSSH is OpenBSD's rework of the last free version of SSH, bringing it

up to date in terms of security and features, as well as removing all 

patented algorithms to separate libraries (OpenSSL).

This package includes the clients necessary to make encrypted connections

to SSH servers.

%description server

Ssh (Secure Shell) a program for logging into a remote machine and for

executing commands in a remote machine.  It is intended to replace

rlogin and rsh, and provide secure encrypted communications between

two untrusted hosts over an insecure network.  X11 connections and

arbitrary TCP/IP ports can also be forwarded over the secure channel.

OpenSSH is OpenBSD's rework of the last free version of SSH, bringing it

up to date in terms of security and features, as well as removing all 

patented algorithms to separate libraries (OpenSSL).

This package contains the secure shell daemon. The sshd is the server 

part of the secure shell protocol and allows ssh clients to connect to 

your host.

%description askpass

Ssh (Secure Shell) a program for logging into a remote machine and for

executing commands in a remote machine.  It is intended to replace

rlogin and rsh, and provide secure encrypted communications between

two untrusted hosts over an insecure network.  X11 connections and

arbitrary TCP/IP ports can also be forwarded over the secure channel.

OpenSSH is OpenBSD's rework of the last free version of SSH, bringing it

up to date in terms of security and features, as well as removing all 

patented algorithms to separate libraries (OpenSSL).

This package contains Jim Knoble's <jmknoble@pobox.com> X11 passphrase 

dialog.

%description askpass-gnome

Ssh (Secure Shell) a program for logging into a remote machine and for

executing commands in a remote machine.  It is intended to replace

rlogin and rsh, and provide secure encrypted communications between

two untrusted hosts over an insecure network.  X11 connections and

arbitrary TCP/IP ports can also be forwarded over the secure channel.

OpenSSH is OpenBSD's rework of the last free version of SSH, bringing it

up to date in terms of security and features, as well as removing all 

patented algorithms to separate libraries (OpenSSL).

This package contains the GNOME passphrase dialog.

%changelog

* Mon Jul 17 2000 Nalin Dahyabhai <nalin@redhat.com>

- Update to 2.1.1p4, which includes fixes for config file parsing problems.

- Move the init script back.

- Add Damien's quick fix for wackiness.

* Wed Jul 12 2000 Nalin Dahyabhai <nalin@redhat.com>

- Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().

* Thu Jul  6 2000 Nalin Dahyabhai <nalin@redhat.com>

- Move condrestart to server postun.

- Move key generation to init script.

- Actually use the right patch for moving the key generation to the init script.

- Clean up the init script a bit.

* Wed Jul  5 2000 Nalin Dahyabhai <nalin@redhat.com>

- Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.

* Sun Jul  2 2000 Nalin Dahyabhai <nalin@redhat.com>

- Update to 2.1.1p2.

- Use of strtok() considered harmful.

* Sat Jul  1 2000 Nalin Dahyabhai <nalin@redhat.com>

- Get the build root out of the man pages.

* Thu Jun 29 2000 Nalin Dahyabhai <nalin@redhat.com>

- Add and use condrestart support in the init script.

- Add newer initscripts as a prereq.

* Tue Jun 27 2000 Nalin Dahyabhai <nalin@redhat.com>

- Build in new environment (release 2)

- Move -clients subpackage to Applications/Internet group

* Fri Jun  9 2000 Nalin Dahyabhai <nalin@redhat.com>

- Update to 2.2.1p1

* Sat Jun  3 2000 Nalin Dahyabhai <nalin@redhat.com>

- Patch to build with neither RSA nor RSAref.

- Miscellaneous FHS-compliance tweaks.

- Fix for possibly-compressed man pages.

* Wed Mar 15 2000 Damien Miller <djm@ibs.com.au>

- Updated for new location

- Updated for new gnome-ssh-askpass build

* Sun Dec 26 1999 Damien Miller <djm@mindrot.org>

- Added Jim Knoble's <jmknoble@pobox.com> askpass

* Mon Nov 15 1999 Damien Miller <djm@mindrot.org>

- Split subpackages further based on patch from jim knoble <jmknoble@pobox.com>

* Sat Nov 13 1999 Damien Miller <djm@mindrot.org>

- Added 'Obsoletes' directives

* Tue Nov 09 1999 Damien Miller <djm@ibs.com.au>

- Use make install

- Subpackages

* Mon Nov 08 1999 Damien Miller <djm@ibs.com.au>

- Added links for slogin

- Fixed perms on manpages

* Sat Oct 30 1999 Damien Miller <djm@ibs.com.au>

- Renamed init script

* Fri Oct 29 1999 Damien Miller <djm@ibs.com.au>

- Back to old binary names

* Thu Oct 28 1999 Damien Miller <djm@ibs.com.au>

- Use autoconf

- New binary names

* Wed Oct 27 1999 Damien Miller <djm@ibs.com.au>

- Initial RPMification, based on Jan "Yenya" Kasprzak's <kas@fi.muni.cz> spec.

%prep

%setup -q -a 1

%patch1 -p1 -b .redhat

%patch2 -p1 -b .init

#%patch3 -p1 -b .strtok

#%patch4 -p1 -b .x11

%patch5 -p0 -b .pipe

autoconf

%build

%configure --sysconfdir=%{_sysconfdir}/ssh \

	--with-tcp-wrappers --with-ipv4-default

make

pushd x11-ssh-askpass-%{aversion}

xmkmf -a

make

popd

pushd contrib

gcc -O -g `gnome-config --cflags gnome gnomeui` \

        gnome-ssh-askpass.c -o gnome-ssh-askpass \

        `gnome-config --libs gnome gnomeui`

popd

%install

rm -rf $RPM_BUILD_ROOT

%{makeinstall} sysconfdir=$RPM_BUILD_ROOT%{_sysconfdir}/ssh

install -d $RPM_BUILD_ROOT/etc/pam.d/

install -d $RPM_BUILD_ROOT/etc/rc.d/init.d

install -d $RPM_BUILD_ROOT%{_libexecdir}/ssh

install -m644 contrib/redhat/sshd.pam $RPM_BUILD_ROOT/etc/pam.d/sshd

install -m755 contrib/redhat/sshd.init $RPM_BUILD_ROOT/etc/rc.d/init.d/sshd

install -s x11-ssh-askpass-%{aversion}/x11-ssh-askpass $RPM_BUILD_ROOT%{_libexecdir}/ssh/x11-ssh-askpass

ln -s x11-ssh-askpass $RPM_BUILD_ROOT%{_libexecdir}/ssh/ssh-askpass

install -s contrib/gnome-ssh-askpass $RPM_BUILD_ROOT%{_libexecdir}/ssh/gnome-ssh-askpass

perl -pi -e "s|$RPM_BUILD_ROOT||g" $RPM_BUILD_ROOT%{_mandir}/man*/*

%clean

rm -rf $RPM_BUILD_ROOT

%post server

/sbin/chkconfig --add sshd

%postun server

/sbin/service sshd condrestart > /dev/null 2>&1

%preun server

if [ "$1" = 0 ]

then

	/sbin/service sshd stop > /dev/null 2>&1

	/sbin/chkconfig --del sshd

fi

%files

%defattr(-,root,root)

%doc ChangeLog OVERVIEW COPYING.Ylonen README* INSTALL 

%doc CREDITS UPGRADING

%attr(0755,root,root) %{_bindir}/ssh-keygen

%attr(0755,root,root) %{_bindir}/scp

%attr(0644,root,root) %{_mandir}/man1/ssh-keygen.1*

%attr(0644,root,root) %{_mandir}/man1/scp.1*

%attr(0755,root,root) %dir /etc/ssh

%attr(0755,root,root) %dir %{_libexecdir}/ssh

%files clients

%defattr(-,root,root)

%attr(4755,root,root) %{_bindir}/ssh

%attr(0755,root,root) %{_bindir}/ssh-agent

%attr(0755,root,root) %{_bindir}/ssh-add

%attr(0644,root,root) %{_mandir}/man1/ssh.1*

%attr(0644,root,root) %{_mandir}/man1/ssh-agent.1*

%attr(0644,root,root) %{_mandir}/man1/ssh-add.1*

%attr(0644,root,root) %config(noreplace) /etc/ssh/ssh_config

%attr(-,root,root) %{_bindir}/slogin

%attr(-,root,root) %{_mandir}/man1/slogin.1*

%files server

%defattr(-,root,root)

%attr(0755,root,root) %{_sbindir}/sshd

%attr(0644,root,root) %{_mandir}/man8/sshd.8*

%attr(0600,root,root) %config(noreplace) /etc/ssh/sshd_config

%attr(0600,root,root) %config(noreplace) /etc/pam.d/sshd

%attr(0755,root,root) %config /etc/rc.d/init.d/sshd

%files askpass

%defattr(-,root,root)

%doc x11-ssh-askpass-%{aversion}/README

%doc x11-ssh-askpass-%{aversion}/ChangeLog

%doc x11-ssh-askpass-%{aversion}/SshAskpass*.ad

%attr(0755,root,root) %{_libexecdir}/ssh/ssh-askpass

%attr(0755,root,root) %{_libexecdir}/ssh/x11-ssh-askpass

%files askpass-gnome

%defattr(-,root,root)

%attr(0755,root,root) %{_libexecdir}/ssh/gnome-ssh-askpass