Updating to upstream OpenVPN 2.4.7

The unit file patch had to be slightly adopted to fit with upstream
changes.  And the signing key has been updated.

Signed-off-by: David Sommerseth <dazo@eurephia.org>

.gitignore

@@ -56,3 +56,5 @@ openvpn-2.1.2.tar.gz.asc
 /openvpn-2.4.5.tar.xz.asc
 /openvpn-2.4.6.tar.xz
 /openvpn-2.4.6.tar.xz.asc
+/openvpn-2.4.7.tar.xz
+/openvpn-2.4.7.tar.xz.asc

0001-Change-the-default-cipher-to-AES-256-GCM-for-server-.patch

@@ -24,7 +24,7 @@ index 9a8a2c7..0ecda08 100644
  WorkingDirectory=/etc/openvpn/server
 -ExecStart=@sbindir@/openvpn --status %t/openvpn-server/status-%i.log --status-version 2 --suppress-timestamps --config %i.conf
 +ExecStart=@sbindir@/openvpn --status %t/openvpn-server/status-%i.log --status-version 2 --suppress-timestamps --cipher AES-256-GCM --ncp-ciphers AES-256-GCM:AES-128-GCM:AES-256-CBC:AES-128-CBC:BF-CBC --config %i.conf
- CapabilityBoundingSet=CAP_IPC_LOCK CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW CAP_SETGID CAP_SETUID CAP_SYS_CHROOT CAP_DAC_OVERRIDE
+ CapabilityBoundingSet=CAP_IPC_LOCK CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW CAP_SETGID CAP_SETUID CAP_SYS_CHROOT CAP_DAC_OVERRIDE CAP_AUDIT_WRITE
  LimitNPROC=10
  DeviceAllow=/dev/null rw
 -- 

openvpn.spec

@@ -6,12 +6,12 @@
 %bcond_without tests_long
 
 Name:              openvpn
-Version:           2.4.6
+Version:           2.4.7
-Release:           4%{?prerelease:.%{prerelease}}%{?dist}
+Release:           1%{?prerelease:.%{prerelease}}%{?dist}
 Summary:           A full-featured SSL VPN solution
 URL:               https://community.openvpn.net/
-Source0:           https://swupdate.openvpn.org/community/releases/%{name}-%{version}%{?prerelease:_%{prerelease}}.tar.xz
+Source0:           https://build.openvpn.net/downloads/releases/%{name}-%{version}%{?prerelease:_%{prerelease}}.tar.xz
-Source1:           https://swupdate.openvpn.org/community/releases/%{name}-%{version}%{?prerelease:_%{prerelease}}.tar.xz.asc
+Source1:           https://build.openvpn.net/downloads/releases/%{name}-%{version}%{?prerelease:_%{prerelease}}.tar.xz.asc
 Source2:           roadwarrior-server.conf
 Source3:           roadwarrior-client.conf
 # Upstream signing key
@@ -183,6 +183,9 @@ getent passwd openvpn &>/dev/null || \
 
 
 %changelog
+* Wed Feb 20 2019 David Sommerseth <dazo@eurephia.org> - 2.4.7-1
+- Updating to upstream OpenVPN 2.4.7
+
 * Fri Feb 01 2019 Fedora Release Engineering <releng@fedoraproject.org> - 2.4.6-4
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild