secgateway/kernel/rootfs_base/etc/init.d/setkey

68 lines
1.2 KiB
Bash
Executable File

#!/bin/sh
### BEGIN INIT INFO
# Provides: setkey
# Required-Start: $remote_fs
# Required-Stop: $remote_fs
# Default-Start: S
# Default-Stop:
# Short-Description: option to manually manipulate the IPsec SA/SP database
### END INIT INFO
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
SETKEY=/usr/sbin/setkey
SETKEY_CONF=/etc/ipsec-tools.conf
SETKEY_CONF_DIR=/etc/ipsec-tools.d
NAME=setkey
RUN_SETKEY="yes"
if [ -f /etc/default/setkey ] ; then
. /etc/default/setkey
fi
test -x $SETKEY -a -f $SETKEY_CONF || exit 0
if [ $RUN_SETKEY != "yes" ] ; then
exit 0
fi
set -e
. /lib/lsb/init-functions
case "$1" in
start)
log_begin_msg "Loading IPsec SA/SP database: "
err=0
for file in $SETKEY_CONF $SETKEY_CONF_DIR/*.conf ; do
if [ -r "$file" ] ; then
# Insert a manual newline until lsb-base amends its code.
echo
log_progress_msg " - ${file}"
$SETKEY -f $file || err=1
fi
done
log_end_msg $err
;;
stop)
log_begin_msg "Flushing IPsec SA/SP database: "
err=0
$SETKEY -F || err=1
$SETKEY -FP || err=1
log_end_msg $err
;;
restart|force-reload)
$0 stop
$0 start
echo "done."
;;
*)
N=/etc/init.d/$NAME
log_success_msg "Usage: $N {start|stop|restart|force-reload}" >&2
exit 1
;;
esac
exit 0