1#!/bin/sh 2#
| 1#!/bin/sh 2#
|
3# $NetBSD: ipsec,v 1.5 2000/07/21 01:16:07 lukem Exp $
| 3# $NetBSD: ipsec,v 1.7 2002/03/22 04:33:58 thorpej Exp $ 4# $FreeBSD: head/etc/rc.d/ipsec 98184 2002-06-13 22:14:37Z gordon $
|
4# 5 6# PROVIDE: ipsec 7# REQUIRE: root beforenetlkm mountcritlocal tty
| 5# 6 7# PROVIDE: ipsec 8# REQUIRE: root beforenetlkm mountcritlocal tty
|
| 9# BEFORE: DAEMON 10# KEYWORD: FreeBSD NetBSD
|
8 9# it does not really require beforenetlkm. 10 11. /etc/rc.subr 12 13name="ipsec"
| 11 12# it does not really require beforenetlkm. 13 14. /etc/rc.subr 15 16name="ipsec"
|
14rcvar=$name
| 17rcvar=`set_rcvar` 18# This will be overiden from rc.conf on FreeBSD. 19ipsec_file="/etc/ipsec.conf"
|
15start_precmd="ipsec_prestart" 16start_cmd="ipsec_start" 17stop_precmd="test -f /etc/ipsec.conf" 18stop_cmd="ipsec_stop" 19reload_cmd="ipsec_reload" 20extra_commands="reload" 21 22ipsec_prestart() 23{
| 20start_precmd="ipsec_prestart" 21start_cmd="ipsec_start" 22stop_precmd="test -f /etc/ipsec.conf" 23stop_cmd="ipsec_stop" 24reload_cmd="ipsec_reload" 25extra_commands="reload" 26 27ipsec_prestart() 28{
|
24 if [ ! -f /etc/ipsec.conf ]; then 25 warn "/etc/ipsec.conf not readable; ipsec start aborted."
| 29 if [ ! -f "$ipsec_file" ]; then 30 warn "$ipsec_file not readable; ipsec start aborted."
|
26 # 27 # If booting directly to multiuser, send SIGTERM to 28 # the parent (/etc/rc) to abort the boot 29 # 30 if [ "$autoboot" = yes ]; then 31 echo "ERROR: ABORTING BOOT (sending SIGTERM to parent)!" 32 kill -TERM $$ 33 exit 1 34 fi 35 return 1 36 fi 37 return 0 38} 39 40ipsec_start() 41{ 42 echo "Installing ipsec manual keys/policies."
| 31 # 32 # If booting directly to multiuser, send SIGTERM to 33 # the parent (/etc/rc) to abort the boot 34 # 35 if [ "$autoboot" = yes ]; then 36 echo "ERROR: ABORTING BOOT (sending SIGTERM to parent)!" 37 kill -TERM $$ 38 exit 1 39 fi 40 return 1 41 fi 42 return 0 43} 44 45ipsec_start() 46{ 47 echo "Installing ipsec manual keys/policies."
|
43 /sbin/setkey -f /etc/ipsec.conf
| 48 /sbin/setkey -f $ipsec_file
|
44} 45 46ipsec_stop() 47{ 48 echo "Clearing ipsec manual keys/policies." 49 50 # still not 100% sure if we would like to do this. 51 # it is very questionable to do this during shutdown session, since 52 # it can hang any of remaining IPv4/v6 session. 53 # 54 /sbin/setkey -F 55 /sbin/setkey -FP 56} 57 58ipsec_reload() 59{ 60 echo "Reloading ipsec manual keys/policies." 61 /sbin/setkey -F 62 /sbin/setkey -FP
| 49} 50 51ipsec_stop() 52{ 53 echo "Clearing ipsec manual keys/policies." 54 55 # still not 100% sure if we would like to do this. 56 # it is very questionable to do this during shutdown session, since 57 # it can hang any of remaining IPv4/v6 session. 58 # 59 /sbin/setkey -F 60 /sbin/setkey -FP 61} 62 63ipsec_reload() 64{ 65 echo "Reloading ipsec manual keys/policies." 66 /sbin/setkey -F 67 /sbin/setkey -FP
|
63 /sbin/setkey -f /etc/ipsec.conf
| 68 /sbin/setkey -f "$ipsec_file"
|
64} 65 66load_rc_config $name 67run_rc_command "$1"
| 69} 70 71load_rc_config $name 72run_rc_command "$1"
|