Update IPsec startup and shutdown script

This commit is contained in:
Teddysun 2020-05-31 22:29:34 +09:00
parent 23882a1a92
commit 976aa03f8b

View File

@ -24,7 +24,7 @@
# This program is free software; you can redistribute it and/or modify it # This program is free software; you can redistribute it and/or modify it
# under the terms of the GNU General Public License as published by the # under the terms of the GNU General Public License as published by the
# Free Software Foundation; either version 2 of the License, or (at your # Free Software Foundation; either version 2 of the License, or (at your
# option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>. # option) any later version. See <https://www.gnu.org/licenses/gpl2.txt>.
# #
# This program is distributed in the hope that it will be useful, but # This program is distributed in the hope that it will be useful, but
# WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY # WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
@ -71,17 +71,15 @@ fi
# where the private directory and the config files are # where the private directory and the config files are
IPSEC_CONF="${IPSEC_CONF:-/etc/ipsec.conf}" IPSEC_CONF="${IPSEC_CONF:-/etc/ipsec.conf}"
IPSEC_EXECDIR="${IPSEC_EXECDIR:-/usr/lib/ipsec}" IPSEC_EXECDIR="${IPSEC_EXECDIR:-/usr/libexec/ipsec}"
IPSEC_SBINDIR="${IPSEC_SBINDIR:-/usr/sbin}" IPSEC_SBINDIR="${IPSEC_SBINDIR:-/usr/sbin}"
unset PLUTO_OPTIONS unset PLUTO_OPTIONS
rundir=/var/run/pluto rundir=/run/pluto
plutopid=${rundir}/pluto.pid plutopid=${rundir}/pluto.pid
plutoctl=${rundir}/pluto.ctl plutoctl=${rundir}/pluto.ctl
lockdir=/var/lock/subsys lockdir=/var/lock/subsys
lockfile=${lockdir}/ipsec lockfile=${lockdir}/ipsec
ipsecversion=/proc/net/ipsec_version
kamepfkey=/proc/net/pfkey
# /etc/resolv.conf related paths # /etc/resolv.conf related paths
LIBRESWAN_RESOLV_CONF=${rundir}/libreswan-resolv-conf-backup LIBRESWAN_RESOLV_CONF=${rundir}/libreswan-resolv-conf-backup
@ -144,6 +142,9 @@ start() {
rm -f ${lockfile} rm -f ${lockfile}
fi fi
echo echo
if [ -f /usr/libexec/ipsec/portexcludes ] ; then
/usr/libexec/ipsec/portexcludes
fi
return ${RETVAL} return ${RETVAL}
} }