etc/rc.d/ipsec

   1 #!/bin/sh
   2 #
   3 # $NetBSD: ipsec,v 1.10 2008/11/12 12:35:52 ad Exp $
   4 #
   5
   6 # PROVIDE: ipsec
   7 # REQUIRE: root bootconf mountcritlocal tty
   8 # BEFORE:  DAEMON
   9
  10 $_rc_subr_loaded . /etc/rc.subr
  11
  12 name="ipsec"
  13 rcvar=$name
  14 start_precmd="ipsec_prestart"
  15 start_cmd="ipsec_start"
  16 stop_precmd="test -f /etc/ipsec.conf"
  17 stop_cmd="ipsec_stop"
  18 reload_cmd="ipsec_reload"
  19 extra_commands="reload"
  20
  21 ipsec_prestart()
  22 {
  23         if [ ! -f /etc/ipsec.conf ]; then
  24                 warn "/etc/ipsec.conf not readable; ipsec start aborted."
  25
  26                 stop_boot
  27                 return 1
  28         fi
  29         return 0
  30 }
  31
  32 ipsec_start()
  33 {
  34         echo "Installing ipsec manual keys/policies."
  35         /sbin/setkey -f /etc/ipsec.conf
  36 }
  37
  38 ipsec_stop()
  39 {
  40         echo "Clearing ipsec manual keys/policies."
  41
  42         # still not 100% sure if we would like to do this.
  43         # it is very questionable to do this during shutdown session, since
  44         # it can hang any of remaining IPv4/v6 session.
  45         #
  46         /sbin/setkey -F
  47         /sbin/setkey -FP
  48 }
  49
  50 ipsec_reload()
  51 {
  52         echo "Reloading ipsec manual keys/policies."
  53         /sbin/setkey -F
  54         /sbin/setkey -FP
  55         /sbin/setkey -f /etc/ipsec.conf
  56 }
  57
  58 load_rc_config $name
  59 run_rc_command "$1"