Your message dated Sun, 04 Apr 2010 16:50:20 +0000
with message-id <[email protected]>
and subject line Bug#519862: fixed in ipsec-tools 1:0.7.3-5
has caused the Debian Bug report #519862,
regarding Add support for /etc/ipsec-tools.d/*.conf processing by init script.
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
519862: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=519862
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: ipsec-tools
Version: 1:0.7.1-1.3
Severity: normal


I've been using the following script for a while, works well enough for
my use.  Is there a chance that we could add value to the init process
by processing more than just /etc/ipsec-tools.conf?  I distribute my vpn
parameters via version control and it's very nice to have separate
configuration files.

--- setkey      2009-03-15 10:45:17.000000000 -0800
+++ setkey.new  2009-03-15 10:37:38.000000000 -0800
@@ -10,6 +10,7 @@
 PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
 SETKEY=/usr/sbin/setkey
 SETKEY_CONF=/etc/ipsec-tools.conf
+SETKEY_CONF_DIR=/etc/ipsec-tools.d
 NAME=setkey

 test -x $SETKEY -a -f $SETKEY_CONF || exit 0
@@ -27,8 +28,15 @@

 case "$1" in
   start)
-       echo -n "Loading IPsec SA/SP database from $SETKEY_CONF: "
-       $SETKEY -f $SETKEY_CONF
+       echo "Loading IPsec SA/SP database: "
+
+        for file in $SETKEY_CONF $SETKEY_CONF_DIR/*.conf ; do
+          if [ -r "$file" ] ; then
+            echo " - ${file}"
+            $SETKEY -f $file
+          fi
+        done
+
        echo "done."
        ;;
   stop)
@@ -38,10 +46,8 @@
        echo "done."
        ;;
   restart|force-reload)
-       echo -n "Reloading IPsec SA/SP database: "
-       $SETKEY -F
-       $SETKEY -FP
-       $SETKEY -f $SETKEY_CONF
+       $0 stop
+       $0 start
        echo "done."
        ;;
   *)

Attachment: signature.asc
Description: OpenPGP digital signature


--- End Message ---
--- Begin Message ---
Source: ipsec-tools
Source-Version: 1:0.7.3-5

We believe that the bug you reported is fixed in the latest version of
ipsec-tools, which is due to be installed in the Debian FTP archive:

ipsec-tools_0.7.3-5.diff.gz
  to main/i/ipsec-tools/ipsec-tools_0.7.3-5.diff.gz
ipsec-tools_0.7.3-5.dsc
  to main/i/ipsec-tools/ipsec-tools_0.7.3-5.dsc
ipsec-tools_0.7.3-5_amd64.deb
  to main/i/ipsec-tools/ipsec-tools_0.7.3-5_amd64.deb
racoon_0.7.3-5_amd64.deb
  to main/i/ipsec-tools/racoon_0.7.3-5_amd64.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Luca Bruno <[email protected]> (supplier of updated ipsec-tools package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Mon, 22 Mar 2010 10:36:28 +0100
Source: ipsec-tools
Binary: ipsec-tools racoon
Architecture: source amd64
Version: 1:0.7.3-5
Distribution: unstable
Urgency: low
Maintainer: Stefan Bauer <[email protected]>
Changed-By: Luca Bruno <[email protected]>
Description: 
 ipsec-tools - IPsec tools for Linux
 racoon     - IPsec IKE keying daemon
Closes: 389286 519862 550697
Changes: 
 ipsec-tools (1:0.7.3-5) unstable; urgency=low
 .
   * Extented setkey init-script to be able to load setkey configurations
     from /etc/ipsec-tools.d/*.conf files (Closes: #519862)
     Patch supplied by Shane R. Spencer <[email protected]>
   * Mention undocumented feature esp-udp in setkey manpage (Closes: #550697)
   * Document lack of tcp-md5 support for setkey on linux (Closes: #389286)
Checksums-Sha1: 
 23f105a3646fbef244b3855c971592548adef7b1 1137 ipsec-tools_0.7.3-5.dsc
 4c279dc8779cce8241dd61904f63cffaaab5a62c 48805 ipsec-tools_0.7.3-5.diff.gz
 8b52f940e4f18a0f5360bfc5ebde2ef92ea9a09b 86988 ipsec-tools_0.7.3-5_amd64.deb
 ac0a0d6ea27a8a900959c5841fd0a6a31cf6aa18 409284 racoon_0.7.3-5_amd64.deb
Checksums-Sha256: 
 2a72daaa961249b85b4ce0a26e5094e78f4fafd3dc785731c8007b05555f6c9b 1137 
ipsec-tools_0.7.3-5.dsc
 401085134cfb0aa2a93fe7d5964d0bba9db8d62ee3b7f9087b99c29546193de7 48805 
ipsec-tools_0.7.3-5.diff.gz
 0c95caf8591042d404fcce223aea35ffd193424b09808e82b9c8998f5bdfbfc0 86988 
ipsec-tools_0.7.3-5_amd64.deb
 6d752199e2f1ccfd6a3d3db62ad3da51d014b6de5a31c4fb9cf02ebc95db95c2 409284 
racoon_0.7.3-5_amd64.deb
Files: 
 87425fd00bac8fd52e6ee3d15b99dee6 1137 net extra ipsec-tools_0.7.3-5.dsc
 64e6d180506636f6858fd713a671b564 48805 net extra ipsec-tools_0.7.3-5.diff.gz
 de9d412f04f6e713bd03ad9c20fe8db6 86988 net extra ipsec-tools_0.7.3-5_amd64.deb
 0ea2028269ec3279419117be39134b67 409284 net extra racoon_0.7.3-5_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAku4vvMACgkQRqobajv7n7PZGQCffmbNMmbzjVGRrIhkvE+sLtC1
/poAoJXcqSrnmcI57oBJ5Zz8fDoX/zN3
=ztzE
-----END PGP SIGNATURE-----



--- End Message ---

Reply via email to