Hi,
On 2014-06-30 21:28, The Libreswan Project wrote:
The Libreswan Project is about to release libreswan-3.9. It includes
a
very large bugfix and enhancement patch set. Therefor, we would
really
like people to do some additional testing before we release it.
I needed to apply to tiny patches to make it work for me:
diff --git a/initsystems/upstart/ipsec.conf.in
b/initsystems/upstart/ipsec.conf.in
index 50dd97d..c2cc783 100644
--- a/initsystems/upstart/ipsec.conf.in
+++ b/initsystems/upstart/ipsec.conf.in
@@ -23,7 +23,7 @@ script
@FINALLIBEXECDIR@/pluto --config @FINALCONFFILE@ --nofork
$PLUTO_OPTIONS
end script
-post-stop script
+pre-stop script
ipsec whack --shutdown
ip xfrm policy flush
ip xfrm state flush
diff --git a/programs/_stackmanager/_stackmanager.in
b/programs/_stackmanager/_stackmanager.in
index 6c2a98f..0ad1066 100644
--- a/programs/_stackmanager/_stackmanager.in
+++ b/programs/_stackmanager/_stackmanager.in
@@ -367,7 +367,6 @@ startklips() {
if ($1 == "inet")
sub(" [^ ]+:[^ ]+"," ",$0)
sub("/.*","",$2)
- sub("dynamic","",$7)
for (i = 2; i < NF; i++) {
if ($i == "brd" || $i == "peer" || $i ==
"secondary")
i++
First hunk: it'd complain during stop/restart that it failed during
stop (ipsec whack --shutdown being executed after pluto got shot down by
init probably).
Second hunk: the sub() makes it that NF becomes 7, breaking the for()
loop after it. Another option is to replace that line with
sub("dynamic","",$0). I don't think it's needed at all, as the first
line of the awk stuff already excludes dynamic IP addresses.
Regards,
Ruben
_______________________________________________
Swan-dev mailing list
[email protected]
https://lists.libreswan.org/mailman/listinfo/swan-dev
