On Fri, Feb 14, 2020 at 08:56:25PM +0100, Klemens Nanni wrote: > I'm experiencing some issues with iked(8) and the first one took > me much longer than appreciated: order of commands matters. iked/iked.conf is not special, ipsecctl/ipsec.conf obviously has it, too.
So while the problem of undocumented order does exist, I no longer think BUGS is the right place for it. Either ways, all effected tools ought to be fixed, not just iked. pfctl/pf.conf for example does expect a certain order of keywords as well, yet it provides syntax in BNF which rules out any ambiguity. Thus, I drop this diff (but keep the lesson).
