From dd2047c58ee503da2ec812f9b14a7c56e889191c Mon Sep 17 00:00:00 2001 From: Bill Nottingham Date: Tue, 16 Mar 2004 23:49:05 +0000 Subject: allow for no AH SPI (#116922, ) --- sysconfig/network-scripts/ifup-ipsec | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) (limited to 'sysconfig/network-scripts') diff --git a/sysconfig/network-scripts/ifup-ipsec b/sysconfig/network-scripts/ifup-ipsec index 17361bc7..3dafd9f0 100755 --- a/sysconfig/network-scripts/ifup-ipsec +++ b/sysconfig/network-scripts/ifup-ipsec @@ -108,10 +108,10 @@ if [ "$KEYING" = "manual" ]; then if [ "$MODE" = "host" ]; then /sbin/setkey -c >/dev/null 2>&1<< EOF -delete $SRC $DST ah $SPI_AH_OUT; -delete $DST $SRC ah $SPI_AH_IN; -delete $SRC $DST esp $SPI_ESP_OUT; -delete $DST $SRC esp $SPI_ESP_IN; +${SPI_AH_OUT:+delete $SRC $DST ah $SPI_AH_OUT;} +${SPI_AH_IN:+delete $DST $SRC ah $SPI_AH_IN;} +${SPI_ESP_OUT:+delete $SRC $DST esp $SPI_ESP_OUT;} +${SPI_ESP_IN:+delete $DST $SRC esp $SPI_ESP_IN;} spddelete $SRC $DST any -P out; spddelete $DST $SRC any -P in; -- cgit v1.2.1