allow for no AH SPI (#116922, <felipe_alfaro@linuxmail.org>)

1 files changed, 4 insertions, 4 deletions

diff --git a/sysconfig/network-scripts/ifup-ipsec b/sysconfig/network-scripts/ifup-ipsec
index 17361bc7..3dafd9f0 100755
--- a/sysconfig/network-scripts/ifup-ipsec
+++ b/sysconfig/network-scripts/ifup-ipsec
@@ -108,10 +108,10 @@ if [ "$KEYING" = "manual" ]; then
     if [ "$MODE" = "host" ]; then
     
         /sbin/setkey -c  >/dev/null 2>&1<< EOF
-delete $SRC $DST ah $SPI_AH_OUT;
-delete $DST $SRC ah $SPI_AH_IN;
-delete $SRC $DST esp $SPI_ESP_OUT;
-delete $DST $SRC esp $SPI_ESP_IN;
+${SPI_AH_OUT:+delete $SRC $DST ah $SPI_AH_OUT;}
+${SPI_AH_IN:+delete $DST $SRC ah $SPI_AH_IN;}
+${SPI_ESP_OUT:+delete $SRC $DST esp $SPI_ESP_OUT;}
+${SPI_ESP_IN:+delete $DST $SRC esp $SPI_ESP_IN;}
 spddelete $SRC $DST any -P out;
 spddelete $DST $SRC any -P in;