From 5a7f7acb80b4432be8988aefb15912b4c60a2e9f Mon Sep 17 00:00:00 2001
From: Bill Nottingham <notting@redhat.com>
Date: Thu, 3 Jul 2003 01:32:57 +0000
Subject: set $KEYING do something with racoon on bringing the interface down

---
 sysconfig/network-scripts/ifdown-ipsec | 33 +++++++++++++++++++++++++++++++++
 1 file changed, 33 insertions(+)

(limited to 'sysconfig/network-scripts')

diff --git a/sysconfig/network-scripts/ifdown-ipsec b/sysconfig/network-scripts/ifdown-ipsec
index d5f8ec50..60480cdb 100755
--- a/sysconfig/network-scripts/ifdown-ipsec
+++ b/sysconfig/network-scripts/ifdown-ipsec
@@ -8,6 +8,32 @@ CONFIG=$1
 [ -f "${CONFIG}" ] || CONFIG=ifcfg-${1}
 source_config
 
+if [ -n "$IKE_PSK" ]; then
+  KEYING=automatic
+  IKE_METHOD=PSK
+fi
+ 
+if [ -n "$IKE_CERTFILE" ]; then
+  KEYING=automatic
+  IKE_METHOD=X509
+fi
+ 
+if [ -n "$IKE_PEER_CERTFILE" ]; then
+  KEYING=automatic
+  IKE_METHOD=X509
+fi
+
+if [ -n "$IKE_DNSSEC" ]; then
+  KEYING=automatic
+  IKE_METHOD=X509
+fi
+if [ -n "$RSA_KEY" ]; then
+  KEYING=automatic
+  IKE_METHOD=RSA
+fi
+
+[ -z "$KEYING" ] && KEYING=manual
+
 if [ -z "$SRC" ]; then
     SRC=`ip -o route get to $DST | sed "s|.*src \([^ ]*\).*|\1|"`
 fi
@@ -26,4 +52,11 @@ spddelete $SRC $DST any -P out;
 spddelete $DST $SRC any -P in;
 EOF
 
+if [ "$KEYING" = "automatic" ]; then
+   racoontmp=`mktemp /etc/racoon/racoon.XXXXXX`
+   grep -v "^include \"/etc/racoon/$DST.conf\"" /etc/racoon/racoon.conf >> $racoontmp
+   mv -f $racoontmp /etc/racoon/racoon.conf
+   pidof -x /usr/sbin/racoon > /dev/null 2>&1 && killall -HUP /usr/sbin/racoon
+fi
+
 /etc/sysconfig/network-scripts/ifdown-post $CONFIG
-- 
cgit v1.2.1