Changeset 48bf314 for npl/internetserver/libreswan_conf/root

Timestamp:

09/28/17 17:29:01 (8 years ago)

Author:

Edwin Eefting <edwin@datux.nl>

Branches:

master, perl-5.22

Children:

10bd92c

Parents:

0b780b4

Message:

fixed libreswan public key support. status fix

Location:

npl/internetserver/libreswan_conf/root

Files:

• etc/postinst.d/post.libreswan (modified) (1 diff)
• sbin/syn3-ipsecpubkey (added)

npl/internetserver/libreswan_conf/root/etc/postinst.d/post.libreswan

@@ -9 +9 @@
 
 
-KEY=/etc/ipsec.d/ipsec.pub
-if ! egrep '(ckaid|CKA_ID)' $KEY >/dev/null; then
-    rm $KEY 2>/dev/null
+if ! syn3-ipsecpubkey; then
+    #obsolete
+    rm /etc/ipsec.d/ipsec.pub 2>/dev/null
+
     echo Generating ipsec key
-    ipsec newhostkey --bits 2192 --output $KEY || exit 1
-    #previous command can fail without proper exit code, so check it:
-    egrep '(ckaid|CKA_ID)' $KEY >/dev/null || exit 1
+    ipsec newhostkey --bits 2192 || exit 1
+    syn3-ipsecpubkey || exit 1
 fi
 depmod -a