- import of strongswan-2.7.0
- applied patch for charon
This commit is contained in:
Martin Willi
@@ -0,0 +1 @@
|
||||
_plutoload
|
||||
@@ -0,0 +1,43 @@
|
||||
# Makefile for miscelaneous programs
|
||||
# Copyright (C) 2002 Michael Richardson <[email protected]>
|
||||
#
|
||||
# This program is free software; you can redistribute it and/or modify it
|
||||
# under the terms of the GNU General Public License as published by the
|
||||
# Free Software Foundation; either version 2 of the License, or (at your
|
||||
# option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
|
||||
#
|
||||
# This program is distributed in the hope that it will be useful, but
|
||||
# WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
|
||||
# or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
||||
# for more details.
|
||||
#
|
||||
# RCSID $Id: Makefile,v 1.1 2004/03/15 20:35:27 as Exp $
|
||||
|
||||
FREESWANSRCDIR=../..
|
||||
include ${FREESWANSRCDIR}/Makefile.inc
|
||||
|
||||
PROGRAM=_plutoload
|
||||
PROGRAMDIR=${LIBDIR}
|
||||
|
||||
include ../Makefile.program
|
||||
|
||||
#
|
||||
# $Log: Makefile,v $
|
||||
# Revision 1.1 2004/03/15 20:35:27 as
|
||||
# added files from freeswan-2.04-x509-1.5.3
|
||||
#
|
||||
# Revision 1.3 2002/08/02 16:01:19 mcr
|
||||
# moved user visible programs to $PREFIX/libexec, while moving
|
||||
# private files to $PREFIX/lib.
|
||||
#
|
||||
# Revision 1.2 2002/06/02 22:02:14 mcr
|
||||
# changed TOPDIR->FREESWANSRCDIR in all Makefiles.
|
||||
# (note that linux/net/ipsec/Makefile uses TOPDIR because this is the
|
||||
# kernel sense.)
|
||||
#
|
||||
# Revision 1.1 2002/04/24 07:55:32 mcr
|
||||
# #include patches and Makefiles for post-reorg compilation.
|
||||
#
|
||||
#
|
||||
#
|
||||
|
||||
@@ -0,0 +1,33 @@
|
||||
.TH _PLUTOLOAD 8 "25 Apr 2002"
|
||||
.\"
|
||||
.\" RCSID $Id: _plutoload.8,v 1.1 2004/03/15 20:35:27 as Exp $
|
||||
.\"
|
||||
.SH NAME
|
||||
ipsec _plutoload \- internal script to start pluto
|
||||
.SH DESCRIPTION
|
||||
.I _plutoload
|
||||
is called by
|
||||
.B _plutorun
|
||||
to actually start the pluto executable.
|
||||
.SH "SEE ALSO"
|
||||
ipsec(8), ipsec_setup(8), ipsec__realsetup(8), ipsec__plutorun(8)
|
||||
.SH HISTORY
|
||||
Man page written for the Linux FreeS/WAN project <http://www.freeswan.org/>
|
||||
by Michael Richardson. Original program by Henry Spencer.
|
||||
.\"
|
||||
.\" $Log: _plutoload.8,v $
|
||||
.\" Revision 1.1 2004/03/15 20:35:27 as
|
||||
.\" added files from freeswan-2.04-x509-1.5.3
|
||||
.\"
|
||||
.\" Revision 1.2 2002/04/29 22:39:31 mcr
|
||||
.\" added basic man page for all internal commands.
|
||||
.\"
|
||||
.\" Revision 1.1 2002/04/26 01:21:43 mcr
|
||||
.\" while tracking down a missing (not installed) /etc/ipsec.conf,
|
||||
.\" MCR has decided that it is not okay for each program subdir to have
|
||||
.\" some subset (determined with -f) of possible files.
|
||||
.\" Each subdir that defines $PROGRAM, MUST have a PROGRAM.8 file as well as a PROGRAM file.
|
||||
.\" Optional PROGRAM.5 files have been added to the makefiles.
|
||||
.\"
|
||||
.\"
|
||||
.\"
|
||||
Executable
+164
@@ -0,0 +1,164 @@
|
||||
#!/bin/sh
|
||||
# Pluto database-loading script
|
||||
# Copyright (C) 1998, 1999, 2001 Henry Spencer.
|
||||
#
|
||||
# This program is free software; you can redistribute it and/or modify it
|
||||
# under the terms of the GNU General Public License as published by the
|
||||
# Free Software Foundation; either version 2 of the License, or (at your
|
||||
# option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
|
||||
#
|
||||
# This program is distributed in the hope that it will be useful, but
|
||||
# WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
|
||||
# or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
||||
# for more details.
|
||||
#
|
||||
# RCSID $Id: _plutoload.in,v 1.2 2004/03/31 16:15:10 as Exp $
|
||||
#
|
||||
# exit status is 13 for protocol violation, that of Pluto otherwise
|
||||
|
||||
me='ipsec _plutoload' # for messages
|
||||
|
||||
for dummy
|
||||
do
|
||||
case "$1" in
|
||||
--load) plutoload="$2" ; shift ;;
|
||||
--start) plutostart="$2" ; shift ;;
|
||||
--wait) plutowait="$2" ; shift ;;
|
||||
--post) postpluto="$2" ; shift ;;
|
||||
--) shift ; break ;;
|
||||
-*) echo "$me: unknown option \`$1'" >&2 ; exit 2 ;;
|
||||
*) break ;;
|
||||
esac
|
||||
shift
|
||||
done
|
||||
|
||||
# load ca information
|
||||
eval `ipsec _confread --varprefix PLUTO --type ca --search auto add start`
|
||||
if test " $PLUTO_confreadstatus" != " "
|
||||
then
|
||||
echo "auto=add/start search: $PLUTO_confreadstatus"
|
||||
echo "unable to determine what ca information to add -- adding none"
|
||||
caload=
|
||||
else
|
||||
caload="$PLUTO_confreadnames"
|
||||
fi
|
||||
|
||||
# searches, if needed
|
||||
# the way the searches were done ensures plutoload >= plutoroute >= plutostart
|
||||
|
||||
# search for things to "ipsec auto --add": auto in "add" "route" "start"
|
||||
eval `ipsec _confread --varprefix PLUTO --search auto add route start`
|
||||
if test " $PLUTO_confreadstatus" != " "
|
||||
then
|
||||
echo "auto=add/route/start search: $PLUTO_confreadstatus"
|
||||
echo "unable to determine what conns to add -- adding none"
|
||||
plutoload=
|
||||
else
|
||||
plutoload="$PLUTO_confreadnames"
|
||||
fi
|
||||
|
||||
# search for things to "ipsec auto --route": auto in "route" "start"
|
||||
eval `ipsec _confread --varprefix PLUTO --search auto route start`
|
||||
if test " $PLUTO_confreadstatus" != " "
|
||||
then
|
||||
echo "auto=route/start search: $PLUTO_confreadstatus"
|
||||
echo "unable to determine what conns to route -- routing none"
|
||||
plutoroute=
|
||||
else
|
||||
plutoroute="$PLUTO_confreadnames"
|
||||
fi
|
||||
|
||||
# search for things to "ipsec auto --up": auto in "start"
|
||||
eval `ipsec _confread --varprefix PLUTO --search auto start`
|
||||
if test " $PLUTO_confreadstatus" != " "
|
||||
then
|
||||
echo "auto=start search: $PLUTO_confreadstatus"
|
||||
echo "unable to determine what conns to start -- starting none"
|
||||
plutostart=
|
||||
else
|
||||
plutostart="$PLUTO_confreadnames"
|
||||
fi
|
||||
|
||||
# await Pluto's readiness (not likely to be an issue, but...)
|
||||
eofed=y
|
||||
while read saying
|
||||
do
|
||||
case "$saying" in
|
||||
'Pluto initialized') eofed= ; break ;; # NOTE BREAK OUT
|
||||
*) echo "pluto unexpectedly said \`$saying'" ;;
|
||||
esac
|
||||
done
|
||||
if test "$eofed"
|
||||
then
|
||||
echo "pluto died unexpectedly!?!"
|
||||
exit 13
|
||||
fi
|
||||
|
||||
# ca database load
|
||||
for tu in $caload
|
||||
do
|
||||
ipsec auto --type ca --add $tu ||
|
||||
echo "...could not add ca \"$tu\""
|
||||
done
|
||||
|
||||
# conn database load
|
||||
for tu in $plutoload
|
||||
do
|
||||
ipsec auto --add $tu ||
|
||||
echo "...could not add conn \"$tu\""
|
||||
done
|
||||
|
||||
# enable listening
|
||||
ipsec auto --ready
|
||||
|
||||
# execute any post-startup cleanup
|
||||
if test " $postpluto" != " "
|
||||
then
|
||||
$postpluto
|
||||
st=$?
|
||||
if test " $st" -ne 0
|
||||
then
|
||||
echo "...postpluto command exited with status $st"
|
||||
fi
|
||||
fi
|
||||
|
||||
# quickly establish routing
|
||||
for tu in $plutoroute
|
||||
do
|
||||
ipsec auto --route $tu ||
|
||||
echo "...could not route conn \"$tu\""
|
||||
done
|
||||
|
||||
# tunnel initiation, which may take a while
|
||||
async=
|
||||
if test " $plutowait" = " no"
|
||||
then
|
||||
async="--asynchronous"
|
||||
fi
|
||||
for tu in $plutostart
|
||||
do
|
||||
ipsec auto --up $async $tu ||
|
||||
echo "...could not start conn \"$tu\""
|
||||
done
|
||||
|
||||
# report any further utterances, and watch for exit status
|
||||
eofed=y
|
||||
while read saying
|
||||
do
|
||||
case "$saying" in
|
||||
exit) eofed= ; break ;; # NOTE BREAK OUT
|
||||
*) echo "pluto unexpectedly says \`$saying'" ;;
|
||||
esac
|
||||
done
|
||||
if test "$eofed"
|
||||
then
|
||||
echo "pluto died without exit status!?!"
|
||||
exit 13
|
||||
fi
|
||||
if read status
|
||||
then
|
||||
exit $status
|
||||
else
|
||||
echo "pluto yielded no exit status!?!"
|
||||
exit 13
|
||||
fi
|
||||
Reference in New Issue
Block a user