denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ipsec: Include IPSEC_CONFDIR variable replacement in man page

Browse Source 
Fedora has chosena different default directory to avoid conflicts with
libreswan. Use ${sysconfdir} variable to provide the correct location.
This commit is contained in:
Petr Menšík
2023-01-16 11:20:44 +01:00
committed by Tobias Brunner
parent 8effb06d6c
commit ab4ed21b5c
2 changed files with 11 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/ipsec/Makefile.am
+1
View File
@@ -10,6 +10,7 @@ _ipsec.8 : _ipsec.8.in
-e "s:@IPSEC_SCRIPT@:$(ipsec_script):g" \ -e "s:@IPSEC_SCRIPT@:$(ipsec_script):g" \
-e "s:@IPSEC_SCRIPT_UPPER@:$(ipsec_script_upper):g" \ -e "s:@IPSEC_SCRIPT_UPPER@:$(ipsec_script_upper):g" \
-e "s:@IPSEC_DIR@:$(ipsecdir):" \ -e "s:@IPSEC_DIR@:$(ipsecdir):" \
-e "s:@IPSEC_CONFDIR@:$(sysconfdir):" \
$(srcdir)/$@.in > $@ $(srcdir)/$@.in > $@
_ipsec : _ipsec.in _ipsec : _ipsec.in
src/ipsec/_ipsec.8.in
+10 -10
View File
@@ -145,25 +145,25 @@ locally by the IKE daemon or received via the IKE protocol.
.TP .TP
.BI "listcacerts [" --utc ] .BI "listcacerts [" --utc ]
returns a list of X.509 Certification Authority (CA) certificates that were returns a list of X.509 Certification Authority (CA) certificates that were
loaded locally by the IKE daemon from the \fI/etc/ipsec.d/cacerts/\fP loaded locally by the IKE daemon from the \fI@IPSEC_CONFDIR@/ipsec.d/cacerts/\fP
directory or received via the IKE protocol. directory or received via the IKE protocol.
. .
.TP .TP
.BI "listaacerts [" --utc ] .BI "listaacerts [" --utc ]
returns a list of X.509 Authorization Authority (AA) certificates that were returns a list of X.509 Authorization Authority (AA) certificates that were
loaded locally by the IKE daemon from the \fI/etc/ipsec.d/aacerts/\fP loaded locally by the IKE daemon from the \fI@IPSEC_CONFDIR@/ipsec.d/aacerts/\fP
directory. directory.
. .
.TP .TP
.BI "listocspcerts [" --utc ] .BI "listocspcerts [" --utc ]
returns a list of X.509 OCSP Signer certificates that were either loaded returns a list of X.509 OCSP Signer certificates that were either loaded
locally by the IKE daemon from the \fI/etc/ipsec.d/ocspcerts/\fP locally by the IKE daemon from the \fI@IPSEC_CONFDIR@/ipsec.d/ocspcerts/\fP
directory or were sent by an OCSP server. directory or were sent by an OCSP server.
. .
.TP .TP
.BI "listacerts [" --utc ] .BI "listacerts [" --utc ]
returns a list of X.509 Attribute certificates that were loaded locally by returns a list of X.509 Attribute certificates that were loaded locally by
the IKE daemon from the \fI/etc/ipsec.d/acerts/\fP directory. the IKE daemon from the \fI@IPSEC_CONFDIR@/ipsec.d/acerts/\fP directory.
. .
.TP .TP
.BI "listgroups [" --utc ] .BI "listgroups [" --utc ]
@@ -179,7 +179,7 @@ sections in \fIipsec.conf\fP.
.TP .TP
.BI "listcrls [" --utc ] .BI "listcrls [" --utc ]
returns a list of Certificate Revocation Lists (CRLs) that were either loaded returns a list of Certificate Revocation Lists (CRLs) that were either loaded
by the IKE daemon from the \fI/etc/ipsec.d/crls\fP directory or fetched from by the IKE daemon from the \fI@IPSEC_CONFDIR@/ipsec.d/crls\fP directory or fetched from
an HTTP- or LDAP-based CRL distribution point. an HTTP- or LDAP-based CRL distribution point.
. .
.TP .TP
@@ -211,7 +211,7 @@ flushes and rereads all secrets defined in \fIipsec.secrets\fP.
.TP .TP
.B "rereadcacerts" .B "rereadcacerts"
removes previously loaded CA certificates, reads all certificate files removes previously loaded CA certificates, reads all certificate files
contained in the \fI/etc/ipsec.d/cacerts\fP directory and adds them to the list contained in the \fI@IPSEC_CONFDIR@/ipsec.d/cacerts\fP directory and adds them to the list
of Certification Authority (CA) certificates. This does not affect certificates of Certification Authority (CA) certificates. This does not affect certificates
explicitly defined in a explicitly defined in a
.BR ipsec.conf (5) .BR ipsec.conf (5)
@@ -220,23 +220,23 @@ ca section, which may be separately updated using the \fBupdate\fP command.
.TP .TP
.B "rereadaacerts" .B "rereadaacerts"
removes previously loaded AA certificates, reads all certificate files removes previously loaded AA certificates, reads all certificate files
contained in the \fI/etc/ipsec.d/aacerts\fP directory and adds them to the list contained in the \fI@IPSEC_CONFDIR@/ipsec.d/aacerts\fP directory and adds them to the list
of Authorization Authority (AA) certificates. of Authorization Authority (AA) certificates.
. .
.TP .TP
.B "rereadocspcerts" .B "rereadocspcerts"
reads all certificate files contained in the \fI/etc/ipsec.d/ocspcerts/\fP reads all certificate files contained in the \fI@IPSEC_CONFDIR@/ipsec.d/ocspcerts/\fP
directory and adds them to the list of OCSP signer certificates. directory and adds them to the list of OCSP signer certificates.
. .
.TP .TP
.B "rereadacerts" .B "rereadacerts"
reads all certificate files contained in the \fI/etc/ipsec.d/acerts/\fP reads all certificate files contained in the \fI@IPSEC_CONFDIR@/ipsec.d/acerts/\fP
directory and adds them to the list of attribute certificates. directory and adds them to the list of attribute certificates.
. .
.TP .TP
.B "rereadcrls" .B "rereadcrls"
reads all Certificate Revocation Lists (CRLs) contained in the reads all Certificate Revocation Lists (CRLs) contained in the
\fI/etc/ipsec.d/crls/\fP directory and adds them to the list of CRLs. \fI@IPSEC_CONFDIR@/ipsec.d/crls/\fP directory and adds them to the list of CRLs.
. .
.TP .TP
.B "rereadall" .B "rereadall"