From baa38a14200d0549a0531be92f3ef89e526063ac Mon Sep 17 00:00:00 2001 From: Philip Prindeville Date: Thu, 1 Apr 2021 14:43:12 -0600 Subject: [PATCH] strongswan: remove synthesized ipsec conf files If you shutdown ipsec service, and it doesn't clean up /var/ipsec/ipsec.conf, then when you start swanctl service it might see an incompatible file on startup. Remedy is to remove unneeded files when shutting down the service. They can always be regenerated when the service starts again. Signed-off-by: Philip Prindeville --- net/strongswan/Makefile | 2 +- net/strongswan/files/ipsec.init | 6 ++++++ 2 files changed, 7 insertions(+), 1 deletion(-) diff --git a/net/strongswan/Makefile b/net/strongswan/Makefile index 24d30915e..06ec598ba 100644 --- a/net/strongswan/Makefile +++ b/net/strongswan/Makefile @@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk PKG_NAME:=strongswan PKG_VERSION:=5.9.1 -PKG_RELEASE:=6 +PKG_RELEASE:=7 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2 PKG_SOURCE_URL:=https://download.strongswan.org/ https://download2.strongswan.org/ diff --git a/net/strongswan/files/ipsec.init b/net/strongswan/files/ipsec.init index ed55b95a9..bbfa573d6 100644 --- a/net/strongswan/files/ipsec.init +++ b/net/strongswan/files/ipsec.init @@ -331,6 +331,12 @@ reload_service() { start } +stop_service() { + ipsec_reset + swan_reset + secret_reset +} + check_ipsec_interface() { local intf