mirror of
https://git.FreeBSD.org/src.git
synced 2024-12-20 11:11:24 +00:00
801c438304
assignments to the literal values it would have returned. The concept of set_rcvar() was nice in theory, but the forks it creates are a drag on the startup process, which is especially noticeable on slower systems, such as embedded ones. During the discussion on freebsd-rc@ a preference was expressed for using ${name}_enable instead of the literal values. However the code portability concept doesn't really apply since there are so many other places where the literal name has to be searched for and replaced. Also, using the literal value is also a tiny bit faster than dereferencing the variables, and every little bit helps.
60 lines
1.0 KiB
Bash
Executable File
60 lines
1.0 KiB
Bash
Executable File
#!/bin/sh
|
|
#
|
|
# $FreeBSD$
|
|
#
|
|
|
|
# PROVIDE: ipsec
|
|
# REQUIRE: FILESYSTEMS
|
|
# BEFORE: DAEMON mountcritremote
|
|
# KEYWORD: nojail
|
|
|
|
. /etc/rc.subr
|
|
|
|
name="ipsec"
|
|
rcvar="ipsec_enable"
|
|
start_precmd="ipsec_prestart"
|
|
start_cmd="ipsec_start"
|
|
stop_precmd="test -f $ipsec_file"
|
|
stop_cmd="ipsec_stop"
|
|
reload_cmd="ipsec_reload"
|
|
extra_commands="reload"
|
|
ipsec_program="/sbin/setkey"
|
|
# ipsec_file is set by rc.conf
|
|
|
|
ipsec_prestart()
|
|
{
|
|
if [ ! -f "$ipsec_file" ]; then
|
|
warn "$ipsec_file not readable; ipsec start aborted."
|
|
stop_boot
|
|
return 1
|
|
fi
|
|
return 0
|
|
}
|
|
|
|
ipsec_start()
|
|
{
|
|
echo "Installing ipsec manual keys/policies."
|
|
${ipsec_program} -f $ipsec_file
|
|
}
|
|
|
|
ipsec_stop()
|
|
{
|
|
echo "Clearing ipsec manual keys/policies."
|
|
|
|
# Still not 100% sure if we would like to do this.
|
|
# It is very questionable to do this during shutdown session
|
|
# since it can hang any of the remaining IPv4/v6 sessions.
|
|
#
|
|
${ipsec_program} -F
|
|
${ipsec_program} -FP
|
|
}
|
|
|
|
ipsec_reload()
|
|
{
|
|
echo "Reloading ipsec manual keys/policies."
|
|
${ipsec_program} -f "$ipsec_file"
|
|
}
|
|
|
|
load_rc_config $name
|
|
run_rc_command "$1"
|