Group :: Security/Networking
RPM: ipsec-tools
Main Changelog Spec Patches Sources Download Gear Bugs and FR Repocop
#!/bin/sh
#
# racoon IPsec IKE (ISAKMP/Oakley) key management daemon
#
# chkconfig: - 20 80
# description: IKE (ISAKMP/Oakley) key management daemon.
# processname: racoon
# config: /etc/racoon/racoon.conf
# pidfile: /var/run/racoon.pid
# Do not load RH compatibility interface.
WITHOUT_RC_COMPAT=1
# Source function library.
. /etc/init.d/functions
# Source service configuration.
SourceIfNotEmpty /etc/sysconfig/network
SourceIfNotEmpty /etc/sysconfig/racoon
PIDFILE=/var/run/racoon.pid
LOCKFILE=/var/lock/subsys/racoon
RETVAL=0
SETKEY="IPsec policies"
SETKEY_BIN=/usr/sbin/setkey
SETKEY_CONF=/etc/racoon/setkey.conf
RACOON="IPsec IKE daemon (racoon)"
RACOON_BIN=/usr/sbin/racoon
RACOON_CONF=/etc/racoon/racoon.conf
start()
{
is_yes "$NETWORKING" || return 0
if [ -f $SETKEY_CONF ]; then
action "Setting up $SETKEY " $SETKEY_BIN $SETKEY_OPTIONS -f $SETKEY_CONF
fi
## If there is no conf file, skip starting of ddtd
## and return with "program not configured"
if ! [ -f $RACOON_CONF ]; then
msg_not_running $"$RACOON"
failure "$RACOON"
return 1
fi
msg_starting $"$RACOON"
start_daemon \
--pidfile "$PIDFILE" --lockfile "$LOCKFILE" \
--expect-user root --no-announce -- \
$RACOON_BIN $RACOON_OPTIONS -f $RACOON_CONF
RETVAL=$?
return $RETVAL
}
stop()
{
msg_stopping $"$RACOON"
stop_daemon \
--pidfile "$PIDFILE" --lockfile "$LOCKFILE" \
--expect-user root --no-announce -- \
$RACOON_BIN
RETVAL=$?
# Flush SPD policies if required
if [ -n "$SETKEY_FLUSH_OPTIONS" ]; then
action "Flushing $SETKEY " $SETKEY_BIN $SETKEY_FLUSH_OPTIONS
fi
return $RETVAL
}
restart()
{
stop
start
}
reload()
{
msg_reloading $"$RACOON"
stop_daemon --pidfile "$PIDFILE" --expect-user root -HUP -- $RACOON_BIN
RETVAL=$?
return $RETVAL
}
# See how we were called.
case "$1" in
start)
start
;;
stop)
stop
;;
reload)
reload
;;
restart)
restart
;;
condstop)
if [ -e "$LOCKFILE" ]; then
stop
fi
;;
condrestart)
if [ -e "$LOCKFILE" ]; then
restart
fi
;;
condreload)
if [ -e "$LOCKFILE" ]; then
reload
fi
;;
status)
status --pidfile "$PIDFILE" --expect-user root -- $RACOON_BIN
RETVAL=$?
;;
*)
msg_usage "${0##*/} {start|stop|reload|restart|condstop|condrestart|condreload|status}"
RETVAL=1
esac
exit $RETVAL