Home | History | Annotate | Download | only in rc.d
History log of /src/etc/rc.d/ipsec
RevisionDateAuthorComments
 1.18  08-Sep-2020  martin Rename MOUNTCRITLOCAL to CRITLOCALMOUNTED to avoid a name collision
on case insensitive file systems
 1.17  22-Jul-2020  martin Split the local disk availability step into two phases to allow scripts
that pre-populate parts of the system (e.g. a tmpfs based /var) an
easy place to plug in like:

# REQUIRE: mountcritlocal
# BEFORE: MOUNTCRITLOCAL

This also cleans up the existing special handling a bit by separating it
into new scripts. All later scripts now depend on MOUNTCRITLOCAL.
Discussed on tech-userlevel some time ago.
 1.16  27-Jan-2020  kim Skip inet6 addresses that begin with fe80: (not just exact match).
 1.15  13-Aug-2018  christos branches: 1.15.2;
handle v6 addresses
 1.14  19-Oct-2016  christos branches: 1.14.12; 1.14.14;
Adjust for new ifconfig address/mask output.
 1.13  12-Sep-2013  christos branches: 1.13.8;
wait until our local address is available before configuring.
 1.12  14-Jun-2013  christos if ipsec_flags is given, treat it as an interface name and change @LOCAL_ADDR@
to the IP address for it. This makes dynamic addresses work during autoconf.
Also while here in restart, re-use start and stop instead of duplicating them.
 1.11  22-Nov-2008  tsutsui branches: 1.11.8; 1.11.14;
Add "bootconf" to REQUIRE: lines which had beforenetlkm
since removed beforenetlkm required bootconf.
 1.10  12-Nov-2008  ad Remove LKMs and switch to the module framework, pass 1.

Proposed on tech-kern@.
 1.9  06-Apr-2007  apb branches: 1.9.12;
* Add a stop_boot() function in rc.subr, to terminate a multi-user boot
by killing the parent process. The parent's PID is saved in $RC_PID.
* In all rc.d/* scripts that previously tried to stop the boot,
replace in-line code with "stop_boot".
* Document this.

This should fix PR 29822.
 1.8  13-Aug-2004  mycroft Add an _rc_subr_loaded variable, set to ":" by rc.subr. Scripts can use this
for a speedup by doing:
$_rc_subr_loaded . /etc/rc.subr
 1.7  22-Mar-2002  thorpej Correct the "direction" of the barrier dependencies (DAEMON, LOGIN,
NETWORKING, and SERVERS) by specifying that certain things should
come BEFORE a given barrier, rather than having the barrier REQUIRE
a service. This allows scripts to be removed without having to
edit the barrier dependencies.

As discussed on tech-userlevel, and approved by Luke.
 1.6  19-Sep-2000  lukem - only perform the checkyesno on the variable named in $rcvar (rather than
implicitly using $name if $rcvar isn't set), and always perform this check,
even when using start_cmd (et al).
this check is performed before the pidcmd
is run, speeding up scripts that weren't going to be run anyway.
this should speed up booting slow systems.

- take advantage of the above and remove
start_precmd="checkyesno foo"
in scripts that use start_cmd.

- explicitly set rcvar=foo in the rc.d/foo scripts which have an equivalent
rc.conf entry

- fix `rcvar' and `restart' when $rcvar isn't set.
these above changes fix PR [bin/11027].

- when doing `force*', ignore the return value of *_precmd.
this fixes PR [bin/10781].

- rename what sysdb provides from `databases' to `sysdb', to reflect
the name of the script.

- improve the comments in rc.subr
 1.5  21-Jul-2000  lukem - fix typo; the first ipsec_start() should be ipsec_prestart()
- if ipsec.conf isn't readable and the system is booting directly to multiuser,
send SIGTERM to the parent (/etc/rc) so that init(8) aborts the boot.
 1.4  17-Jul-2000  lukem * remove bogus comment about aborting the boot if ipsec.conf doesn't exist;
this hasn't really worked and is probably too messy to resolve...
 1.3  14-Jun-2000  itojun branches: 1.3.2; 1.3.4;
typo
 1.2  13-Jun-2000  itojun TODO; should check /etc/ipsec.conf owner/permission,
while we don't have find(1).
 1.1  13-Jun-2000  itojun add rc.d/ipsec for ipsec configuration. when enabled, it will inject
/etc/ipsec.conf into "setkey -f". PR 9609.
 1.3.4.2  23-Jun-2000  minoura Sync w/ netbsd-1-5-base.
 1.3.4.1  14-Jun-2000  minoura file ipsec was added on branch minoura-xpg4dl on 2000-06-23 15:46:02 +0000
 1.3.2.2  02-Oct-2000  lukem pull up rev 1.6 (approved by thorpej):
- always use $rcvar to determine the name of the var to checkyesno
- fix force*
 1.3.2.1  09-Aug-2000  lukem pull up revs 1.4-1.5
approved by: thorpej

- if ipsec.conf isn't readable and the system is booting directly to multiuser,
send SIGTERM to the parent (/etc/rc) so that init(8) aborts the boot.
- fix typo; the first ipsec_start() should be ipsec_prestart()
 1.9.12.1  17-Jan-2009  mjf Sync with HEAD.
 1.11.14.2  19-Aug-2014  tls Rebase to HEAD as of a few days ago.
 1.11.14.1  23-Jun-2013  tls resync from head
 1.11.8.1  22-May-2014  yamt sync with head.

for a reference, the tree before this commit was tagged
as yamt-pagecache-tag8.

this commit was splitted into small chunks to avoid
a limitation of cvs. ("Protocol error: too many arguments")
 1.13.8.1  04-Nov-2016  pgoyette Sync with HEAD
 1.14.14.2  08-Apr-2020  martin Merge changes from current as of 20200406
 1.14.14.1  10-Jun-2019  christos Sync with HEAD
 1.14.12.1  06-Sep-2018  pgoyette Sync with HEAD

Resolve a couple of conflicts (result of the uimin/uimax changes)
 1.15.2.1  31-Jan-2020  martin Pull up following revision(s) (requested by kim in ticket #676):

etc/rc.d/ipsec: revision 1.16

Skip inet6 addresses that begin with fe80: (not just exact match).

RSS XML Feed