Bug 25829

Summary: IPSec config in rc.network doesn't allow for IKE key
Product: Base System Reporter: mlea-freebsd-gnats <mlea-freebsd-gnats>
Component: confAssignee: Doug Barton <dougb>
Status: Closed FIXED    
Severity: Affects Only Me    
Priority: Normal    
Version: Unspecified   
Hardware: Any   
OS: Any   
Attachments:
Description Flags
file.diff none

Description mlea-freebsd-gnats 2001-03-15 16:30:01 UTC 
IPSec keys and security associations must be established before network
services (like NFS) start. If an IKE daemon (like racoon) is being used to
handle security associations and key exchange, it must be started in
rc.network before other network services.

Fix: This patch modifies /etc/defaults/rc.conf and /etc/rc.network to
optionally
start an IKE daemon (by default, racoon) immediately after setkey has been
run to set the IPSec policies.
Comment 1 Doug Barton freebsd_committer freebsd_triage 2006-02-22 02:12:17 UTC 
State Changed
From-To: open->closed


This report has been overtaken by events in 5.x and beyond. 

Thanks for your interest in making FreeBSD better.
Comment 2 Doug Barton freebsd_committer freebsd_triage 2006-02-22 02:12:17 UTC 
Responsible Changed
From-To: freebsd-bugs->dougb


I closed this PR.