Add UCI support to Openswan
authorJo-Philipp Wich <jow@openwrt.org>
Tue, 20 Dec 2011 04:36:42 +0000 (04:36 +0000)
committerJo-Philipp Wich <jow@openwrt.org>
Tue, 20 Dec 2011 04:36:42 +0000 (04:36 +0000)
commitf860c17eccf3a4f32de93ae9916e0d95b7da3000
tree44b1e4b9878c023292b96e1d7fa7aaab4cdf6672
parent025a6cba33761c69ccb54f9d6730d9b31555312b
Add UCI support to Openswan

The Openswan and UCI configuration file formats are very similar.
Implement the conversion from UCI to IPsec configuration file format in
the ipsec init script and store the converted information in
/etc/ipsec.uci.{conf,secrets} then reference these files from
/etc/ipsec.{conf,secrets}.  This scheme allows for
backwards-compatibility during upgrades (since the original
configuration is preserved) and allows for users to implement any exotic
configurations that they require without conflicting with the
configuration in UCI.

Also add a nearly empty ipsec config file which enables nat_traversal.
This option should be safe in all configurations and is required in
many, which makes it a good default.

Signed-off-by: Kevin Locke <kevin@kevinlocke.name>
SVN-Revision: 29585
net/openswan/Makefile
net/openswan/files/ipsec.conf [new file with mode: 0644]
net/openswan/files/ipsec.config [new file with mode: 0644]
net/openswan/files/ipsec.init
net/openswan/files/ipsec.secrets [new file with mode: 0644]