This service will be undergoing maintenance at 00:00 UTC, 2017-10-23 It is expected to last about 30 minutes

Bug 138105

Summary: setkey calls for manual keying choke
Product: [Fedora] Fedora Reporter: Ulrich Drepper <drepper>
Component: ipsec-toolsAssignee: Bill Nottingham <notting>
Status: CLOSED RAWHIDE QA Contact: Brock Organ <borgan>
Severity: medium Docs Contact:
Priority: medium    
Version: rawhideCC: rvokal
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Fixed In Version: 0.3.3-2 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2004-11-04 15:30:40 EST Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---
Bug Depends On:    
Bug Blocks: 130887    
Description Flags
Patch to remove the comments none

Description Ulrich Drepper 2004-11-04 12:27:03 EST
Description of problem:
The setkey calls used in ifup-ipsec use comments (lines introduced by #).  At
least the setkey distributes in FC3 does not understand this and there are no
comments in the more commonly used setkey calls.

Version-Release number of selected component (if applicable):

How reproducible:

Steps to Reproduce:
1.define host-to-host IPsec connection with manual key
2.restart network
Actual results:
setkey -D shows nothing

Expected results:
setkey -D should show appropriate parameters

Additional info:
I'll add the bug to the blocker list since some functionality is completely
non-operational.  But the fact that this has not been noticed earlier might
suggest it is not that important.
Comment 1 Ulrich Drepper 2004-11-04 12:27:03 EST
Created attachment 106178 [details]
Patch to remove the comments
Comment 2 Bill Nottingham 2004-11-04 14:43:47 EST
This should be fixed to make ipsec-tools less braindamaged; it worked
fine with the previous version.
Comment 3 Bill Nottingham 2004-11-04 14:54:02 EST
   Configuration syntax
     With -c or -f on the command line, setkey accepts the following
     ration syntax.  Lines starting with hash signs (’#’) are treated
as com-
     ment lines.

Ergo, setkey is broken.
Comment 4 Bill Nottingham 2004-11-04 15:30:40 EST
Fixed in 0.3.3-2. Off to figure out what the upstream maintainer is