Bug 150579

Summary: ifup-ipsec not working with manual keying
Product: Red Hat Enterprise Linux 4 Reporter: Daniel Riek <riek>
Component: initscriptsAssignee: Bill Nottingham <notting>
Status: CLOSED DUPLICATE QA Contact: Brock Organ <borgan>
Severity: medium Docs Contact:
Priority: medium    
Version: 4.0CC: rvokal
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2005-03-31 21:00:57 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Daniel Riek 2005-03-08 17:13:19 UTC
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; de-DE; rv:1.7.5) Gecko/20041216 Firefox/1.0 Red Hat/1.0-13.EL4

Description of problem:
Even with a correct ifcfg for ipsec with manual keying ifup-ipsec fails to activate the encryption. The real bug is a pair '"' put around every key in the call to setkey, that leads to an error. The secondary problem is that the failure of this call is not detected.

Version-Release number of selected component (if applicable):
initscripts-7.93.11.EL-1

How reproducible:
Always

Steps to Reproduce:
1. Configure ifcfg for ipsec with manual keying
2. ifup ipsec interface
3. setkey -D
  

Actual Results:  No keys set

Expected Results:  Keys set

Additional info:

Resolution for the primary problem would be to remove all $(echo '"') around the KEY...s. Resolution for the secondary problem would be evaluation of the setkey exit codes.

Comment 1 Bill Nottingham 2005-03-11 21:55:49 UTC
I can't reproduce this here. Can you attach your config file?

Comment 2 Bill Nottingham 2005-03-31 21:00:57 UTC
Marking as a duplicate of the presumed issue you're running into.

*** This bug has been marked as a duplicate of 150552 ***