/usr/lib/ipsec/_secretcensor is in libreswan 3.23-4.
This file is owned by root:root, with mode 0o755.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 | #! /bin/sh
# implements secret censoring for barf
# Copyright (C) 1999 Henry Spencer.
#
# This program is free software; you can redistribute it and/or modify it
# under the terms of the GNU General Public License as published by the
# Free Software Foundation; either version 2 of the License, or (at your
# option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
#
# This program is distributed in the hope that it will be useful, but
# WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
# or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
# for more details.
usage="Usage: $0 [file ...]"
me="ipsec _secretcensor"
for dummy
do
case "$1" in
--help) echo "$usage" ; exit 0 ;;
--version) echo "$me $IPSEC_VERSION" ; exit 0 ;;
--) shift ; break ;;
-*) echo "$0: unknown option \`$1'" >&2 ; exit 2 ;;
*) break ;;
esac
shift
done
awk ' function cool(hot, q, cooled, run) {
# warning: may destroy input line!
q = "'"'"'" # single quote
if (hot ~ q)
return "[cannot be summed]"
if (hot ~ /^0s/)
return "[keyid " substr(hot, 3, 9) "]"
run = "echo " q hot q " | md5sum"
run | getline
close(run)
return "[sums to " substr($1, 1, 4) "...]"
}
/"/ {
i = match($0, /"[^"]+"/)
cold1 = substr($0, 1, i)
cold2 = substr($0, i+RLENGTH-1)
hot = substr($0, i+1, RLENGTH-2)
print cold1 cool(hot) cold2
next
}
/#pubkey=/ {
i = match($0, /^.*#pubkey=/)
i += RLENGTH-1
cold = substr($0, 1, i)
hot = substr($0, i+1)
print cold cool(hot)
next
}
/#IN KEY / {
i = match($0, /^.*[ \t][^ \t]/)
i += RLENGTH-2
cold = substr($0, 1, i)
hot = substr($0, i+1)
print cold cool("0s" hot)
next
}
/^[ \t]+(Modulus|P[a-z]+Exponent|Prime[12]|Exponent[12]|Coefficient):/ {
i = match($0, /^[^:]*:[ \t]*/)
i += RLENGTH-1
cold = substr($0, 1, i)
print cold "[...]"
next
}
{ print }' $*
|