/etc/init.d/ipsec

#! /bin/sh
### BEGIN INIT INFO
# Provides:          ipsec
# Required-Start:    $network $remote_fs
# Required-Stop:     $network $remote_fs
# Default-Start:     2 3 4 5
# Default-Stop:      0 1 6
# Short-Description: Strongswan IPsec services
### END INIT INFO

# Author: Rene Mayrhofer <rene@mayrhofer.eu.org>

# PATH should only include /usr/* if it runs after the mountnfs.sh script
PATH=/sbin:/usr/sbin:/bin:/usr/bin
DESC="strongswan IPsec services"
NAME=ipsec
STARTER=/usr/sbin/$NAME
PIDFILE1=/var/run/pluto.pid
PIDFILE2=/var/run/charon.pid
PLUTO=/usr/lib/ipsec/pluto
CHARON=/usr/lib/ipsec/charon
SCRIPTNAME=/etc/init.d/$NAME

# Exit if the package is not installed
[ -x "$STARTER" ] || exit 0

# Read configuration variable file if it is present
[ -r /etc/default/$NAME ] && . /etc/default/$NAME

# Load the VERBOSE setting and other rcS variables
. /lib/init/vars.sh

# Define LSB log_* functions.
# Depend on lsb-base (>= 3.0-6) to ensure that this file is present.
. /lib/lsb/init-functions

#
# Function that starts the daemon/service
#
do_start()
{
	# Return
	#   0 if daemon has been started
	#   1 if daemon was already running
	#   2 if daemon could not be started

	# test if either charon or pluto are currently running (PIDFILE1 or PIDFILE2)
	if [ -e $PLUTO ]; then
	  start-stop-daemon --start --quiet --pidfile $PIDFILE1 --exec $STARTER --test > /dev/null \
		|| return 1
	fi
	if [ -e $CHARON ]; then
	  start-stop-daemon --start --quiet --pidfile $PIDFILE2 --exec $STARTER --test > /dev/null \
		|| return 1
	fi

	$STARTER start || return 2
}

#
# Function that stops the daemon/service
#
do_stop()
{
	# Return
	#   0 if daemon has been stopped
	#   1 if daemon was already stopped
	#   2 if daemon could not be stopped
	#   other if a failure occurred
	# give the proper signal to stop
	$STARTER stop || return 2

	RETVAL=0
	# but kill if that didn't work
	if [ -e $PIDFILE1 ]; then
		start-stop-daemon --stop --quiet --retry=TERM/30/KILL/5 --pidfile $PIDFILE1 --name $NAME
		RETVAL="$?"
		[ "$RETVAL" = 2 ] && return 2
	fi
	if [ -e $PIDFILE2 ]; then
		start-stop-daemon --stop --quiet --retry=TERM/30/KILL/5 --pidfile $PIDFILE2 --name $NAME
		RETVAL="$?"
		[ "$RETVAL" = 2 ] && return 2
	fi

	# Wait for children to finish too if this is a daemon that forks
	# and if the daemon is only ever run from this initscript.
	# If the above conditions are not satisfied then add some other code
	# that waits for the process to drop all resources that could be
	# needed by services started subsequently.  A last resort is to
	# sleep for some time.
	if [ -e $PLUTO ]; then
	  start-stop-daemon --stop --quiet --oknodo --retry=0/30/KILL/5 --exec $PLUTO
	  [ "$?" = 2 ] && return 2
	fi
	if [ -e $CHARON ]; then
	  start-stop-daemon --stop --quiet --oknodo --retry=0/30/KILL/5 --exec $CHARON
	  [ "$?" = 2 ] && return 2
	fi

	# strongswan is known to leave PID files behind when something goes wrong, cleanup here
	rm -f $PIDFILE1 $PIDFILE2
	# and just to make sure they are really really dead at this point...
	killall -9 $PLUTO 2>/dev/null
	killall -9 $CHARON 2>/dev/null

	return "$RETVAL"
}

do_reload() {
	$STARTER reload
	return 0
}

case "$1" in
  start)
	[ "$VERBOSE" != no ] && log_daemon_msg "Starting $DESC" "$NAME"
	do_start
	case "$?" in
		0|1) [ "$VERBOSE" != no ] && log_end_msg 0 ;;
		2) [ "$VERBOSE" != no ] && log_end_msg 1 ;;
	esac
	;;
  stop)
	[ "$VERBOSE" != no ] && log_daemon_msg "Stopping $DESC" "$NAME"
	do_stop
	case "$?" in
		0|1) [ "$VERBOSE" != no ] && log_end_msg 0 ;;
		2) [ "$VERBOSE" != no ] && log_end_msg 1 ;;
	esac
	;;
  status)
	$STARTER status || exit $?
	;;
  reload|force-reload)
	log_daemon_msg "Reloading $DESC" "$NAME"
	do_reload
	log_end_msg $?
	;;
  restart)
	log_daemon_msg "Restarting $DESC" "$NAME"
	do_stop
	case "$?" in
	  0|1)
		do_start
		case "$?" in
			0) log_end_msg 0 ;;
			1) log_end_msg 1 ;; # Old process is still running
			*) log_end_msg 1 ;; # Failed to start
		esac
		;;
	  *)
	  	# Failed to stop
		log_end_msg 1
		;;
	esac
	;;
  *)
	echo "Usage: $SCRIPTNAME {start|stop|restart|reload|force-reload}" >&2
	exit 3
	;;
esac

:
strongswan-starter 4.5.2-1.2 / etc / init.d / ipsec
