Package: ipsec-tools Version: 1:0.6.6-3 Severity: important Tags: patch
initscript is doing setkey -FP -F but this syntax doesn't work. One should use setkey -FP # then setkey -F for stop and restart stanzas -- System Information: Debian Release: 4.0 APT prefers testing APT policy: (500, 'testing'), (500, 'stable') Architecture: amd64 (x86_64) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.17-2-amd64 Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Versions of packages ipsec-tools depends on: ii libc6 2.3.6.ds1-8 GNU C Library: Shared libraries ii libcomer 1.39+1.40-WIP-2006.11.14+dfsg-1 common error description library ii libkrb53 1.4.4-4 MIT Kerberos runtime libraries ii libpam0g 0.79-4 Pluggable Authentication Modules l ii libssl0. 0.9.8c-4 SSL shared libraries ipsec-tools recommends no packages. -- no debconf information
--- setkey.orig 2006-12-17 17:06:17.000000000 +0100 +++ setkey 2006-12-17 14:03:50.000000000 +0100 @@ -26,12 +26,14 @@ ;; stop) echo -n "Flushing IPsec SA/SP database: " - $SETKEY -F -FP + $SETKEY -F + $SETKEY -FP echo "done." ;; restart|force-reload) echo -n "Reloading IPsec SA/SP database: " - $SETKEY -F -FP + $SETKEY -F + $SETKEY -FP $SETKEY -f $SETKEY_CONF echo "done." ;;