diff options
| author | Hans-Joerg Hoexer <hshoexer@cvs.openbsd.org> | 2006-03-20 16:49:13 +0000 |
|---|---|---|
| committer | Hans-Joerg Hoexer <hshoexer@cvs.openbsd.org> | 2006-03-20 16:49:13 +0000 |
| commit | 4bc88f3a09384ae7a1067cbc3f129b74307cc4d8 (patch) | |
| tree | 8b30d1cd8b4c8ea5058b2f1ae8285c2cbb545674 | |
| parent | b668ce81c0061c6c3b0f62d1cfb2b3ae10d9527a (diff) | |
When adding a connection, do not explicitly start that connection
using "t" and "c" fifo commands. This is prone to a race when
adding several tunnels between the same peers. Just let isakmpd
start that connection on its own (using the connection checker).
| -rw-r--r-- | sbin/ipsecctl/ike.c | 4 |
1 files changed, 1 insertions, 3 deletions
diff --git a/sbin/ipsecctl/ike.c b/sbin/ipsecctl/ike.c index e44d3bf9288..bcd7cd905a7 100644 --- a/sbin/ipsecctl/ike.c +++ b/sbin/ipsecctl/ike.c @@ -1,4 +1,4 @@ -/* $OpenBSD: ike.c,v 1.18 2006/03/07 00:19:58 reyk Exp $ */ +/* $OpenBSD: ike.c,v 1.19 2006/03/20 16:49:12 hshoexer Exp $ */ /* * Copyright (c) 2005 Hans-Joerg Hoexer <hshoexer@openbsd.org> * @@ -317,8 +317,6 @@ ike_connect(u_int8_t mode, struct ipsec_addr_wrap *src, struct ipsec_addr_wrap case IKE_DYNAMIC: fprintf(fd, ADD "[Phase 2]:Connections=IPsec-%s-%s\n", src->name, dst->name); - fprintf(fd, "t IPsec-%s-%s\n", src->name, dst->name); - fprintf(fd, "c IPsec-%s-%s\n", src->name, dst->name); break; case IKE_PASSIVE: fprintf(fd, ADD "[Phase 2]:Passive-Connections=IPsec-%s-%s\n", |