_confread.patch

来自「FREESWAN VPN源代码包」· PATCH 代码 · 共 52 行

--- _confread.orig	Wed Jun 13 22:09:19 2001
+++ _confread	Fri Jun 29 20:39:24 2001
@@ -42,6 +42,7 @@
 # fi
 
 config=/etc/ipsec.conf
+fswcert="ipsec fswcert --directory /etc/ipsec.d"
 include=yes
 type=conn
 fieldfmt=yes
@@ -75,7 +76,7 @@
 else
 	cat $config
 fi |
-awk 'BEGIN {
+awk -v "fswcert=$fswcert" 'BEGIN {
 	type = "'"$type"'"
 	names = "'"$*"'"
 	prefix = "'"$prefix"'"
@@ -128,6 +129,7 @@
 	mkey = " spibase spi esp espenckey espauthkey espreplay_window"
 	left = left " leftespenckey leftespauthkey leftahkey"
 	left = left " leftespspi leftahspi leftid leftrsasigkey"
+	left = left " leftcert"
 	mkey = mkey " ah ahkey ahreplay_window"
 	right = left
 	gsub(/left/, "right", right)
@@ -388,6 +390,23 @@
 	value = substr($0, equal+1)
 	if (value ~ /^"/)
 		value = substr(value, 2, length(value)-2)
+}
+name ~ /^(left|right)cert$/ {
+	side = name
+	gsub(/cert$/, "", side)
+	pipe = fswcert " --quiet --cert " value
+	pipe | getline ID
+	pipe | getline RSASIGKEY
+	if (close(pipe) != 0)
+		fail(ID);
+	gsub(/^.*id=/, "", ID)
+	gsub(/^.*rsasigkey=/, "", RSASIGKEY)
+	seen[side "cert"] = 1
+	seen[side "id"] = 1
+	seen[side "rsasigkey"] = 1
+	output(o_parm, side "id", ID)
+	output(o_parm, side "rsasigkey", RSASIGKEY)
+	next
 }
 indefault {
 	if (name in default)