[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
(racoon 531) Re: Configuration reload and existing tunnels
- To: racoon@kame.net
- Subject: (racoon 531) Re: Configuration reload and existing tunnels
- From: VANHULLEBUS Yvan <vanhu@free.fr>
- Date: Wed, 9 Jun 2004 14:13:36 +0200
- Delivered-to: racoon-archive@kame.net
- Delivered-to: racoon-outgo@kame.net
- Delivered-to: racoon@kame.net
- In-reply-to: <20040609115901.GA6746@zen.inc>
- References: <20040609115901.GA6746@zen.inc>
- Reply-to: racoon@kame.net
- Sender: owner-racoon@kame.net
- User-agent: Mutt/1.3.28i
On Wed, Jun 09, 2004 at 01:59:01PM +0200, VANHULLEBUS Yvan wrote:
> Hi.
>
> I would like to be able to update racoon's configuration (adding a new
> tunnel) without killing racoon's process.
>
> In fact, I want to keep existing tunnels alive.
[....]
Posted a bit too fast :-)
There IS a cfreparse() function, which is called when racoon gets a
SIGHUP, but one of the first things which are done is a flushph2() and
a flushph1(), and in fact a quite complete flush of everything !
So I still cannot do what I want: updating racoon's conf without
deleting existing phase1/phase2 SAs which have been already
negociated.
Did someone already tried "something" to do that ?
Yvan.