[strongSwan] rereadsecrets race condition.
Guru Shetty
gurushettylists at gmail.com
Thu Nov 1 01:19:36 CET 2012
Hello All,
I have multiple host-host connections.
Whenever a new connection is added in ipsec.conf, the ipsec.secrets is
updated with the entry for the new connection and I issue a "ipsec
rereadsecrets".
If at the time of running of "ipsec rereadsecrets", if a different
connection is being negotiated, it can fail because it cannot find the
private key(as rereadsecrets flushes the secrets before reading them
again).
Is there a way to avoid this? Is it not possible to read secrets
without flushing them?
Thanks,
Guru
More information about the Users
mailing list