#!/bin/sh
### BEGIN INIT INFO
# Provides:          setkey
# Required-Start:    $remote_fs
# Required-Stop:     $remote_fs
# Default-Start:     S
# Default-Stop:
# Short-Description: option to manually manipulate the IPsec SA/SP database 
### END INIT INFO

PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
SETKEY=/usr/sbin/setkey
SETKEY_CONF=/etc/ipsec-tools.conf
SETKEY_CONF_DIR=/etc/ipsec-tools.d
NAME=setkey


RUN_SETKEY="yes"
if [ -f /etc/default/setkey ] ; then
	. /etc/default/setkey
fi

test -x $SETKEY -a -f $SETKEY_CONF || exit 0

if [ $RUN_SETKEY != "yes" ] ; then
	exit 0
fi

set -e

. /lib/lsb/init-functions

case "$1" in
  start)
	log_begin_msg "Loading IPsec SA/SP database from $SETKEY_CONF: "
	if $SETKEY -f $SETKEY_CONF; then
	    log_end_msg 0
	else
	    log_end_msg 1
	fi
	;;
  stop)
	log_begin_msg "Flushing IPsec SA/SP database: "
	if $SETKEY -F -FP; then
	    log_end_msg 0
	else
	    log_end_msg 1
	fi
	;;
  restart|force-reload)
	$0 stop
	$0 start
	echo "done."
	;;
  *)
	N=/etc/init.d/$NAME
	log_success_msg "Usage: $N {start|stop|restart|force-reload}"
	exit 1
	;;
esac

exit 0
