(racoon 794) AW: Does racoon update its configuration from ra coon.conf?

Lockenvitz Jan EXT <[email protected]> Tue, 5 Oct 2004 14:26:57 +0200
Newsgroups gmane.network.ipv6.kame.racoon
Message-ID <47D438A0510BD611B9470002A58EDAE706B3B2D4@mchh2a6e.mchh.siemens.de>
Hi,

what is about this option in racoon.conf:

path backupsa <file>

If my understanding is correct Racoon will save all running 
SAs in this file. And if you start it agin with the option "-B"
it should load the SAs from this file.

Isn't this a possibility to change the racoon.conf and keep the 
existing tunnels alive with only a short interruption?

Jan

> -----Ursprüngliche Nachricht-----
> Von: [email protected] [mailto:[email protected]] Im 
> Auftrag von Brian Buesker
> Gesendet: Freitag, 1. Oktober 2004 16:58
> An: [email protected]
> Betreff: (racoon 790) Re: Does racoon update its 
> configuration from racoon.conf?
> 
> 
> One word of warning. Although sending racoon a SIGHUP will 
> cause it to 
> re-read it's config file, before it does so, racoon will flush all of 
> the phase 1 and phase 2 SAs that it had established, so 
> you'll wind up 
> having to renegotiate them. There is currently no way to update the 
> config file without losing SAs. There have been some 
> discussions on the 
> ipsec-tools-devel mailing list about this, and it is a 
> feature we would 
> like to add at some point, but there is currently no time frame for 
> adding it. If you'd like to work on such support, feel free 
> to do so and 
> contribute it back.
> 
> Brian
> 
> Juan Antonio Martínez Navarro wrote:
> 
> >Thank you, i've solved on my own.
> >
> >If you send a hup signal to racoon it reads its configuration file.
> >
> >You only have to type: kill -1 PID of racoon.
> >
> >
> >El vie, 01-10-2004 a las 10:22, Juan Antonio Martínez 
> Navarro escribió:
> >  
> >
> >>Hi everybody,
> >>
> >>I'd like to know if racoon can update its configuration 
> from racoon.conf
> >>dynamically. Because I'm interested in modifying racoon 
> configuration
> >>file while racoon is running.
> >>
> >>Thanks
> >>    
> >>
> >
> >  
> >
>