(racoon 795) Re: AW: Does racoon update its configuration from ra coon.conf?

Yes, that is a possibility, although I haven't tested it. It's not a 
very secure solution though, since it stores the keys directly on disk, 
meaning if anybody ever gets access to the system and the stored keys 
were not securely deleted, they might be able to recover the keys that 
were used to protect previous traffic. This may not be a concern to you, 
but keep it in mind just in case.

Brian

Lockenvitz Jan EXT wrote:

>Hi,
>
>what is about this option in racoon.conf:
>
>path backupsa <file>
>
>If my understanding is correct Racoon will save all running 
>SAs in this file. And if you start it agin with the option "-B"
>it should load the SAs from this file.
>
>Isn't this a possibility to change the racoon.conf and keep the 
>existing tunnels alive with only a short interruption?
>
>Jan
>
>  
>
>>-----Ursprüngliche Nachricht-----
>>Von: [email protected] [mailto:[email protected]] Im 
>>Auftrag von Brian Buesker
>>Gesendet: Freitag, 1. Oktober 2004 16:58
>>An: [email protected]
>>Betreff: (racoon 790) Re: Does racoon update its 
>>configuration from racoon.conf?
>>
>>
>>One word of warning. Although sending racoon a SIGHUP will 
>>cause it to 
>>re-read it's config file, before it does so, racoon will flush all of 
>>the phase 1 and phase 2 SAs that it had established, so 
>>you'll wind up 
>>having to renegotiate them. There is currently no way to update the 
>>config file without losing SAs. There have been some 
>>discussions on the 
>>ipsec-tools-devel mailing list about this, and it is a 
>>feature we would 
>>like to add at some point, but there is currently no time frame for 
>>adding it. If you'd like to work on such support, feel free 
>>to do so and 
>>contribute it back.
>>
>>Brian
>>
>>Juan Antonio Martínez Navarro wrote:
>>
>>    
>>
>>>Thank you, i've solved on my own.
>>>
>>>If you send a hup signal to racoon it reads its configuration file.
>>>
>>>You only have to type: kill -1 PID of racoon.
>>>
>>>
>>>El vie, 01-10-2004 a las 10:22, Juan Antonio Martínez 
>>>      
>>>
>>Navarro escribió:
>>    
>>
>>> 
>>>
>>>      
>>>
>>>>Hi everybody,
>>>>
>>>>I'd like to know if racoon can update its configuration 
>>>>        
>>>>
>>from racoon.conf
>>    
>>
>>>>dynamically. Because I'm interested in modifying racoon 
>>>>        
>>>>
>>configuration
>>    
>>
>>>>file while racoon is running.
>>>>
>>>>Thanks
>>>>   
>>>>
>>>>        
>>>>
>>> 
>>>
>>>      
>>>