From 43f4c938c18775afd3ed03295c1dbdbca588d761 Mon Sep 17 00:00:00 2001
From: Michael Tremer <michael.tremer@ipfire.org>
Date: Sat, 24 Nov 2012 14:22:14 +0100
Subject: [PATCH] ipsec: Shut up strongswan logging.

Just log the basic stuff.
---
 config/rootfiles/core/65/update.sh | 3 +++
 html/cgi-bin/vpnmain.cgi           | 3 +++
 2 files changed, 6 insertions(+)

diff --git a/config/rootfiles/core/65/update.sh b/config/rootfiles/core/65/update.sh
index dbd38c4d2a..40d79a855e 100644
--- a/config/rootfiles/core/65/update.sh
+++ b/config/rootfiles/core/65/update.sh
@@ -172,6 +172,9 @@ fi
 # Remove preloading libsafe.
 rm -f /etc/ld.so.preload
 
+# Regenerate ipsec configuration files.
+/srv/web/ipfire/cgi-bin/vpnmain.cgi
+
 #
 # Modify grub.conf
 #
diff --git a/html/cgi-bin/vpnmain.cgi b/html/cgi-bin/vpnmain.cgi
index 91c12492eb..eaf6f489ac 100644
--- a/html/cgi-bin/vpnmain.cgi
+++ b/html/cgi-bin/vpnmain.cgi
@@ -245,6 +245,9 @@ sub writeipsecfiles {
     flock CONF, 2;
     flock SECRETS, 2;
     print CONF "version 2\n\n";
+    print CONF "config setup\n";
+    print CONF "\tcharondebug=\"dmn 0, mgr 0, ike 0, chd 0, job 0, cfg 0, knl 0, net 0, asn 0, enc 0, lib 0, esp 0, tls 0, tnc 0, imc 0, imv 0, pts 0\"\n";
+    print CONF "\n";
     print CONF "conn %default\n";
     print CONF "\tkeyingtries=%forever\n";
     print CONF "\n";
-- 
2.39.5