core120: Regenerate IPsec configuration

[ipfire-2.x.git] / config / rootfiles / core / 120 / update.sh

diff --git a/config/rootfiles/core/120/update.sh b/config/rootfiles/core/120/update.sh
index 1ba9df96fcacf2c33750000af14b07e328908421..c465d315b17c7f10bf95bb78e50935edd7148c38 100644 (file)
--- a/config/rootfiles/core/120/update.sh
+++ b/config/rootfiles/core/120/update.sh
@@ -83,6 +83,12 @@ done
 /etc/init.d/apache restart
 /etc/init.d/unbound restart
 
+# Regenerate IPsec configuration
+sudo -u nobody /srv/web/ipfire/cgi-bin/vpnmain.cgi
+if grep -q "ENABLED=on" /var/ipfire/vpn/settings; then
+       /etc/init.d/ipsec restart
+fi
+
 # Remove deprecated SSH configuration option
 sed -e "/UsePrivilegeSeparation/d" -i /etc/ssh/sshd_config