ipsec: Shut up strongswan logging.

Just log the basic stuff.

diff --git a/config/rootfiles/core/65/update.sh b/config/rootfiles/core/65/update.sh
index dbd38c4d2ad2c3eafb6af9ed2e7c1beed02295d7..40d79a855e55d395310797a6be759337744f9d0a 100644 (file)
--- a/config/rootfiles/core/65/update.sh
+++ b/config/rootfiles/core/65/update.sh
@@ -172,6 +172,9 @@ fi
 # Remove preloading libsafe.
 rm -f /etc/ld.so.preload
 
+# Regenerate ipsec configuration files.
+/srv/web/ipfire/cgi-bin/vpnmain.cgi
+
 #
 # Modify grub.conf
 #

diff --git a/html/cgi-bin/vpnmain.cgi b/html/cgi-bin/vpnmain.cgi
index 91c12492eb7b05a22e7e04fc11eca017685e52ec..eaf6f489aca6873e4b3f860c3c1138ab7a5f7996 100644 (file)
--- a/html/cgi-bin/vpnmain.cgi
+++ b/html/cgi-bin/vpnmain.cgi
@@ -245,6 +245,9 @@ sub writeipsecfiles {
     flock CONF, 2;
     flock SECRETS, 2;
     print CONF "version 2\n\n";
+    print CONF "config setup\n";
+    print CONF "\tcharondebug=\"dmn 0, mgr 0, ike 0, chd 0, job 0, cfg 0, knl 0, net 0, asn 0, enc 0, lib 0, esp 0, tls 0, tnc 0, imc 0, imv 0, pts 0\"\n";
+    print CONF "\n";
     print CONF "conn %default\n";
     print CONF "\tkeyingtries=%forever\n";
     print CONF "\n";