#!/bin/sh

PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
SETKEY=/usr/sbin/setkey
SETKEY_CONF=/etc/ipsec-tools.conf
NAME=setkey

test -x $SETKEY -a -f $SETKEY_CONF || exit 0

RUN_SETKEY="yes"
if [ -f /etc/default/setkey ] ; then
	. /etc/default/setkey
fi

if [ $RUN_SETKEY != "yes" ] ; then
	exit 0
fi

set -e

. /lib/lsb/init-functions

case "$1" in
  start)
	log_begin_msg "Loading IPsec SA/SP database from $SETKEY_CONF: "
	if $SETKEY -f $SETKEY_CONF; then
	    log_end_msg 0
	else
	    log_end_msg 1
	fi
	;;
  stop)
	log_begin_msg "Flushing IPsec SA/SP database: "
	if $SETKEY -F -FP; then
	    log_end_msg 0
	else
	    log_end_msg 1
	fi
	;;
  restart|force-reload)
	$0 stop || true
	sleep 1
	$0 start
	;;
  *)
	N=/etc/init.d/$NAME
	log_success_msg "Usage: $N {start|stop|restart|force-reload}"
	exit 1
	;;
esac

exit 0
