Gecko [ 122.154.134.11 ]

Name	Size	Permission
._import_crl.hmac	65 B	-rw-r--r--
._keycensor.hmac	65 B	-rw-r--r--
._pluto_adns.hmac	65 B	-rw-r--r--
._plutorun.hmac	65 B	-rw-r--r--
._secretcensor.hmac	65 B	-rw-r--r--
._stackmanager.hmac	65 B	-rw-r--r--
._updown.hmac	65 B	-rw-r--r--
._updown.klips.hmac	65 B	-rw-r--r--
._updown.netkey.hmac	65 B	-rw-r--r--
.addconn.hmac	65 B	-rw-r--r--
.auto.hmac	65 B	-rw-r--r--
.barf.hmac	65 B	-rw-r--r--
.cavp.hmac	65 B	-rw-r--r--
.eroute.hmac	65 B	-rw-r--r--
.ikeping.hmac	65 B	-rw-r--r--
.klipsdebug.hmac	65 B	-rw-r--r--
.look.hmac	65 B	-rw-r--r--
.newhostkey.hmac	65 B	-rw-r--r--
.pf_key.hmac	65 B	-rw-r--r--
.pluto.hmac	65 B	-rw-r--r--
.readwriteconf.hmac	65 B	-rw-r--r--
.rsasigkey.hmac	65 B	-rw-r--r--
.secrets.hmac	65 B	-rw-r--r--
.setup.hmac	65 B	-rw-r--r--
.showhostkey.hmac	65 B	-rw-r--r--
.spi.hmac	65 B	-rw-r--r--
.spigrp.hmac	65 B	-rw-r--r--
.tncfg.hmac	65 B	-rw-r--r--
.verify.hmac	65 B	-rw-r--r--
.whack.hmac	65 B	-rw-r--r--
_import_crl	119.42 KB	-rwxr-xr-x
_keycensor	1.38 KB	-rwxr-xr-x
_pluto_adns	14.03 KB	-rwxr-xr-x
_plutorun	2.99 KB	-rwxr-xr-x
_secretcensor	1.86 KB	-rwxr-xr-x
_stackmanager	14.1 KB	-rwxr-xr-x
_updown	4.23 KB	-rwxr-xr-x
_updown.klips	18.63 KB	-rwxr-xr-x
_updown.netkey	16.27 KB	-rwxr-xr-x
addconn	255.42 KB	-rwxr-xr-x
auto	4.41 KB	-rwxr-xr-x
barf	11.46 KB	-rwxr-xr-x
cavp	1.04 MB	-rwxr-xr-x
ikeping	26.05 KB	-rwxr-xr-x
look	2.92 KB	-rwxr-xr-x
newhostkey	2.8 KB	-rwxr-xr-x
pf_key	63.2 KB	-rwxr-xr-x
readwriteconf	227.42 KB	-rwxr-xr-x
rsasigkey	132.02 KB	-rwxr-xr-x
secrets	729 B	-rwxr-xr-x
setup	6.11 KB	-rwxr-xr-x
showhostkey	188.42 KB	-rwxr-xr-x
spigrp	75.53 KB	-rwxr-xr-x
tncfg	119.4 KB	-rwxr-xr-x
verify	13.52 KB	-rwxr-xr-x
whack	62.16 KB	-rwxr-xr-x

Code Editor : newhostkey

#! /bin/sh
#
# generate new key for this host
#
# Copyright (C) 2001, 2002  Henry Spencer.
# Copyright (C) 2014 Paul Wouters <pwouters@redhat.com>
# Copyright (C) 2014 Tuomo Soini <tis@foobar.fi>
#
# This program is free software; you can redistribute it and/or modify it
# under the terms of the GNU General Public License as published by the
# Free Software Foundation; either version 2 of the License, or (at your
# option) any later version.  See <http://www.fsf.org/copyleft/gpl.txt>.
#
# This program is distributed in the hope that it will be useful, but
# WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
# or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
# for more details.
#

me="ipsec newhostkey"
usage="Usage: $me [--output filename] [--seeddev device] [--bits n] \\
    [--quiet] [--hostname host] [--configdir nssdbdir] [--password password] "

bits=
verbose=
host=
seeddev="--seeddev /dev/random"
output="/etc/ipsec.secrets"
configdir="/etc/ipsec.d"
password=
for dummy; do
    case "$1" in
	--bits)
	    bits="${2}"
	    shift
	    ;;
	--quiet)
	    verbose=
	    ;;
	--hostname)
	    host="--hostname ${2}"
	    shift
	    ;;
	--output)
	    output="${2}"
	    shift
	    ;;
	--verbose)
	    verbose="--verbose"
	    ;;
	--version)
	    echo "$me $IPSEC_VERSION"
	    exit 0
	    ;;
	--random)
	    echo "$me warning: --random is obsoleted, using --seeddev"
	    seeddev="--seeddev ${2}"
	    shift
	    ;;
	--seeddev)
	    seeddev="--seeddev ${2}"
	    shift
	    ;;
	--configdir)
	    configdir="${2}"
	    shift
	    ;;
	--password)
	    password="--password ${2}"
	    shift
	    ;;
	--help)
	    echo "$usage"
	    exit 0
	    ;;
	--)
	    shift
	    break
	    ;;
	-*)
	    echo "$me: unknown option \`$1'" >&2
	    exit 2
	    ;;
	*)
	    break
	    ;;
    esac
    shift
done

if [ -d "${output}" ]; then
    echo "ERROR: output file should be a secrets file, not a directory"
    exit 255
fi

if [ -s "${output}" ]; then
    echo "${0}: WARNING: file \"${output}\" exists, appending to it" >&2
fi

if [ ! -d ${configdir} ]; then
    echo "No such directory: ${configdir}"
    exit 255
fi

certutil -L -d sql:$configdir >/dev/null 2>/dev/null
RETVAL=$?
if [ ${RETVAL} -eq 255 ]; then
    echo "NSS database in $configdir not initialized."
    echo "    Please run 'ipsec initnss --configdir $configdir'"
    exit 255
fi

key=$(ipsec rsasigkey ${verbose} ${seeddev} --configdir sql:${configdir} ${password} ${host} ${bits})
RETVAL=$?
if [ ${RETVAL} -eq 0 ]; then
    umask 077
    TEMPFILE=$(/bin/mktemp ${output}.XXXXXXX)
    (
	echo ': RSA	{'
	echo "${key}"
	echo '	}'
	echo '# do not change the indenting of that "}"'
    ) > ${TEMPFILE}
    if [ -s "${output}" ]; then
	cat ${TEMPFILE} >> ${output}
	rm ${TEMPFILE}
    else
	mv ${TEMPFILE} ${output}
    fi
else
    exit ${RETVAL}
fi

${this.title}

Code Editor : newhostkey