Instead of sending USR1, just call ipsec reload. And before it, call ipsec rereadsecrets to make sure new secretes are updated. It should fix #4785

This commit is contained in:
Renato Botelho 2015-06-23 14:12:29 -03:00
parent d30038e079
commit dbd43cc24d

View File

@ -1247,7 +1247,8 @@ EOD;
if (isvalidpid("{$g['varrun_path']}/starter.charon.pid")) {
/* Update configuration changes */
/* Read secrets */
sigkillbypid("{$g['varrun_path']}/starter.charon.pid", 'USR1');
mwexec("/usr/local/sbin/ipsec rereadsecrets", false);
mwexec("/usr/local/sbin/ipsec reload", false);
} else {
mwexec("/usr/local/sbin/ipsec start", false);
}