ipsec_verify(8) [centos man page]

IPSEC_VERIFY(8) 						Executable programs						   IPSEC_VERIFY(8)

NAME

       ipsec_verify - see if the IPsec subsystem has been installed correctly

SYNOPSIS

       ipsec verify

DESCRIPTION

       The ipsec verify examines the local system for a number of common system faults and configuration mistakes.

       In addition, verify performs checks relevant to Opportunistic Encryption if this is enabled via oe=yes in the configuration file
       ipsec.conf. It looks in forward DNS for an IPSECKEY record for the system's hostname or myid= value.

HISTORY

       Written originally for the Linux FreeS/WAN project <http://www.freeswan.org> by Michael Richardson. Rewritten in python by Paul Wouters

BUGS

       Verify was converted from shell to perl to python, and the MASQUERADING/NAT rule tests still need to be ported. The ss command is around in
       various non-intuitive and buggy versions, causing some false-positives with respect to listening on UDP port 500 and 4500. See
       https://bugzilla.redhat.com/show_bug.cgi?id=829630

AUTHOR

       Paul Wouters
	   placeholder to suppress warning

libreswan							    12/23/2012							   IPSEC_VERIFY(8)

_STACKMANAGER(8)						Executable programs						  _STACKMANAGER(8)

NAME

       ipsec__stackmanager - internal script to bring up kernel components for Libreswan

SYNOPSIS

       ipsec _stackmanager start

       ipsec _stackmanager stop

DESCRIPTION

       ipsec _stackmanager is called from within the init sub-system (systemd, upstart, sysv initscripts) to bring up the Libreswan kernel
       component as configured via the protostack= option in the ipsec.confi configuration file.

       This involves loading and optionally unloading of the required kernel modules. Because the Linux kernel cannot autodetect most crypto
       related drivers on-demand, _stackmanager handles loading the hardware random number (RNG) device drivers, OpenBSD/FreeBSD Cryptographic
       Framework (OCF) drivers, CryptoAPI drivers, and the modules for the specific stack (Linux NETKEY/XFM or KLIPS/MAST). Probing for OCF
       supported hardware is not supported - those modules must be loaded by the system before the start of the Libreswan sub system.

SEE ALSO

       ip(8), ipsec_tncfg(8), ipsec.conf(5), ipsec_addconn(8), pluto(8)

HISTORY

       This script was introduced in Libreswan. On the older Openswan systems, this functionality was split over various script files such as
       ipsec _startnetkey, ipsec _startklips, ipsec _realsetup and ipsec setup. Man page written for the Libreswan project
       <http://www.libreswan.org/> by Paul Wouters.

AUTHOR

       Paul Wouters
	   placeholder to suppress warning

libreswan							    12/16/2012							  _STACKMANAGER(8)