ipsec-setup8
Wrapper routine to the libreswan init system
Overview
setup is called (via ipsec setup) by the system administrator to perform init system related tasks to Libreswan, such as start, stop, status, reload, etc for the Internet Keying Exchange (IKE) daemon pluto. It is available for backwards compatibility with Openswan and FreeS/WAN.
Supported init systems
Currently, the classic initscripts (sysv) and systemd are supported. Support for upstart will be added soon.
See also
Referred to by
ipsec-up(8)
Establish a connection
ipsec-add(8)
Add a connection specification to pluto internal database from /etc/ipsec.conf
ipsec-down(8)
Down all tunnels sharing same IPsec connection.
ipsec-stop(8)
Stop the ipsec service via initsystem
ipsec-start(8)
Add, route, and up a connection
ipsec-delete(8)
Delete a connection definition from IPsec service
ipsec-import(8)
Import PKCS#12 (*.p12) files into the IPsec NSS database
ipsec-listen(8)
Force pluto to re-listen all interfaces
ipsec-status(8)
Show connection status
ipsec-crlutil(8)
Helper to run NSS crlutil on IPsec NSS database
ipsec-initnss(8)
Initialise the IPsec NSS database
ipsec-listall(8)
List all public key information from IPsec daemon (pluto)
ipsec-modutil(8)
Helper to run NSS modutil on IPsec NSS database
ipsec-replace(8)
Replace a connection definition with one from /etc/ipsec.conf
ipsec-restart(8)
Restart the ipsec service via initsystem
ipsec-unroute(8)
unroute a connection
ipsec-certutil(8)
Helper to run NSS certutil on IPsec NSS database
ipsec-checknss(8)
Check or initialize the IPsec NSS database
ipsec-listcrls(8)
List X.509 certificates revocation lists from NSS database
ipsec-ondemand(8)
Add and route a connection
ipsec-pk12util(8)
Helper to run NSS pk12util on IPsec NSS database
ipsec-redirect(8)
Redirect a connection definition with one from /etc/ipsec.conf.
ipsec-vfychain(8)
Helper to run NSS vfychain on IPsec NSS database
ipsec-_plutorun(8)
internal script to (re)start pluto on old SYSV initscript systems
ipsec-fetchcrls(8)
Signal IPsec daemon to fetch new certificate revocation lists.
ipsec-listcerts(8)
List X.509 certificates loaded from NSS database
ipsec-purgeocsp(8)
Purgeocsp purges the NSS OCSP cache.
ipsec-rereadall(8)
Reread IPsec secrets and certificates.
ipsec-checknflog(8)
Initialise nftables or iptables rules for the nflog devices
ipsec-fipsstatus(8)
Show IPsec daemon (pluto) FIPS status
ipsec-showstates(8)
Show current IKE SA and Child SA states
ipsec-briefstatus(8)
Get brief status from IPsec service
ipsec-checkconfig(8)
Validate ipsec configuration file, /etc/ipsec.conf
ipsec-listcacerts(8)
List x.509 Certificate Authority (CA) certificates
ipsec-listpubkeys(8)
List all public keys from pluto internal database.
ipsec-rereadcerts(8)
Reread IPsec certificates from IPsec NSS database
ipsec-shuntstatus(8)
Show current IPsec negotiation shunts
ipsec-globalstatus(8)
Get global status information from IPsec daemon (pluto)
ipsec-rereadsecrets(8)
Reread IPsec secrets from /etc/ipsec.secrets.
ipsec-trafficstatus(8)
Show current Child SA states with traffic counters
ipsec-connectionstatus(8)
Get brief status from IPsec service
ipsec-briefconnectionstatus(8)
Get brief connection status from IPsec service