ipsec_verify(8)

ipsec_verify8

See if the ipsec subsystem has been installed correctly

Usage

ipsec verify

Overview

The ipsec verify examines the local system for a number of common system faults and configuration mistakes.

Releases

7 releases since Debian 3.1 (Sarge); the text changed 5 times.

  1. 3.1–4.0
  2. 5.0
  3. 7
  4. 10
  5. 11
  6. 12

History

Written originally for the Linux FreeS/WAN project <https://www.freeswan.org> by Michael Richardson. Rewritten in python by Paul Wouters

Bugs

Verify was converted from shell to perl to python, and the MASQUERADING/NAT rule tests still need to be ported. The ss command is around in various non-intuitive and buggy versions, causing some false-positives with respect to listening on UDP port 500 and 4500. See https://bugzilla.redhat.com/show_bug.cgi?id=829630

Author

Paul Wouters

placeholder to suppress warning

From libreswan 4.10-2+deb12u1 in Debian 12 (Bookworm). Parsed by carta from the page's man source.