Bug 87920 - ipsec-tools-0.5-r1: racoon doesn't launch with -4 option
Bug#: 87920 Product:  Gentoo Linux Version: unspecified Platform: All
OS/Version: All Status: RESOLVED Severity: normal Priority: P2
Resolution: FIXED Assigned To: latexer@gentoo.org Reported By: rizzo@gentoo.org
Component: Ebuilds
URL: 
Summary: ipsec-tools-0.5-r1: racoon doesn't launch with -4 option
Keywords:  
Status Whiteboard: 
Opened: 2005-04-04 09:01 0000
Description:   Opened: 2005-04-04 09:01 0000
When I have RACOON_OPTS="-4" in /etc/conf.d/racoon, /etc/init.d/racoon fails to
start:

# /etc/init.d/racoon start
 * Caching service dependencies ...                                       [ ok
]
 * Loading ipsec policies from /etc/ipsec.conf.
 * Starting racoon ...
/usr/sbin/racoon: invalid option -- 4
usage: racoon [-BdFv] [-a (port)] [-f (file)] [-l (file)] [-p (port)]
   -B: install SA to the kernel from the file specified by the configuration
file.
   -d: debug level, more -d will generate more debug message.
   -C: dump parsed config file.
   -L: include location in debug messages
   -F: run in foreground, do not become daemon.
   -v: be more verbose
   -a: port number for admin port.
   -f: pathname for configuration file.
   -l: pathname for log file.
   -p: port number for isakmp (default: 500).
   -P: port number for NAT-T (default: 4500).                             [ !!
]

Commenting out that conf line lets racoon start normally.  That conf line is
enabled by default and perhaps shouldn't be in 0.5?

------- Comment #1 From Dan A. Dickey 2005-04-27 09:48:56 0000 -------
This bug has to do with how ipsec-tools is being built.
I'm not sure why, but configure does not set INET6 in config.h,
only INET6_ADVAPI.  I do not know if they are mutually exclusive.
Something for the upstream folks I'd guess.

------- Comment #2 From Dan A. Dickey 2005-04-27 10:18:17 0000 -------
There's a patch required for configure.ac for this problem.
It is not in the 0.5.1 branch of ipsec-tools.
I'll attach it.
I have not tried it myself.

------- Comment #3 From Dan A. Dickey 2005-04-27 10:22:22 0000 -------
Created an attachment (id=57400) [details]
Patch to configure.ac for ipv6 problem.

------- Comment #4 From Kalin KOZHUHAROV 2006-02-06 20:15:51 0000 -------
Seems to be fixed, plese consider marking RESOLVED FIXED after
ipsec-tools-0.6.5 goes in the tree.
See http://bugs.gentoo.org/show_bug.cgi?id=121919#c0

------- Comment #5 From Jakub Moc (RETIRED) 2006-02-07 00:19:29 0000 -------
  21 Jun 2005; Peter Johanson <latexer@gentoo.org>
  +files/ipsec-tools-0.5-ipv6.diff, +ipsec-tools-0.5-r2.ebuild,
  +ipsec-tools-0.5.2.ebuild:
  Revision bump with fix for IPV6 problem (bug #87920), and bump version (bug
  #92363).

Closing a stale bug.