src_prepare() {
epatch "${FILESDIR}/${P}"-gentoo.patch
epatch "${FILESDIR}/${PN}-${PV%.*}.23"-gentoo.patch
epatch "${FILESDIR}/${P}"-sandbox.patch
epatch "${FILESDIR}/${PN}-${PV%.*}.25"-sandbox.patch
use ms-bad-proposal && epatch "${FILESDIR}"/${PN}-${PV%.*}-allow-ms-bad-proposal.patch
# https://bugs.xelerance.com/issues/1112
docinto quickstarts
dodoc doc/quickstarts/*
newinitd "${FILESDIR}"/ipsec.init ipsec || die "failed to install init script"
newinitd "${FILESDIR}"/ipsec-initd ipsec || die "failed to install init script"
keepdir /var/run/pluto
keepdir /etc/ipsec.d/{{ca,aa,ocsp,}certs,crls,private}