openstack/neutron-vpnaas
Code Issues Proposed changes

Merge "Add ipsec.secrets reload function to strongSwan driver"

Browse Source
This commit is contained in:
Zuul 2021-03-31 14:07:49 +00:00 committed by Gerrit Code Review
commit f82e5c7415
1 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
neutron_vpnaas/services/vpn/device_drivers/strongswan_ipsec.py
View File

@ -158,8 +158,20 @@ class StrongSwanProcess(ipsec.BaseSwanProcess):
def restart(self): def restart(self):
"""Restart the process.""" """Restart the process."""
self.reload_secrets()
self.reload() self.reload()
def reload_secrets(self):
"""Reload the ipsec.secrets file.
Flushes and rereads all secrets defined in ipsec.secrets. This needs
to be done each time when a new site connection is associated with
a VPN service which already hosts a site connection - 'ipsec reload'
does not reload the secrets and new connections will not authenticate
properly.
"""
self._execute([self.binary, 'rereadsecrets'])
def reload(self): def reload(self):
"""Reload the process. """Reload the process.