summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorStig Thormodsrud <stig@io.vyatta.com>2008-10-13 19:09:09 -0700
committerStig Thormodsrud <stig@io.vyatta.com>2008-10-13 19:09:09 -0700
commit236f2c1e00135b1158fa8057baed4e31dd51341b (patch)
treec4b11750aa21185d30a2eb613029f7380c3e4c61
parent06cf3bb0dd17d7ca257a9a92245e1c31d40e0d06 (diff)
downloadvyatta-cfg-vpn-236f2c1e00135b1158fa8057baed4e31dd51341b.tar.gz
vyatta-cfg-vpn-236f2c1e00135b1158fa8057baed4e31dd51341b.zip
Remove unused rsa keys.
-rw-r--r--debian/vyatta-cfg-vpn.postinst.in8
1 files changed, 8 insertions, 0 deletions
diff --git a/debian/vyatta-cfg-vpn.postinst.in b/debian/vyatta-cfg-vpn.postinst.in
index 4436e78..01c112c 100644
--- a/debian/vyatta-cfg-vpn.postinst.in
+++ b/debian/vyatta-cfg-vpn.postinst.in
@@ -11,6 +11,14 @@ for init in openswan ipsec setkey; do
update-rc.d -f ${init} remove >/dev/null
done
+# remove keys
+rm -f /etc/ipsec.secrets
+touch /etc/ipsec.secrets
+chown root:root /etc/ipsec.secrets
+chmod 600 /etc/ipsec.secrets
+rm -f /etc/ipsec.d/private/localhost.localdomainKey.pem
+rm -f /etc/ipsec.d/certs/localhost.localdomainCert.pem
+
# Local Variables:
# mode: shell-script
# sh-indentation: 4