1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
|
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License (the "License").
# You may not use this file except in compliance with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
# Copyright 2009 Sun Microsystems, Inc. All rights reserved.
# Use is subject to license terms.
#
# cmd/cmd-inet/etc/secret/Makefile
#
SECRETDIR= secret
PRIVATEKEYDIR= ike.privatekeys
ETCPROG= ike.preshared ipseckeys.sample tcpkeys.sample
include ../../../Makefile.cmd
ETCINETSECRETDIR= $(ROOTETC)/inet/$(SECRETDIR)
ETCINETPRIVATEKEYDIR= $(ROOTETC)/inet/$(SECRETDIR)/$(PRIVATEKEYDIR)
ETCINETSECRETPROG= $(ETCPROG:%=$(ETCINETSECRETDIR)/%)
# Be extra paranoid about /etc/inet/secret
$(ETCINETSECRETDIR): DIRMODE= 700
$(ETCINETPRIVATEKEYDIR): DIRMODE= 700
DIRMODE= 700
FILEMODE= 600
.KEEP_STATE:
all: $(ETCPROG)
install: all $(ETCINETSECRETDIR) $(ETCINETPRIVATEKEYDIR) $(ETCINETSECRETPROG)
$(ETCINETSECRETDIR)/% : %
$(INS.file)
$(ETCINETSECRETDIR):
$(INS.dir)
$(ETCINETPRIVATEKEYDIR):
$(INS.dir)
FRC:
clean clobber lint:
#
# Copyright 2005 Sun Microsystems, Inc. All rights reserved.
# Use is subject to license terms.
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License, Version 1.0 only
# (the "License"). You may not use this file except in compliance
# with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
# ike.preshared - Pre-shared secrets for IKE authentication.
#
# Entries are of the form:
#
# {
# <attribute> <value>
# ...
# }
#
# Consult the man page for ike.preshared(5) for details.
#
# Copyright 2005 Sun Microsystems, Inc. All rights reserved.
# Use is subject to license terms.
#
# CDDL HEADER START
#
# The contents of this file are subject to the terms of the
# Common Development and Distribution License, Version 1.0 only
# (the "License"). You may not use this file except in compliance
# with the License.
#
# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
# or http://www.opensolaris.org/os/licensing.
# See the License for the specific language governing permissions
# and limitations under the License.
#
# When distributing Covered Code, include this CDDL HEADER in each
# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
# If applicable, add the following below this CDDL HEADER, with the
# fields enclosed by brackets "[]" replaced with your own identifying
# information: Portions Copyright [yyyy] [name of copyright owner]
#
# CDDL HEADER END
#
# ipseckeys - This file takes the file format documented in ipseckey(8).
# Note that naming services might not be available when this file
# loads, just like ipsecinit.conf.
#
# This file should be copied into /etc/inet/secret/ipseckeys to load the
# IPsec Security Association Database (SADB). A side-effect of this is that
# IPsec kernel modules will load.
# tcpkeys - This file takes the file format documented in tcpkey(8).
# Note that naming services might not be available when this file
# loads, just like ipsecinit.conf.
#
# This file should be copied into /etc/inet/secret/tcpkeys and modified, and
# the svc:/network/tcpkey:default service enabled in order for the keys to be
# loaded into the TCP Security Association Database at boot.
# add src 192.168.1.1 dst 192.168.1.2 dport 179 authalg md5 authstring s3kr1t
# add src 192.168.1.2 dst 192.168.1.1 sport 179 authalg md5 authstring s3kr1t
|