Tobias Brunner
f519acd42f
By consistently using the `expect-connection` helper we can avoid pretty much all previously needed calls to sleep.
20 lines
656 B
Plaintext
20 lines
656 B
Plaintext
moon::iptables-restore < /etc/iptables.rules
|
|
carol::iptables-restore < /etc/iptables.rules
|
|
carol::rm /etc/ipsec.secrets
|
|
carol::rm /etc/ipsec.d/private/*
|
|
carol::rm /etc/ipsec.d/certs/*
|
|
carol::rm /etc/ipsec.d/cacerts/*
|
|
carol::ipsec start
|
|
moon::rm /etc/ipsec.secrets
|
|
moon::rm /etc/ipsec.d/private/*
|
|
moon::rm /etc/ipsec.d/certs/*
|
|
moon::rm /etc/ipsec.d/cacerts/*
|
|
moon::ipsec start
|
|
moon::expect-connection carol
|
|
moon::scp /etc/ipsec.d/certs/selfCert.der carol:/etc/ipsec.d/certs/peerCert.der
|
|
moon::scp carol:/etc/ipsec.d/certs/selfCert.der /etc/ipsec.d/certs/peerCert.der
|
|
moon::ipsec reload
|
|
carol::ipsec reload
|
|
carol::expect-connection home
|
|
carol::ipsec up home
|