Re: [Astlinux-devel] Bug with ipsec.php

[Lonnie A. <li...@lo...>]

On Jan 21, 2018, at 10:43 PM, Michael Knill <mic...@ip...> wrote:

> Hi Devs
>  
> Found a bug with ipsec.php where a $ in the preshare key will not get written into /etc/psk.txt
> Simple workaround but it caught me out ☹
>  
> Regards
> Michael Knill

Yes, shell special characters are not allowed (stripped) in the IPSEC_PSK_ASSOCIATIONS structure, that decision was make long-long ago before I was actively involved with AstLinux.

We do support shell special characters (properly escaped) in a few select cases, such as for these rc.conf variables:
--
PPPOEPASS
SMTP_PASS
DDPASS
UPS_MONITOR_PASS
--
But that solution does not easily translate to the IPSEC_PSK_ASSOCIATIONS case.

Though, I'm not aware of a "simple" workaround other than choosing a new password, possibly from the output of "openssl rand -base64 33"

Lonnie