Paul Wouters

placeholder to suppress warning

IPSEC_VERIFY 8 23 Dec 2012 libreswan Executable programs
ipsec verify see if the IPsec subsystem has been installed correctly
`ipsec` verify

## DESCRIPTION

The ipsec verify examines the local system for a number of common system faults and configuration mistakes.

In addition, verify performs checks relevant to Opportunistic Encryption if this is enabled via oe=yes in the configuration file ipsec.conf. It looks in forward DNS for an IPSECKEY record for the system's hostname or myid= value.

## HISTORY

Written originally for the Linux FreeS/WAN project <http://www.freeswan.org> by Michael Richardson. Rewritten in python by Paul Wouters

## BUGS

Verify was converted from shell to perl to python, and the MASQUERADING/NAT rule tests still need to be ported. The ss command is around in various non-intuitive and buggy versions, causing some false-positives with respect to listening on UDP port 500 and 4500. See https://bugzilla.redhat.com/show_bug.cgi?id=829630