From 67871ee9839672d5309632676dba0a1aabc0f5d7 Mon Sep 17 00:00:00 2001
From: Klaus Zerwes <zerwes@users.noreply.github.com>
Date: Thu, 14 Dec 2023 10:08:50 +0100
Subject: [PATCH] issue #43 : test disable phase 1

---
 tasks/ipsecphase1.yml             | 1 +
 test/ipsec-testdisable-expect.xml | 1 +
 test/ipsec-testdisable.yml        | 1 +
 3 files changed, 3 insertions(+)

diff --git a/tasks/ipsecphase1.yml b/tasks/ipsecphase1.yml
index 55c78ba..e3b4e29 100644
--- a/tasks/ipsecphase1.yml
+++ b/tasks/ipsecphase1.yml
@@ -12,6 +12,7 @@
     - "{{ ipsecphasevar.phase1 | default({}) }}"
   when:
     - not item.key == 'encryption-algorithm'
+    - not (item.key == 'disabled' and item.value|int != 1)
 
 - name: "IPSec ike phase1 encryption-algorithm for ikeid {{ ikeid }}"
   delegate_to: localhost
diff --git a/test/ipsec-testdisable-expect.xml b/test/ipsec-testdisable-expect.xml
index 7bb8b50..a346f26 100644
--- a/test/ipsec-testdisable-expect.xml
+++ b/test/ipsec-testdisable-expect.xml
@@ -34,6 +34,7 @@
         <name>aes</name>
         <keylen>256</keylen>
       </encryption-algorithm>
+      <disabled>1</disabled>
     </phase1>
     <phase2>
       <ikeid>1</ikeid>
diff --git a/test/ipsec-testdisable.yml b/test/ipsec-testdisable.yml
index fd9f5d9..edc6142 100644
--- a/test/ipsec-testdisable.yml
+++ b/test/ipsec-testdisable.yml
@@ -7,6 +7,7 @@ opn_ipsec:
   ikeids:  # key is the ikeid
     1:
       phase1:
+        disabled: 1
         descr: s2s test
         iketype: ikev1
         interface: wan