IPSEC READWRITECONF(8) Executable programs IPSEC READWRITECONF(8)

.SH "NAME" ipsec-readwriteconf - validate and output an Libreswan IPsec configuration file

.SH "SYNOPSIS"

.HP 504u

**ipsec readwriteconf**  
\[--config **file**]  
\[--debug]  
\[--verbose]  
\[--rootdir **dir**]

.SH "DESCRIPTION"

.PP This program reads the given ipsec.conf style configuration file, interpreting the also= options, and outputs an equivalent ipsec.conf file. The purpose of this program is to validate the input processing. This can also be used to validate the syntax of a configuration file.

.PP The options --debug and --verbose are currently synonyms.

.PP The --rootdir option changes the programs idea of what "/" is when processing include directives. This is useful when validating a configuration that is not installed on a target system yet.

.SH "AUTHOR"

Andrew Cagney, D. Hugh Redelmeier, Jose Quaresma, Michael Richardson, Paul Wouters, Tuomo Soini

10/06/2026 Libreswan v5.4.1-HEAD

---

Document: ipsec-readwriteconf(8) from libreswan 5.4.1-r0 (Chainguard OS)
Source: https://github.com/libreswan/libreswan