From 45726533f5ce46ef0b3a72970aa0dd917ff7ad58 Mon Sep 17 00:00:00 2001
From: Franco Fichtner <franco@opnsense.org>
Date: Wed, 7 Jun 2023 14:00:09 +0200
Subject: [PATCH] ipsec: only write /var/db/ipsecpinghosts if not empty; closes
 #6600

---
 src/etc/inc/plugins.inc.d/ipsec.inc | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/src/etc/inc/plugins.inc.d/ipsec.inc b/src/etc/inc/plugins.inc.d/ipsec.inc
index b14385cc4..76013773b 100644
--- a/src/etc/inc/plugins.inc.d/ipsec.inc
+++ b/src/etc/inc/plugins.inc.d/ipsec.inc
@@ -827,12 +827,11 @@ function ipsec_configure_spd()
 function ipsec_setup_pinghosts()
 {
     global $config;
+
     $a_phase1 = isset($config['ipsec']['phase1']) ? $config['ipsec']['phase1'] : [];
     $a_phase2 = isset($config['ipsec']['phase2']) ? $config['ipsec']['phase2'] : [];
 
-    /* get the automatic ping_hosts.sh ready */
     @unlink('/var/db/ipsecpinghosts');
-    @touch('/var/db/ipsecpinghosts');
 
     if (!isset($config['ipsec']['enable'])) {
         return;
@@ -904,7 +903,11 @@ function ipsec_setup_pinghosts()
             }
         }
     }
-    @file_put_contents('/var/db/ipsecpinghosts', $ipsecpinghosts);
+
+    if (!empty($ipsecpinghosts)) {
+        /* get the automatic ping_hosts.sh ready */
+        @file_put_contents('/var/db/ipsecpinghosts', $ipsecpinghosts);
+    }
 }
 
 /**