From 046d821fef581ef07216f0f7e44bc4746ae5b424 Mon Sep 17 00:00:00 2001
From: Franco Fichtner <franco@opnsense.org>
Date: Mon, 7 Oct 2019 16:07:05 +0200
Subject: [PATCH] ipsec: clear $dpdline correctly if not set #3752

---
 src/etc/inc/plugins.inc.d/ipsec.inc | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/etc/inc/plugins.inc.d/ipsec.inc b/src/etc/inc/plugins.inc.d/ipsec.inc
index 3f102b550..945816aa7 100644
--- a/src/etc/inc/plugins.inc.d/ipsec.inc
+++ b/src/etc/inc/plugins.inc.d/ipsec.inc
@@ -1304,6 +1304,8 @@ function ipsec_configure_do($verbose = false, $interface = '')
                     $dpdline .= "\n\tdpddelay = {$ph1ent['dpd_delay']}s";
                     $dpdtimeout = $ph1ent['dpd_delay'] * ($ph1ent['dpd_maxfail'] + 1);
                     $dpdline .= "\n\tdpdtimeout = {$dpdtimeout}s";
+                } else {
+                    $dpdline = '';
                 }
 
                 if (!empty($ph1ent['lifetime'])) {