stunnel: minor bug fixes

- used wrong pid for ident status
- reload syslog on service start
- missing condition in syslog template (hence the service reload)

for https://github.com/opnsense/plugins/issues/1829

security/stunnel/src/etc/inc/plugins.inc.d/stunnel.inc

@@ -52,13 +52,13 @@ function stunnel_services()
             // only report status from identd seperately, control is combined with stunnel
             $services[] = array(
                 'description' => gettext('Identd (stunnel)'),
-                'stunnel' => array(
+                'identd_stunnel' => array(
                     'restart' => array('stunnel restart'),
                     'start' => array('stunnel start'),
                     'stop' => array('stunnel stop'),
                 ),
                 'name' => 'identd_stunnel',
-                'pidfile' => '/var/run/stunnel_identd.pid',
+                'pidfile' => '/var/run/identd_stunnel.pid',
             );
         }
     }

security/stunnel/src/opnsense/service/conf/actions.d/actions_stunnel.conf

@@ -5,19 +5,30 @@ type:script_output
 message:List SSL ciphers
 
 [start]
-command:/usr/local/etc/rc.d/stunnel start; /usr/local/etc/rc.d/identd_stunnel start; exit 0
+command:
+  /usr/local/etc/rc.d/stunnel start;
+  /usr/local/etc/rc.d/identd_stunnel start;
+  /usr/local/etc/rc.d/syslog-ng reload;
+  exit 0
 parameters:
 type:script
 message:stunnel service start
 
 [stop]
-command:/usr/local/etc/rc.d/stunnel stop; /usr/local/etc/rc.d/identd_stunnel stop; exit 0
+command:
+    /usr/local/etc/rc.d/stunnel stop;
+    /usr/local/etc/rc.d/identd_stunnel stop;
+    exit 0
 parameters:
 type:script
 message:stunnel service stop
 
 [restart]
-command:/usr/local/etc/rc.d/stunnel restart; /usr/local/etc/rc.d/identd_stunnel restart; exit 0
+command:
+    /usr/local/etc/rc.d/stunnel restart;
+    /usr/local/etc/rc.d/identd_stunnel restart;
+    /usr/local/etc/rc.d/syslog-ng reload;
+    exit 0
 parameters:
 type:script
 message:stunnel service restart

security/stunnel/src/opnsense/service/templates/OPNsense/Stunnel/rc.conf.d

@@ -8,6 +8,7 @@ chown -R stunnel:stunnel /var/run/stunnel
 chmod -R 700 /var/run/stunnel
 
 /usr/local/opnsense/scripts/stunnel/generate_certs.php > /dev/null 2>&1
+
 {% else %}
 stunnel_enable="NO"
 {% endif %}

security/stunnel/src/opnsense/service/templates/OPNsense/Stunnel/syslog-ng-stunnel-ident.conf

@@ -1,3 +1,5 @@
+{% if not helpers.empty('OPNsense.Stunnel.general.enabled') and
+      not helpers.empty('OPNsense.Stunnel.general.enable_ident_server') %}
 destination d_stunnel_ident {
     file(
         "/var/run/stunnel/logs/stunnel_ident_${YEAR}${MONTH}${DAY}.log"
@@ -20,3 +22,5 @@ log {
     filter(f_stunnel_ident);
     destination(d_stunnel_ident);
 };
+
+{% endif %}