<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;">
<p>Hi Emeric,</p>
<p><br>
</p>
<p><br>
</p>
<p>As pointed out by Tobias Brunner in [1], at comments, with the hook functions for ike_keys and child_keys in the listener_t interface I won't get the derived keys.</p>
<p><br>
</p>
About <span style="font-family: Calibri, Arial, Helvetica, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 13.3333px;">
ike_state_change</span>, I will need to take a look at that function.
<div><br>
</div>
<div><br>
</div>
<div>Thanks for feed-back,</div>
<div>Codrut.</div>
<div>
<p><br>
</p>
<p>[1]: <a href="https://wiki.strongswan.org/issues/1557" class="OWAAutoLink" id="LPlnk488328">https://wiki.strongswan.org/issues/1557</a></p>
<br>
<div id="LPBorder_GT_14709035289930.778403513294178" style="margin-bottom: 20px; overflow: auto; width: 100%; text-indent: 0px;">
<table id="LPContainer_14709035289910.9696673851529285" cellspacing="0" style="width: 90%; position: relative; overflow: auto; padding-top: 20px; padding-bottom: 20px; margin-top: 20px; border-top: 1px dotted rgb(200, 200, 200); border-bottom: 1px dotted rgb(200, 200, 200); background-color: rgb(255, 255, 255);">
<tbody>
<tr valign="top" style="border-spacing: 0px;">
<td id="TextCell_14709035289920.6520660802296663" colspan="2" style="vertical-align: top; position: relative; padding: 0px; display: table-cell;">
<div id="LPRemovePreviewContainer_14709035289920.5872114773604438"></div>
<div id="LPTitle_14709035289920.9315503823662503" style="top: 0px; color: rgb(0, 164, 194); font-weight: normal; font-size: 21px; font-family: wf_segoe-ui_light, "Segoe UI Light", "Segoe WP Light", "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif; line-height: 21px;">
<a id="LPUrlAnchor_14709035289920.5591702195896404" href="https://wiki.strongswan.org/issues/1557" target="_blank" style="text-decoration: none;">Feature #1557: An option to save IKE_SA and CHILD_SA keys for wireshark - strongSwan</a></div>
<div id="LPMetadata_14709035289930.9325223355017702" style="margin: 10px 0px 16px; color: rgb(102, 102, 102); font-weight: normal; font-family: wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif; font-size: 14px; line-height: 14px;">
wiki.strongswan.org</div>
<div id="LPDescription_14709035289930.4065402731864092" style="display: block; color: rgb(102, 102, 102); font-weight: normal; font-family: wf_segoe-ui_normal, "Segoe UI", "Segoe WP", Tahoma, Arial, sans-serif; font-size: 14px; line-height: 20px; max-height: 100px; overflow: hidden;">
Redmine</div>
</td>
</tr>
</tbody>
</table>
</div>
<br>
<br>
<br>
<div style="color: rgb(0, 0, 0);">
<div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="x_divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> Emeric POUPON <emeric.poupon@stormshield.eu><br>
<b>Sent:</b> Thursday, August 11, 2016 11:09 AM<br>
<b>To:</b> Codrut Grosu<br>
<b>Cc:</b> dev@lists.strongswan.org<br>
<b>Subject:</b> Re: [strongSwan-dev] New pull request for feature saveKeys</font>
<div> </div>
</div>
</div>
<font size="2"><span style="font-size:10pt;">
<div class="PlainText">Hello,<br>
<br>
Well I am not a strongSwan internal expert, but you could have used already existing messages in order to save what you need?<br>
There already are some hooks used by the HA plugin to replicate states on different nodes of a HA cluster.<br>
<br>
For example:<br>
- ike_state_change -> on ESTABLISHED, get the SPIs<br>
- ike_keys -> get the IKE SA keys <br>
- child_keys -> get the CHILD SA keys<br>
<br>
<br>
Regards,<br>
<br>
Emeric<br>
<br>
<br>
----- Original Message -----<br>
From: "Codrut Grosu" <cgrosu@ixiacom.com><br>
To: dev@lists.strongswan.org<br>
Sent: Thursday, 11 August, 2016 09:51:05<br>
Subject: [strongSwan-dev] New pull request for feature saveKeys<br>
<br>
Hi, <br>
<br>
<br>
<br>
<br>
I finished writing the code for feature [1]. <br>
<br>
<br>
<br>
<br>
I created a pull request to merge the code with the upstream. [2] <br>
<br>
<br>
<br>
<br>
Can you please take a look at the code? <br>
<br>
<br>
<br>
<br>
Cheers, <br>
<br>
Codrut. <br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
[1]: <a href="https://na01.safelinks.protection.outlook.com/?url=https%3a%2f%2fwiki.strongswan.org%2fissues%2f1557&data=01%7c01%7ccgrosu%40ixiacom.com%7cb85797c0259a444b47c308d3c1bfc353%7c069fd614e3f843728e18cd06724a9b23%7c0&sdata=LJYUv1ALwu%2fWj%2fzzWSXUhKCwbDKXSElZ1g1TNxrbmMw%3d" id="LPlnk134127">
https://na01.safelinks.protection.outlook.com/?url=https%3a%2f%2fwiki.strongswan.org%2fissues%2f1557&data=01%7c01%7ccgrosu%40ixiacom.com%7cb85797c0259a444b47c308d3c1bfc353%7c069fd614e3f843728e18cd06724a9b23%7c0&sdata=LJYUv1ALwu%2fWj%2fzzWSXUhKCwbDKXSElZ1g1TNxrbmMw%3d</a>
<br>
<br>
[2]: <a href="https://na01.safelinks.protection.outlook.com/?url=https%3a%2f%2fgithub.com%2fstrongswan%2fstrongswan%2fpull%2f49&data=01%7c01%7ccgrosu%40ixiacom.com%7cb85797c0259a444b47c308d3c1bfc353%7c069fd614e3f843728e18cd06724a9b23%7c0&sdata=SQ5onUssqDVWXVP5T3cj9GphCf0UU%2b%2fbn0SJ3b1B3Bc%3d">
https://na01.safelinks.protection.outlook.com/?url=https%3a%2f%2fgithub.com%2fstrongswan%2fstrongswan%2fpull%2f49&data=01%7c01%7ccgrosu%40ixiacom.com%7cb85797c0259a444b47c308d3c1bfc353%7c069fd614e3f843728e18cd06724a9b23%7c0&sdata=SQ5onUssqDVWXVP5T3cj9GphCf0UU%2b%2fbn0SJ3b1B3Bc%3d</a>
<br>
<br>
<br>
<br>
An option to save IKE_SA and CHILD_SA keys for wireshark by superCodrut · Pull Request #49 · strongswan/strongswan
<br>
github.com <br>
This is the first patch series for feature #1557. <br>
<br>
<br>
_______________________________________________<br>
Dev mailing list<br>
Dev@lists.strongswan.org<br>
<a href="https://na01.safelinks.protection.outlook.com/?url=https%3a%2f%2flists.strongswan.org%2fmailman%2flistinfo%2fdev&data=01%7c01%7ccgrosu%40ixiacom.com%7cb85797c0259a444b47c308d3c1bfc353%7c069fd614e3f843728e18cd06724a9b23%7c0&sdata=i5PFm20ezZwF%2bOA%2bq7SGFdFfaTQbWAzsQTvyIUK0VSc%3d">https://na01.safelinks.protection.outlook.com/?url=https%3a%2f%2flists.strongswan.org%2fmailman%2flistinfo%2fdev&data=01%7c01%7ccgrosu%40ixiacom.com%7cb85797c0259a444b47c308d3c1bfc353%7c069fd614e3f843728e18cd06724a9b23%7c0&sdata=i5PFm20ezZwF%2bOA%2bq7SGFdFfaTQbWAzsQTvyIUK0VSc%3d</a><br>
</div>
</span></font></div>
</div>
</div>
</body>
</html>