<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px"><div><span><br></span></div><div><br></div><span id="yui_3_16_0_1_1428921876241_108422"><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri">Hi Noel,</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri">Thanks for your email and sorry for not sending the source
code and configuration earlier. </font></div><div><font face="Times New Roman">
<br></font></div><div id="yui_3_16_0_1_1428921876241_108432" style="margin: 0in 0in 10pt;"><font id="yui_3_16_0_1_1428921876241_108431" face="Calibri">I noticed that, after loading the connection definition into
Charon daemon (using the test program stated below), if I trigger list-conn
command (#swanctl –L), it does not print anything in console. </font><font face="Calibri">Here goes the sample program, which I am using.</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri">int get_version(vici_conn_t *conn)</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri">{</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>vici_req_t *req;</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>vici_res_t *res;</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>int ret = 0;</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"> </font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>req =
vici_begin("version");</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>res =
vici_submit(req, conn);</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>if (res)</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>{</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>printf("%s %s (%s, %s, %s)\n",</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>vici_find_str(res, "", "daemon"),</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>vici_find_str(res, "", "version"),</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>vici_find_str(res, "", "sysname"),</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>vici_find_str(res, "", "release"),</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>vici_find_str(res, "", "machine"));</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>vici_free_res(res);</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>}</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>else</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>{</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>ret = errno;</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>fprintf(stderr, "version request failed: %s\n",
strerror(errno));</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>}</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>return ret;</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri">}</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri">int add_list_key_values(vici_req_t *req, char* str)</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri">{</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>const char
s[2] = "=";</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>char
*token,*key,*value;</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"> </font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>token =
strtok(str, s);</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>key=token;</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>while( token
!= NULL )</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>{</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>printf( " %s\n", token );</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>token
= strtok(NULL, s);</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>value=token;</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>vici_add_key_value(req, "key", "value",
strlen("value"));</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"> </font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>}</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>return 0;</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"> </font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri">}</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri">int add_key_values(vici_req_t *req, char* str)</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"> </font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri">{</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>const char
s[2] = "=";</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>char
*token,*key,*value;</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>token =
strtok(str, s);</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>key=token;</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>while( token
!= NULL )</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>{</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>printf( " %s\n", token );</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>token
= strtok(NULL, s);</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>value=token;</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>vici_add_key_valuef(req, key, "%s", value);</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"> </font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>}</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"> </font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>return 0;</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"> </font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri">}</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri">int load_conn(vici_conn_t *conn)</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri">{</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"> </font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>int ret = 0;</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>vici_req_t
*req;</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>vici_res_t
*res;</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>char buf[128];</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>char*
section="GW-GW";</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>snprintf(buf,
sizeof(buf), "%s.%s", "connections", section);</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>req =
vici_begin("load-conn");</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"> </font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"> </font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>char s1[] =
"local_addrs = 10.20.20.1";</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>char s2[] =
"remote_addrs = 10.20.20.4";</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>char s3[] =
"remote_ts = 172.16.220.4/32";</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>char s4[] =
"local_ts = 0.0.0.0/0";</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>char s5[] =
"esp_proposals = aes128-sha1";</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>char s6[] =
"version=2 ";</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>char s7[] =
"mobike=no";</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>char s8[] =
"reauth_time=60m";</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>char s9[] =
"rekey_time =20m";</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>char s10[] =
"auth<span style="mso-spacerun: yes;"> </span>=psk";</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>char s11[] =
"auth<span style="mso-spacerun: yes;"> </span>=psk";</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>char s12[] =
"start_action=start";</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>char s13[] =
"rekey_time=1000m";</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>char s14[] =
"proposals=aes128-sha1-modp2048";</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"> </font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"> </font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>add_list_key_values(req,s1);</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>add_list_key_values(req,s2);</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>add_list_key_values(req,s3);</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>add_list_key_values(req,s4);</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>add_list_key_values(req,s5);</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"> </font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>add_key_values(req,s6);</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>add_key_values(req,s7);</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>add_key_values(req,s8);</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>add_key_values(req,s9);</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>add_key_values(req,s10);</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>add_key_values(req,s11);</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>add_key_values(req,s12);</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>add_key_values(req,s13);</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>add_key_values(req,s14);</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><span style="mso-spacerun: yes;"><font face="Calibri"> </font></span></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>res =
vici_submit(req, conn);</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>if (!res)</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>{</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>fprintf(stderr, "load-conn request failed: %s\n",
strerror(errno));</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>return
FALSE;</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>}</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>if
(!streq(vici_find_str(res, "no", "success"),
"yes"))</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>{</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>fprintf(stderr, "loading connection '%s' failed: %s\n",</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>section,
vici_find_str(res, "", "errmsg"));</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>ret =
FALSE;</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>}</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>else</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>{</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>printf("loaded connection '%s'\n", section);</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>}</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>vici_free_res(res);</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span><span style="mso-spacerun: yes;"> </span>return ret;</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"> </font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri">}</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"> </font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"> </font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri">int main(int argc, char **argv)</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri">{</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri">vici_conn_t *conn;</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri">vici_init();</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>conn =
vici_connect(NULL);</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>if (conn)</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>{</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>get_version(conn);</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>load_conn(conn);</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span><span style="mso-spacerun: yes;"> </span>vici_disconnect(conn);</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>printf("Connected to VICI Socket\n");</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>}</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>else</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>{</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>ret = errno;</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>fprintf(stderr, "connecting failed: %s\n", strerror(errno));</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span><span style="mso-spacerun: yes;"> </span>}</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span><span style="mso-spacerun: yes;"> </span>vici_deinit();</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri">return 0;</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri">}</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri">Here goes the configuration.</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri">Swanctl.conf at IKE Initiator end</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri">connections {</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"> </font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>gw-gw {</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>local_addrs<span style="mso-spacerun: yes;"> </span>= 10.20.20.4</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>remote_addrs =
10.20.20.1</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"> </font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>local {</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span><span style="mso-spacerun: yes;"> </span>auth = psk</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>}</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>remote {</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>auth = psk</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>}</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>vips=172.16.220.4</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>pull=yes</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri">children {</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>net-net {</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>local_ts<span style="mso-spacerun: yes;"> </span>= 172.16.220.4/32</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>remote_ts = 0.0.0.0/0</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>start_action = start</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>updown = /usr/local/libexec/ipsec/_updown iptables</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>rekey_time = 1000m</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>esp_proposals = aes128-sha1</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>}</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"> </font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"> </font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"> </font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>}</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri">version = 2</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>mobike = no</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>reauth_time =
60m</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>rekey_time
=<span style="mso-spacerun: yes;"> </span>20m</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>proposals =
aes128-sha1-modp2048</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>}</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri">}</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"> </font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"> </font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri">secrets {</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"> </font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span># IKE preshared
secret section for a specific secret.</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>ike-WG {</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"># Value of the IKE preshared secret.</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>secret =: PSK
"strongSwan"</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"> </font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>}</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri">}</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"> </font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri">Swanctl.conf at IKE Responder end (when sample program is
not used) </font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri">connections {</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"> </font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>gw-gw {</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>local_addrs<span style="mso-spacerun: yes;"> </span>= 10.20.20.1</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>remote_addrs =
10.20.20.4</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"> </font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>local {</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>auth = psk</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>}</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>remote {</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>auth = psk</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>}</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri">children {</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>net-net {</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>remote_ts<span style="mso-spacerun: yes;"> </span>= 172.16.220.4/32</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>local_ts = 0.0.0.0/0</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>start_action = start</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>updown
= /usr/local/libexec/ipsec/_updown iptables</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>rekey_time = 1000m</font></div><div id="yui_3_16_0_1_1428921876241_108423"><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;">
</span>esp_proposals = aes128-sha1</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"> </font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"> </font></div><div><font face="Times New Roman">
</font><font face="Times New Roman"><br></font></div><div id="yui_3_16_0_1_1428921876241_108424" style="margin: 0in 0in 10pt;"><font face="Calibri"> </font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>}</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>version = 2</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>mobike = no</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>reauth_time =
60m</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>rekey_time
=<span style="mso-spacerun: yes;"> </span>20m</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>proposals =
aes128-sha1-modp2048</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>}</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri">secrets {</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"> </font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span># IKE preshared
secret section for a specific secret.</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>ike-WG {</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span># Value of the
IKE preshared secret.</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span><span style="mso-spacerun: yes;"> </span>secret =: PSK "strongSwan"</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"> </font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>}</font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"> </font></div><div><font face="Times New Roman">
<br></font></div><div id="yui_3_16_0_1_1428921876241_108727" style="margin: 0in 0in 10pt;"><font face="Calibri">}</font></div><div id="yui_3_16_0_1_1428921876241_108726"></div><font id="yui_3_16_0_1_1428921876241_108729" face="Times New Roman"><div id="yui_3_16_0_1_1428921876241_108726"><strong>
</strong><font face="Calibri">But If I use #swanctl –c (to load the connection without using the sample program) and then #swanctl –L, it prints the following connection info in console. It implies that, there is something wrong in my encoding the request message. Additionally can you please let me know, the secrets section of swanctl.conf file is being parsed in which function? </font></div><div id="yui_3_16_0_1_1428921876241_108433"><br></div><div id="yui_3_16_0_1_1428921876241_108434" style="margin: 0in 0in 10pt;"><font face="Calibri">gw-gw: IKEv2</font></div><div id="yui_3_16_0_1_1428921876241_108427"><font face="Times New Roman"><br></font></div><div id="yui_3_16_0_1_1428921876241_108426" style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>local:<span style="mso-spacerun: yes;"> </span>10.20.20.1</font></div><div id="yui_3_16_0_1_1428921876241_108425"><font face="Times New Roman"><br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>remote: 10.20.20.4</font></div><div><font face="Times New Roman"><br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>local pre-shared key authentication:</font></div><div><font face="Times New Roman"><br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>remote pre-shared key authentication:</font></div><div><font face="Times New Roman"><br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>net-net: TUNNEL</font></div><div id="yui_3_16_0_1_1428921876241_108728"><font face="Times New Roman"><br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>local:<span style="mso-spacerun: yes;"> </span>0.0.0.0/0</font></div><div><font face="Times New Roman"><br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"><span style="mso-spacerun: yes;"> </span>remote: 172.16.220.4/32</font></div><div><font face="Times New Roman"><br></font></div><div id="yui_3_16_0_1_1428921876241_108726"><br></div></font><div id="yui_3_16_0_1_1428921876241_108726"></div><div id="yui_3_16_0_1_1428921876241_108421" style="margin: 0in 0in 10pt;"><font face="Calibri"> </font></div><div><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri">Regards,</font></div><div id="yui_3_16_0_1_1428921876241_108730"><font face="Times New Roman">
<br></font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri">Chinmaya</font></div><div id="yui_3_16_0_1_1428921876241_108731"><font face="Times New Roman">
<br></font></div></span><div><br></div> <br><div class="qtdSeparateBR"><br><br></div><div class="yahoo_quoted" style="display: block;"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;"> <div dir="ltr"> <font face="Arial" size="2"> On Monday, April 13, 2015 5:38 PM, Noel Kuntze <noel@familie-kuntze.de> wrote:<br> </font> </div> <br><br> <div class="y_msg_container">-----BEGIN PGP SIGNED MESSAGE-----<br clear="none">Hash: SHA256<br clear="none"><br clear="none">Hello Chinmaya,<br clear="none"><br clear="none">Well, if you expect us to help, you should at least give us your source<br clear="none">code and the configuration you're loading.<br clear="none"><br clear="none">Mit freundlichen Grüßen/Regards,<br clear="none">Noel Kuntze<br clear="none"><br clear="none">Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658<br clear="none"><div class="yqt8977416879" id="yqtfd15868"><br clear="none">Am 13.04.2015 um 14:02 schrieb Chinmaya Dwibedy:<br clear="none">> <br clear="none">> <br clear="none">> <br clear="none">> <br clear="none">> <br clear="none">> <br clear="none">> Hi,<br clear="none">> I have written a C program which uses the VICI to configure and control the IKE daemon Charon (at IKE Responder end). I have updated the request (of type vici_req_t) using the vici_add_key_value() and vici_add_key_valuef(),and send the same via vici_submit (load-conn command). It says that, the connection has been loaded to Charon daemon successfully. But when I run the Charon daemon (at IKE initiator end), I get the following error in Charon log file.<br clear="none">> <br clear="none">> Jan 1 04:34:10 07[ENC] parsed IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(N<br clear="none">> ATD_D_IP) ]<br clear="none">> Jan 1 04:34:10 07[CFG] looking for an ike config for 10.20.20.1...10.20.20.4<br clear="none">> Jan 1 04:34:10 07[IKE] no IKE config found for 10.20.20.1...10.20.20.4, sending<br clear="none">> NO_PROPOSAL_CHOSEN<br clear="none">> Jan 1 04:34:10 07[ENC] added payload of type NOTIFY to message<br clear="none">> Jan 1 04:34:10 07[ENC] order payloads in message<br clear="none">> Jan 1 04:34:10 07[ENC] added payload of type NOTIFY to message<br clear="none">> Jan 1 04:34:10 07[ENC] generating IKE_SA_INIT response 0 [ N(NO_PROP) ]<br clear="none">> <br clear="none">> Note that, I have configured matching proposal for IKE and Child SA at both ends and using strongswan-5.2.2. Can anyone please suggest what I am doing wrong? Thanks in advance for your support.<br clear="none">> <br clear="none">> Regards,<br clear="none">> Chinmaya</div><br clear="none">> <br clear="none">> <br clear="none">> <br clear="none">> <br clear="none">> _______________________________________________<br clear="none">> Users mailing list<br clear="none">> <a href="mailto:Users@lists.strongswan.org" shape="rect" ymailto="mailto:Users@lists.strongswan.org">Users@lists.strongswan.org</a><br clear="none">> <a href="https://lists.strongswan.org/mailman/listinfo/users" target="_blank" shape="rect">https://lists.strongswan.org/mailman/listinfo/users</a><br clear="none">> <br clear="none">-----BEGIN PGP SIGNATURE-----<br clear="none">Version: GnuPG v2<br clear="none"><br clear="none">iQIcBAEBCAAGBQJVK7G3AAoJEDg5KY9j7GZYfJoP/jvzC/DsaoAHIX/JKKEc91NX<br clear="none">n+cBViJECpIRL5L4NNBjtJ4lIOr0jZ/tgrt5EQAXagaK+KhstHemsjmVjK/SV87H<br clear="none">sB3CEDaR6Ht5JmrpEiT76+qGOF1ibT3qlUvPoKE+z6xMpryjfXHFGDjs18Fkz8Y7<br clear="none">VeJcrZ7e8JO+CNKBbE8wsi9k/iQSsPquXO68xRhbpRgMIIzZ3lWND/YKXnQiq5FG<br clear="none">Owc7U12IDwo5pDHdDwnNQYwYG+fbGuuEnY0inEFwXybyyhEDEVlmpzFekE+BSgTy<br clear="none">cxHtt+7m0sJLcnogzCxJdZx1deQAk3bZsIGSvGE/ho+VrNhjEdlkqCkLwk7Uw12u<br clear="none">apzE34TWYpL5GL5ffMQQ3qeocQHLf/5txm/T4bKkb/4GOi8xknUvFPyIA1XmKDpU<br clear="none">4uYbCKYHsWXFMSj+zDVFWheQ8LltEeApuLLSmKECWl6Ok3ucIerSm9Yag4f82wjJ<br clear="none">fECXLwfaV4xAtyVLvrHO+MDGdXZ30VUcjqCnfcwJDlMdWL1v2xXAIN3Z0ue2uCl1<br clear="none">qP34ZhiFqfecX1J662mllTutf+SM5etKw5NYRBwMCNm/VE7Ma2P1ODRB4GYGFOrO<br clear="none">X1Ik2JeCAr0+4vy8W3Xyr0ho3XJ9LBH9Za3/yy7GHGYkORP5ycGcCX7uechGQj4d<br clear="none">bpOgew4i5EgNKGBXJ8YA<br clear="none">=01GK<br clear="none">-----END PGP SIGNATURE-----<br clear="none">_______________________________________________<br clear="none">Users mailing list<br clear="none"><a href="mailto:Users@lists.strongswan.org" shape="rect" ymailto="mailto:Users@lists.strongswan.org">Users@lists.strongswan.org</a><br clear="none"><a href="https://lists.strongswan.org/mailman/listinfo/users" target="_blank" shape="rect">https://lists.strongswan.org/mailman/listinfo/users</a><br><br></div> </div> </div> </div></div></body></html>