[strongSwan-dev] development

Suresh Kumar sureshkumarr.s at gmail.com
Sun Apr 25 20:49:56 CEST 2010

Hi Andreas,

Thanks for the information.
Now i have little understanding on the arch.
I have configured two linux hosts on IKEv1 based host- host tunnel (referred
the sample config from strongswan website)

>ipsec start
src file : src/starter/starter.c
this file internally calls the  pluto process( plutomain.c). plutomain.c
initializes the ipsec protocols for IKEv1.

>ipsec up <connection-name>
I am not sure , which file is doing the connection management.

But internally i understand src/pluto/ipsec_doi.c functions are used for the
IKEv1 transcations.

Which is the source file calls the IKEv1 functions (ipsec_doi functions) for
establish the IKEv1 based IPSEC tunnel?

Can you please give some light on this.


On Thu, Apr 22, 2010 at 6:58 PM, Andreas Steffen <
andreas.steffen at strongswan.org> wrote:

> Hi Suresh,
> there is no documentation at all available on the pluto architecture.
> Have a look at demux.c which parses incoming packets and ipsec_doi.c
> which handles the content of the IKEv1 messages. You'll find both
> files in the src/pluto directory.
> Regards
> Andreas
> On 22.04.2010 12:46, Suresh Kumar wrote:
>> Hi Andreas,
>> I am doing some research on the IKEv1 failure cases and how it can be
>> addressed by software itself. (Assumption: very minmal vpn configuration
>> to establish the IPSEC)
>> For that, I am using the strongswan pluto, and  currently testing the
>> IKEv1 failure cases in strongswan.
>> For Eg: Initiator is IKEv1(default) and responder is IKEv2(strictly
>> confugured) version.
>> This configuration,reponder doenst respond , initiator retransmits and
>> finally stops.
>> For this, try send IKEv2 packet and try..
>> Do we have some documentation for pluto?
>> thansk
>> suresh
> ======================================================================
> Andreas Steffen                         andreas.steffen at strongswan.org
> strongSwan - the Linux VPN Solution!                www.strongswan.org
> Institute for Internet Technologies and Applications
> University of Applied Sciences Rapperswil
> CH-8640 Rapperswil (Switzerland)
> ===========================================================[ITA-HSR]==
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/dev/attachments/20100426/d5875b0a/attachment.html>

More information about the Dev mailing list