[strongSwan-dev] Implement new plugin

Martin Willi martin at strongswan.org
Fri Jun 27 11:49:27 CEST 2014

Hi Vyronas,

>  How does one add a new plugin to the build system?

You'll have to add a --enable option and the associated Makefile to
configure.ac. Search the file for an existing plugin (lookip for
example), and insert corresponding statements for your plugin.

For a libcharon plugin, you'll have to extend the Makefile.am in this
directory for your plugin. Again, refer to an existing plugin for a

> Is there an existing plugin that provides authorization by an external 
> script/executable after user authentication like OpenVPN?

No, the updown plugin invokes a script for established tunnels, but
can't reject authorization based on the script return value.

Instead, you may register a listener for the authorize hook [1], which
then can call a script and pass appropriate information for a decision.



More information about the Dev mailing list