[strongSwan-dev] New pull request for feature saveKeys

Emeric POUPON emeric.poupon at stormshield.eu
Thu Aug 11 10:09:05 CEST 2016


Hello,

Well I am not a strongSwan internal expert, but you could have used already existing messages in order to save what you need?
There already are some hooks used by the HA plugin to replicate states on different nodes of a HA cluster.

For example:
- ike_state_change -> on ESTABLISHED, get the SPIs
- ike_keys -> get the IKE SA keys 
- child_keys -> get the CHILD SA keys


Regards,

Emeric


----- Original Message -----
From: "Codrut Grosu" <cgrosu at ixiacom.com>
To: dev at lists.strongswan.org
Sent: Thursday, 11 August, 2016 09:51:05
Subject: [strongSwan-dev] New pull request for feature saveKeys

Hi, 




I finished writing the code for feature [1]. 




I created a pull request to merge the code with the upstream. [2] 




Can you please take a look at the code? 




Cheers, 

Codrut. 







[1]: https://wiki.strongswan.org/issues/1557 

[2]: https://github.com/strongswan/strongswan/pull/49 

	
	
An option to save IKE_SA and CHILD_SA keys for wireshark by superCodrut · Pull Request #49 · strongswan/strongswan 
github.com 
This is the first patch series for feature #1557. 


_______________________________________________
Dev mailing list
Dev at lists.strongswan.org
https://lists.strongswan.org/mailman/listinfo/dev


More information about the Dev mailing list