[strongSwan-dev] charon-cmd

[Klaus Richter]

Hi,

we are using charon-cmd on our clients mainly for its ability to prompt for PINs and passwords on the command line.

I have added a few options to suit our needs:

  --local-pk <path>
                  local public key for authentication
  --remote-pk <path>
                  remote public key for authentication
  --modeconfig <modeconfig>
                  modeconfig mode (pull, push, off, default: pull)
  --transport
                  transport mode (default: tunnel)
  --l2tp
                  L2TP mode (sets UDP/L2TP port traffic selector)
  --fragmentation
                  turn on fragmentation (default is off)

I've also added smart card support and another authentication profile 'ikev1-psk[-am]', which a few of our customers still require.

Is this interesting for upstream? I would gladly post patches.

Kind regards,
Klaus