[strongSwan-dev] charon-cmd

Klaus Richter klaus.richter at ecos.de
Sat Sep 9 17:44:48 CEST 2017


we are using charon-cmd on our clients mainly for its ability to prompt for PINs and passwords on the command line.

I have added a few options to suit our needs:

  --local-pk <path>
                  local public key for authentication
  --remote-pk <path>
                  remote public key for authentication
  --modeconfig <modeconfig>
                  modeconfig mode (pull, push, off, default: pull)
                  transport mode (default: tunnel)
                  L2TP mode (sets UDP/L2TP port traffic selector)
                  turn on fragmentation (default is off)

I've also added smart card support and another authentication profile 'ikev1-psk[-am]', which a few of our customers still require.

Is this interesting for upstream? I would gladly post patches.

Kind regards,

More information about the Dev mailing list