[strongSwan] Command-line program for IKE Responder

[Noel Kuntze]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hello Chinmaya,

You can try looking at swanctl/vici or abuse and twist ipsec starter to receive the configuration file over an
IPC mechanism or via stdin.

For initating connections, you can use swanctl/vici, too.

Mit freundlichen Grüßen/Kind Regards,
Noel Kuntze

GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658

Am 19.03.2015 um 11:39 schrieb Chinmaya Dwibedy:
>  
> Hi,
> The charon-cmd is a command-line program for IKE Initiator. Is there CLI application that acts as an IKE Responder? If no, I am thinking to design a stand-alone application (which will act as a Responder) that will communicate with the IKEv2 Charon daemon. Will it be an issue if I will do the followings?
>
> 1.
>     Instead of calling the confread_load () (src\starter\confread.c)) to load and parse an ipsec.conf file, it will take the configuration options (in ipsec.conf ) from command line and then populate the cfg (starter_config_t structure).
> 2.
>     It will call the starter_start_charon () (src\starter\invokecharon.c) to spawn a child process running Charon program. Then it will pass those command line options to Charon via UNIX domain stroke socket.
>
> Scripting ipsec.conf is cumbersome, is there plugin that allows writing extensions initiating or responding with dynamically created connections? If yes, pls suggest how to use the same.
> Regards,
> Chinmaya
>
>
> _______________________________________________
> Users mailing list
> Users at lists.strongswan.org
> https://lists.strongswan.org/mailman/listinfo/users

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=X8NO
-----END PGP SIGNATURE-----