[strongSwan] IKEv2 Extensions to Support RoHC (RFC 5857)

Andreas Steffen andreas.steffen at strongswan.org
Thu Jan 5 22:57:10 CET 2017


Hi Jordan,

the ROHC_SUPPORTED notification type has already been defined
in src/libcharon/encoding/payloads/notify_payload.h:

https://git.strongswan.org/?p=strongswan.git;a=blob;f=src/libcharon/encoding/payloads/notify_payload.h;h=04160bbfcab1da805b41d43ce3e5e48976d3999c;hb=refs/heads/master#l128

What remains to be done is to write a libcharon plugin which inserts
RoHC attributes on the sender side and parses them on the receiver
side. This is done via a listener subscribed to notify messages.

Some time ago I created a "demo-plugin" git branch which shows what
has to be done to implement a custom-specific plugin transferring
information over notify messages:

https://git.strongswan.org/?p=strongswan.git;a=commitdiff;h=0c948b864f130756f40bb3cf04d2ef5beda12dce

I hope this helps.

Best regards

Andreas

On 06.01.2017 02:35, Jordan wrote:
> Hi,
>
>
> StrongSwan does not appear to currently implement support RoHC over
> IKEv2 (RFC 5857).  I need to support this  mode/extension and am trying
> to understand the best approach.  Any suggestions?
>
>
> Thanks
>
> Jordan
>
>
======================================================================
Andreas Steffen                         andreas.steffen at strongswan.org
strongSwan - the Open Source VPN Solution!          www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
===========================================================[ITA-HSR]==

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3859 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.strongswan.org/pipermail/users/attachments/20170106/286f016d/attachment.bin>


More information about the Users mailing list