[strongSwan] terminate a partial connection

[Modster, Anthony]

Hello Tobias

I tried ike, and still will not find it.

When I create the connection I use: 

   req = vici_begin("initiate");

   vici_add_key_valuef(req,"child","%s",param->conn_name);

   /* timeout = <timeout in ms before returning>
    * use the timeout,
    * if good conditions the response will return in < 10 seconds,
    * if not this will allow a response to be received and
    * the event monitor will catch the error or connection ok.
    */
   int timeout = 10 * 1000; //10 sec
   vici_add_key_valuef(req,"timeout","%d",timeout);

   res = vici_submit(req,conn);

According to the documents, the ike field is optional,
? do I need to set it


-----Original Message-----
From: Users [mailto:users-bounces at lists.strongswan.org] On Behalf Of Tobias Brunner
Sent: Monday, March 13, 2017 9:30 AM
To: Modster, Anthony <Anthony.Modster at Teledyne.com>; users at lists.strongswan.org
Subject: Re: [strongSwan] terminate a partial connection

Hi Anthony,

> I tried to terminate using “swanctl -t --child sgateway1-gldl”.
> 
> But the error returned was it could not find the connection to terminate.

At that point there is no CHILD_SA with that name.  Try --ike.

Regards,
Tobias

_______________________________________________
Users mailing list
Users at lists.strongswan.org
https://lists.strongswan.org/mailman/listinfo/users