[strongSwan] How to display negotiated key values using VICI
noel.kuntze+strongswan-users-ml at thermi.consulting
Wed May 31 13:26:58 CEST 2017
On 31.05.2017 12:40, Subramonia Pillai wrote:
> I am using kernel-libipsec and vici. The problem is when trying to display the details of established SAs using VICI, the negotiated keyvalue are not getting printed.
Keyvalue? Do you mean the key length? That is statically defined in the RFCs for those algorithms and is not variable.
> I tried listing the SAs, similar to 'swanctl --list-sa' command. Only the encr-alg and encr-keysize are displayed, but the negotiated key value not getting displayed.
That is because that would be superfluous information.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 833 bytes
Desc: OpenPGP digital signature
More information about the Users