[strongSwan] How to display negotiated key values using VICI

Subramonia Pillai iimk.subbu at gmail.com
Wed May 31 13:36:50 CEST 2017

Thanks Noel. But I am writing my own version of "swanctl --list-sa" that
should display keyvalue too

Could you please share any pointer to achieve this req.


On 31 May 2017 at 16:56, Noel Kuntze <
noel.kuntze+strongswan-users-ml at thermi.consulting> wrote:

> Hello Subramonia,
> On 31.05.2017 12:40, Subramonia Pillai wrote:
> > Hi,
> >
> > I am using kernel-libipsec and vici. The problem is when trying to
> display the details of established SAs using VICI, the negotiated keyvalue
> are not getting printed.
> Keyvalue? Do you mean the key length? That is statically defined in the
> RFCs for those algorithms and is not variable.
> >
> > I tried listing the SAs, similar to 'swanctl --list-sa' command. Only
> the encr-alg and encr-keysize are displayed, but the negotiated key value
> not getting displayed.
> That is because that would be superfluous information.
> Kind regards
> Noel
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20170531/c9f6d3a4/attachment-0001.html>

More information about the Users mailing list