[strongSwan] StrongSwan reply to system in error case

[Noel Kuntze]

Hello,

strongSwan can only be contacted via stroke (ipsec tool) or vici (swanctl tool, any third party lib that uses vici). You are well advised with using vici. stroke will be removed at some point (not determined).
What exactly are you looking for? You can query strongSwan for logs via vici, too, but only for new logs. strongSwan doesn't cache any old ones or old events.

Kind regards

Noel

On 20.11.2017 16:47, Alexander.Camek at bmw.de wrote:
> Hi,
>
> Currently StrongSwan logs every information. Additionally, you can get a lot of information when you start ipsec with --nofork --all. But, is it possible to get a reply directly from strongswan? Especially, when there is a certificate error or mismatch, or if ipsec / ike has some other errors? Or is it only possible to get the information by using the vici Plugin, and not directly by strongswan itself?
>
> Thanks for your help.
>
> Kind regards
>
> Alexander Camek

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.strongswan.org/pipermail/users/attachments/20171122/f7be75ae/attachment.sig>