Hello!
I'd like to implement the equivalent of commands "strongswan up
<connectionname>"
and "strongswan down <connectionname>" using SMP plugin. To do that I'm sending
these messages to charon:
1) strongswan up:
<message type="request" id="1">
<control>
<ikesainitiate>department1</ikesainitiate>
</control>
</message>
<message type="request" id="2">
<control>
<childsainitiate>department1</childsainitiate>
</control>
</message>
2) strongswan down:
<message type="request" id="3">
<control>
<childsaterminate>1</childsaterminate>
</control>
</message>
<message type="request" id="4">
<control>
<ikesaterminate>1</ikesaterminate>
</control>
</message>
It works fine, but I'm still not sure is that the complete equivalent? And I've
got
a couple of questions:
1) What happens to strongSwan server if my program would be terminated
unexpectedly
before sending the second message? I mean:
- "childsaterminate" was sent and processed successfully;
- program's going to send "ikesaterminate";
- program dies before sending;
- ???
2) Are these SMP messages synchronous? Do they guarantee that the current action
(IKE/child initiation or termination) is complete (with or without error)?
Thanks in advance,
--
Vadim Kuznetsov,
GNU/Linux Software Developer
_______________________________________________
Dev mailing list
[email protected]
https://lists.strongswan.org/mailman/listinfo/dev
