Re: [strongSwan] Davici parsing of terminating an IKE connection

2018-06-26 Thread rajeev nohria
Thanks a lot.. Rajeev On Tue, Jun 26, 2018 at 8:00 AM, Tobias Brunner wrote: > > Question: Is there way to know when we parse response from Davici that > > which conenction is deleted? If yes what parameter of davici we get > > information? i see reqcb() parse the davici reponse. > > Two

Re: [strongSwan] TPM2.0 and ESAPI

2018-06-26 Thread Andreas Steffen
Cześć Piotr, I've been aware of the emerging ESAPI which is indeed offering increased security in the communication with the TPM 2.0 and [hopefully] easier session handling but I wanted to wait for the 2.0.0 stable release, which apparently happened 5 days ago. Porting the strongSwan tpm plugin

Re: [strongSwan] Davici parsing of terminating an IKE connection

2018-06-26 Thread Tobias Brunner
> Question: Is there way to know when we parse response from Davici that > which conenction is deleted? If yes what parameter of davici we get > information? i see reqcb() parse the davici reponse. Two things: 1. Requests queued on the same connection are processed sequentially. 2. You can pass

[strongSwan] Davici parsing of terminating an IKE connection

2018-06-26 Thread rajeev nohria
Scenario: Strongswan has established multiple IKE connections with different peers. Lets say we have three different connections. Out of those we plan to delete two connections via initiating using davici terminate command. Question: Is there way to know when we parse response from Davici that

Re: [strongSwan] Stronswan to ignore IKE-SA-INIT response from a bogus IPv6 address

2018-06-26 Thread rajeev nohria
Hi Tobias, Which parameter to configure the specific remote IP address for a connection, so that we can reject the messages from any other IP address? I am assuming we are talking about one of parameter in swanctl.conf. If we are talking about connections..remote_addrs.. I did configure