Re: [strongSwan] StrongSwan reply to system in error case

2017-11-22 Thread Alexander.Camek
lt;alexander.ca...@bmw.de>; > users@lists.strongswan.org > Subject: Re: [strongSwan] StrongSwan reply to system in error case > > * PGP Signed by an unknown key > > Hello, > > strongSwan can only be contacted via stroke (ipsec tool) or vici (swanctl > tool, any &g

Re: [strongSwan] StrongSwan reply to system in error case

2017-11-21 Thread Noel Kuntze
Hello, strongSwan can only be contacted via stroke (ipsec tool) or vici (swanctl tool, any third party lib that uses vici). You are well advised with using vici. stroke will be removed at some point (not determined). What exactly are you looking for? You can query strongSwan for logs via vici,

[strongSwan] StrongSwan reply to system in error case

2017-11-20 Thread Alexander.Camek
Hi, Currently StrongSwan logs every information. Additionally, you can get a lot of information when you start ipsec with --nofork --all. But, is it possible to get a reply directly from strongswan? Especially, when there is a certificate error or mismatch, or if ipsec / ike has some other