Re: [strongSwan] Dynamic control of enabling/disabling plugins at run time?

[Yong Choo]

Yes, we are using/controlling the strictcrlpolicy when we are enabling 
'revocation'.


Our systems' engineer wanted to have the plugin not even loaded when the 
'revocation' is to be disabled.


On 6/1/2012 6:59 AM, Martin Willi wrote:

Hi,


So, it would be ideal to have some sort of 'dynamic control at run
time' in strongswan.conf to indicate which plugin is to be
'enabled/disabled'.

Beside the load statement, there is currently no option to
enable/disable the revocation plugin globally. Have you seen the
ipsec.conf strictcrlpolicy that allows you to accept/reject certificates
whose certificate status can not be obtained?

Regards
Martin

___
Users mailing list
Users@lists.strongswan.org
https://lists.strongswan.org/mailman/listinfo/users

Re: [strongSwan] Dynamic control of enabling/disabling plugins at run time?

[Martin Willi]

Hi,

> So, it would be ideal to have some sort of 'dynamic control at run
> time' in strongswan.conf to indicate which plugin is to be
> 'enabled/disabled'. 

Beside the load statement, there is currently no option to
enable/disable the revocation plugin globally. Have you seen the
ipsec.conf strictcrlpolicy that allows you to accept/reject certificates
whose certificate status can not be obtained?

Regards
Martin


___
Users mailing list
Users@lists.strongswan.org
https://lists.strongswan.org/mailman/listinfo/users

[strongSwan] Dynamic control of enabling/disabling plugins at run time?

[Yong Choo]

Hi,
We were trying to work with "revocation" plugin. In our current system 
requirement, it is necessary to control the activation of this plugins.


The compilation of two separate images are not possible because of the 
flesh memory device limitation.
The only way we could do was to manually use 'load=' to control which 
plugins to load and proper order. This creates a tremendous upgrade problem.


So, it would be ideal to have some sort of 'dynamic control at run time' 
in strongswan.conf to indicate which plugin is to be 'enabled/disabled'.


Could it be possible for enhancement?

Thanks Much in advance,
-Yong Choo
___
Users mailing list
Users@lists.strongswan.org
https://lists.strongswan.org/mailman/listinfo/users