Re: [Swan-dev] Libreswan basic questions

2022-05-24 Thread Balaji Thoguluva
Thanks Paul. Further question. Suppose I have a socket descriptor already created for a local interface which can be used to send and receive IKE packets to an external IKE peer. Can pluto daemon be configured with the specific socket descriptor (per IPsec connection configuration) that can be u

Re: [Swan-dev] Libreswan basic questions

2022-05-24 Thread Paul Wouters
On Mon, 23 May 2022, Balaji Thoguluva wrote: 1) Is there any way (any parameter) so we can disable the IPsec processing in Libreswan and just use the IKE functionality in Libreswan? libreswan allows a childless SA, but currently contains no configuration option to do so. That would not be too

Re: [Swan-dev] Libreswan basic questions

2022-05-24 Thread Balaji Thoguluva
Thank you Antony. Further question. Can pluto daemon be configured with a specific socket descriptor (per IPsec connection configuration) that can be used by pluto to send and receive IKE packets? Thanks, Balaji On Mon, May 23, 2022 at 2:37 PM Antony Antony wrote: > Hi, > > On Fri, May 20, 20

Re: [Swan-dev] head fails to compile on rawhide :P

2022-05-24 Thread Paul Wouters
On Tue, 24 May 2022, Paul Wouters wrote: Subject: [Swan-dev] head fails to compile on rawhide :P I take it back. native compile works, just mock building does not. Let's assume it is a mock bug. Paul In function 'memcpy', inlined from 'clone_bytes' at /builddir/build/BUILD/libreswan

[Swan-dev] head fails to compile on rawhide :P

2022-05-24 Thread Paul Wouters
In function 'memcpy', inlined from 'clone_bytes' at /builddir/build/BUILD/libreswan-4.7/lib/libswan/alloc.c:241:3, inlined from 'clone_bytes_as_chunk' at /builddir/build/BUILD/libreswan-4.7/lib/libswan/chunk.c:55:9, inlined from 'check_shunk_clone' at /builddir/build/BUILD/libresw