Re: [Swan-dev] Libreswan basic questions

2022-05-25 Thread Paul Wouters
On May 24, 2022, at 20:34, Balaji Thoguluva wrote: > >  > Thanks Paul. > > Further question. > > Suppose I have a socket descriptor already created for a local interface > which can be used to send and receive IKE packets to an external IKE peer. > > Can pluto daemon be configured with the

Re: [Swan-dev] Libreswan basic questions

2022-05-24 Thread Balaji Thoguluva
Thanks Paul. Further question. Suppose I have a socket descriptor already created for a local interface which can be used to send and receive IKE packets to an external IKE peer. Can pluto daemon be configured with the specific socket descriptor (per IPsec connection configuration) that can be u

Re: [Swan-dev] Libreswan basic questions

2022-05-24 Thread Paul Wouters
On Mon, 23 May 2022, Balaji Thoguluva wrote: 1) Is there any way (any parameter) so we can disable the IPsec processing in Libreswan and just use the IKE functionality in Libreswan? libreswan allows a childless SA, but currently contains no configuration option to do so. That would not be too

Re: [Swan-dev] Libreswan basic questions

2022-05-24 Thread Balaji Thoguluva
Thank you Antony. Further question. Can pluto daemon be configured with a specific socket descriptor (per IPsec connection configuration) that can be used by pluto to send and receive IKE packets? Thanks, Balaji On Mon, May 23, 2022 at 2:37 PM Antony Antony wrote: > Hi, > > On Fri, May 20, 20

Re: [Swan-dev] Libreswan basic questions

2022-05-23 Thread Antony Antony
Hi, On Fri, May 20, 2022 at 05:52:02PM -0400, Balaji Thoguluva wrote: > Hi All, > > I have a couple of basic questions. > > 1) Is there any way (any parameter) so we can disable the IPsec processing > in Libreswan and just use the IKE functionality in Libreswan? There was an option no-kernel or

Re: [Swan-dev] Libreswan basic questions

2022-05-23 Thread Balaji Thoguluva
Hi Folks, If someone could respond, that would be great. Any help would be appreciated. Thanks, Balaji On Fri, May 20, 2022 at 5:52 PM Balaji Thoguluva wrote: > Hi All, > > I have a couple of basic questions. > > 1) Is there any way (any parameter) so we can disable the IPsec processing > in L

[Swan-dev] Libreswan basic questions

2022-05-20 Thread Balaji Thoguluva
Hi All, I have a couple of basic questions. 1) Is there any way (any parameter) so we can disable the IPsec processing in Libreswan and just use the IKE functionality in Libreswan? 2) Are there any user-level commands to get the IKE negotiated IPsec keys and parameters from Libreswan? If not, co