Re: Pluto questioning questions :)

-----BEGIN PGP SIGNED MESSAGE-----


| From: Paul Wouters <[email protected]>
| 
| I'm trying to ask Pluto some questions about the connections it knows,
| and specificly want to check certain connection atttributes, for use
| with 'ipsec verify'.
| 
| Pluto has too many options, so i get rather confused :)

Or, in this case, too few.  There is really only one "what's up?"
question that you can ask pluto: ipsec whack --status.

| Is there a way, other then:
| 
| ipsec auto --status |grep "%opportunistic" | sed "s/^.*\"\(.*\)\".*$/\1/"
| 
| to get a list of opportunistic connections? 

No way that is interestingly different.

| And my second question, is there an easy way to get attributes from a 
| certain connection name. Eg if I want to know the leftid=?
| Can I obtain a list of current conn names? (not instances)

Things like leftid are particularly hard to pick out of the status
information because Pluto tries to use a minimal description of the
topology, one that leaves out things that are defaulted.  So, for
example
	192.139.70.23---192.139.70.18...192.139.46.38===192.139.46.73/32
never shows the left ID since it is 192.139.70.23, the same as left=.

Another oddity is that left and right are interchangeable, so Pluto
interchanges them when it knows that our side is right -- it wants
our side to be left.

Hugh Redelmeier
[email protected]  voice: +1 416 482-8253

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv

iQCVAwUBPkLClMFAuQPManGZAQEFeAQApS6ocAO+CVpC9IAoih1HHO7p0HC/0PKu
9it6srHiAYAvk2v+hASR2aBkuS+oxsFMJ9tzSZDYO7Z7FAeoT2cqP8UmK+zW/e/j
CxfhH0fAWljBksScZaWXTy7RGpbUd+bPzTFRe+N4zU59t9m2XV+8GhENmLB1DQ+X
PVkZF1z+aGQ=
=qHRE
-----END PGP SIGNATURE-----