error-notify Plugin
Purpose
The error-notify plugin for libcharon provides an interface to receive
notifications about errors that occur in the keying daemon via UNIX socket.
The plugin is disabled by default and can be enabled with the
./configure option
--enable-error-notify
Implementation
If the plugin is enabled, it opens a UNIX socket and sends error notifications to connected listeners.
Configuration
The error-notify plugin is configured using the following options in the
charon.plugins.error-notify
section of strongswan.conf:
| Key | Default | Description |
|---|---|---|
socket |
[→] |
Socket provided by the error-notify plugin.
|
error-notify Tool
The error-notify utility usually invoked by
/usr/libexec/ipsec/error-notify
demonstrates how error notifications can be received. It is currently very simple and takes no arguments and when invoked simply lists all received error messages to STDOUT.
Socket Interface
The error_notify socket interface definition can be found here:
src/libcharon/plugins/error_notify/error_notify_msg.h.
The error-notify tool demonstrating how the interface can be used:
src/libcharon/plugins/error_notify/error_notify.c