[Ipsec-tools-devel] Error reporting

[<ma...@ne...>]

Hi

I've added some code to get event reports from racoon in racoonctl. The
idea is to use it for the roadwarrior situation: racoon is running in
the background, and the user uses racoonctl to start and stop the VPN
connexion. racoonctl must be able to report what's going on.

Two racoonctl commands were modified to do that: vpn-connect (aka vc)
and vpn-disconnect (aka vd). vc can now report the internal IP and the
banner message. vd reports that the VPN was successfully stopped.

This is when everything runs file. Errors are much more a problem, as
there are more than 1000 errors in racoon. Fortunately, not all of them
deserve to be reported to the user, and not all of them are revelant in
the context of the roadwarrior. What are the usefull errors? 

Peer not responding (it never did)
Peer stoped responding
Peer not reachable anymore (DPD timeout)
login failed (for Xauth)
Peer certificate cannot be validated (do we need details about why?)
Peer deleted the SA 
Racoon quits (being killed)

Do you see anything missing?

-- 
Emmanuel Dreyfus
Il y a 10 sortes de personnes dans le monde: ceux qui comprennent 
le binaire et ceux qui ne le comprennent pas.
ma...@ne...