error-notify Plugin


The error-notify plugin provides an interface to receive notifications about errors that occur in the keying daemon via UNIX socket.

The plugin is disabled by default and can be enabled by adding

to the ./configure options.


If the plugin is enabled, it opens a UNIX socket and sends error notifications to connected listeners.


The plugin is configured using the following strongswan.conf options:

Key Default Description
charon.plugins.error-notify.socket unix://${piddir}/charon.enfy Socket provided by the error-notify plugin

error-notify tool

The error-notify ipsec utility, invoked by

ipsec error-notify
demonstrates how error notifications can be received. It is currently very simple and takes no arguments, and, when invoked, simply lists all received error messages to STDOUT.

Socket interface

The socket interface format is defined in source:src/libcharon/plugins/error_notify/error_notify_msg.h. The error-notify CLI utility at source:src/libcharon/plugins/error_notify/error_notify.c demonstrates how it can be used.