strongSwan

= strongSwan Manager =

The IKEv2 daemon charon has a XML interface to query information and to control the daemon (see [wiki:SMP]). A web application allows to interact with the daemon using this protocol.

----
'''''The strongSwan manager is under heavy development and not for production use! '''''
----

== Building management application ==

The manager is based on a fastcgi application and uses the !ClearSilver templating engine to build the web sites. So you'll need
* !ClearSilver including headers (Debian: clearsilver-dev)
* FastCGI headers and library (Debian: libfcgi-dev)
* SQLite3 with headers (Debian: libsqlite3-dev)

To build the manager, add the following options to ./configure
{{{
--enable-xml --enable-manager
}}}

== Setting up Apache 2 ==
As the manager uses FastCGI, different web server may be used to host the application. Here we look at configuration of apache using mod-fastcgi.

Additionally to Apache2, you'll need
* mod-fastcgi (Debian: libapach2-mod-fastcgi)

Make sure to enable the new module and that the following fastcgi option is set (e.g. in mods-enabled/fastcgi.conf):
{{{
AddHandler fastcgi-script .fcgi
}}}
Static files are served through Apache, everything other is served from the FastCGI. Add these two lines a script alias to your a website:
{{{
Alias /manager/static /usr/local/libexec/ipsec/templates/static
ScriptAlias /manager /usr/local/libexec/ipsec/manager.fcgi
}}}
Adapt this path according to your ''--prefix'' or ''--libexecdir'' [wiki:InstallationDocumentation installation] settings.
== Logging in ==

Now you can surf to
{{{
http://host/manager/status/ikesalist
}}}
The shipped configuration allows you to log in using ''strongSwan'' with the password ''strongi''. Charon currently listens on TCP port 4502, so
choose that configuration for now.