SQL configuration and credential plugin » History » Version 5

« Previous - Version 5/10 (diff) - Next » - Current version
Martin Willi, 18.04.2008 14:44

SQL configuration and credential plugin

The SQL plugin for charon allows to store the complete connection configuration in a relational database. Further, the daemon reads credentials, such as certificates, private keys or passwords from the database to do all kind of authentication. Logging to the database is also possible.


The SQL plugin is still experimental and in [browser:trunk/src/charon/plugins/sql developement]. It currently works on top of MySQL or SQLite.
There is no frontend yet to configure the database, but we'll extend the manager to allow such tasks.

Database setup

There are three SQL scripts to help you in the database setup:
  • [browser:trunk/src/charon/plugins/sql/mysql.sql MySQL tables]
  • [browser:trunk/src/charon/plugins/sql/sqlite.sql SQLite tables]
  • [browser:trunk/src/charon/plugins/sql/test.sql Test data]


Make sure to build strongSwan with the appropriate modules:

 ./configure --enable-sql --enable-mysql --enable-sqlite [...]

The plugin uses strongswanconf for database configuration:

charon {
  plugins {
    sql {
      database = mysql://user:pass@localhost/database