<html><head></head><body>So what you propose is to just use get_other_eap_id? <br>
<br>
Does strongswan *know* what type the identity is or is it just a string for it? <br><br><div class="gmail_quote">On 31 July 2014 11:06:06 EEST, Martin Willi <martin@strongswan.org> wrote:<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<pre class="k9mail"><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"> How does it look now? The "eap" : "ike" part is to make it easy to scripts to <br /> differentiate what type of identity it is.<br /></blockquote><br />True, but how does this scheme work if you want to pass both identities?<br />Or someone wants to add other options, such as the peer address,<br />certificate information, etc.?<br /><br />With that approach, you'd end up with an argument-name argument-value<br />list, but the names are not that meaningful. I'd prefer environment<br />variables, as you won't need any argument parsing in the callee. Just<br />checking the value for get_other_eap_id() is sufficient in most cases,<br />but we definitely should consider extensibility of that interface.<br /><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"> We hav!
e a conn
that uses rightauth=pubkey (IKE id that is the DN of the<br /> X.509 cert)<br /></blockquote><br />With pubkey authentication, the IKE identity can be anything else than a<br />DN. A peer for example may use an e-mail or IP as IKE identity (which is<br />contained in the cert as subjectAltName). <br /><br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"> So our script can parse for the email when argv[1] is ike and it knows<br /> it already is an email if argv[1] is eap<br /></blockquote><br />EAP or XAuth identities do not have to be e-mail addresses. Implying the<br />identity type from the getter does not work.<br /><br />Regards<br />Martin<br /><br /></pre></blockquote></div><br>
-- <br>
Sent from my Android device with K-9 Mail. Please excuse my brevity.</body></html>