<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hi colleagues,</p>
<p>the question is for those, who remember history of changes in
strongSwan :-)</p>
<p>I'm using the exactly same configuration on two Openwrt devices
(one equipped with 5.8.2, another one - with 5.6.2) and while it
work with latter, it don't with old one. Configuration is below,
the message is:</p>
<p>15[CFG] <rc|28> constraint requires pre-shared key
authentication, but public key was used<br>
15[CFG] <rc|28> selected peer config 'rc' inacceptable:
constraint checking failed</p>
<p>when I'm trying to use different auth methods on both sides: PSK
on left side and pubkey on right side. Is this functionality -
different methods of mutual authentication - was introduced
somewhere in between of 5.6.2 and 5.8.2?</p>
<p>Client's configuration (which, again, works with 5.8.2 and
doesn't with 5.6.2) is:</p>
<pre>conn rc
keyexchange = ikev2
[ ... ]
# we are
left = %defaultroute
leftauth = psk
leftid = gagarin
leftsubnet = 0.0.0.0/0
leftupdown = /etc/ipsec.updown
# server
right = x.x.x.x
rightauth = pubkey
rightid = f.q.d.n
rightsubnet = 0.0.0.0/0
</pre>
<p>Thank you<br>
</p>
<pre class="moz-signature" cols="72">--
Volodymyr Litovka
"Vision without Execution is Hallucination." -- Thomas Edison</pre>
</body>
</html>