[strongSwan] Small Problems with 5.2

Dirk Hartmann dha at heise.de
Wed Jul 16 13:34:16 CEST 2014


Hi Tobias,

--On Wednesday, July 16, 2014 10:48:30 AM +0200 Tobias Brunner 
<tobias at strongswan.org> wrote:

>>> Not sure why the behavior changed between 5.1.3 and 5.2.0 in this
>>> regard; likely that it is related to the replaced ipsec.conf parser.
>>
>> It's probably the new parser.
>> Checking the logs on the gateway running 5.1.3 I discovered that the
>> rightsendcert = never wasn't honoured for any connection. Windows 7
>> eap  clients received a cert request too. So your suggestion to
>> remove this  option from our config should be no problem.
>
> Intriguing.  Could you send me the complete config file that manifests
> this difference in behavior?

sure
The normal ipsec.conf includes all *.conf files in the connections 
directory.
The files in this directory are named:
0_all_w7_eapmschap.conf which I attached as its holds the rightsendcert 
= never.
One file 98_partner1.conf.
The rest are subnet related config files named 172.xx.xx-name.conf I 
added one too.

Best regards
Dirk
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ipsec.conf
Type: application/octet-stream
Size: 503 bytes
Desc: not available
URL: <http://lists.strongswan.org/pipermail/users/attachments/20140716/b579536b/attachment.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0_all_w7_eapmschap.conf
Type: application/octet-stream
Size: 429 bytes
Desc: not available
URL: <http://lists.strongswan.org/pipermail/users/attachments/20140716/b579536b/attachment-0001.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 98_partner1.conf
Type: application/octet-stream
Size: 291 bytes
Desc: not available
URL: <http://lists.strongswan.org/pipermail/users/attachments/20140716/b579536b/attachment-0002.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 172.25.22-abt1.conf
Type: application/octet-stream
Size: 1201 bytes
Desc: not available
URL: <http://lists.strongswan.org/pipermail/users/attachments/20140716/b579536b/attachment-0003.obj>


More information about the Users mailing list