[strongSwan] Small Problems with 5.2
Dirk Hartmann
dha at heise.de
Wed Jul 16 13:34:16 CEST 2014
Hi Tobias,
--On Wednesday, July 16, 2014 10:48:30 AM +0200 Tobias Brunner
<tobias at strongswan.org> wrote:
>>> Not sure why the behavior changed between 5.1.3 and 5.2.0 in this
>>> regard; likely that it is related to the replaced ipsec.conf parser.
>>
>> It's probably the new parser.
>> Checking the logs on the gateway running 5.1.3 I discovered that the
>> rightsendcert = never wasn't honoured for any connection. Windows 7
>> eap clients received a cert request too. So your suggestion to
>> remove this option from our config should be no problem.
>
> Intriguing. Could you send me the complete config file that manifests
> this difference in behavior?
sure
The normal ipsec.conf includes all *.conf files in the connections
directory.
The files in this directory are named:
0_all_w7_eapmschap.conf which I attached as its holds the rightsendcert
= never.
One file 98_partner1.conf.
The rest are subnet related config files named 172.xx.xx-name.conf I
added one too.
Best regards
Dirk
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ipsec.conf
Type: application/octet-stream
Size: 503 bytes
Desc: not available
URL: <http://lists.strongswan.org/pipermail/users/attachments/20140716/b579536b/attachment.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0_all_w7_eapmschap.conf
Type: application/octet-stream
Size: 429 bytes
Desc: not available
URL: <http://lists.strongswan.org/pipermail/users/attachments/20140716/b579536b/attachment-0001.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 98_partner1.conf
Type: application/octet-stream
Size: 291 bytes
Desc: not available
URL: <http://lists.strongswan.org/pipermail/users/attachments/20140716/b579536b/attachment-0002.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 172.25.22-abt1.conf
Type: application/octet-stream
Size: 1201 bytes
Desc: not available
URL: <http://lists.strongswan.org/pipermail/users/attachments/20140716/b579536b/attachment-0003.obj>
More information about the Users
mailing list