[strongSwan] left|rightsendcert, CR and send CR

Martin Willi martin at strongswan.org
Mon Oct 13 18:29:36 CEST 2014


Hi Emeric,

> I want to request the remote peer to send its certificate: do I just
> have to set rightsendcert to yes?

Basically yes. Setting rightsendcert=yes sends a certificate request for
trusted CA certificates to give the peer a hint what certificate to
send. Of course that can't guarantee that the peer actually sends a
cert, but for example would if the (strongSwan) peer uses
leftsendcert=ifasked.

Regards
Martin



More information about the Users mailing list