[strongSwan] left|rightsendcert, CR and send CR

[Emeric POUPON]

Ok good to know!

Thanks for your support,

Emeric

----- Mail original -----
De: "Martin Willi" <martin at strongswan.org>
À: "Emeric POUPON" <emeric.poupon at stormshield.eu>
Cc: users at lists.strongswan.org
Envoyé: Lundi 13 Octobre 2014 18:29:36
Objet: Re: [strongSwan] left|rightsendcert, CR and send CR

Hi Emeric,

> I want to request the remote peer to send its certificate: do I just
> have to set rightsendcert to yes?

Basically yes. Setting rightsendcert=yes sends a certificate request for
trusted CA certificates to give the peer a hint what certificate to
send. Of course that can't guarantee that the peer actually sends a
cert, but for example would if the (strongSwan) peer uses
leftsendcert=ifasked.

Regards
Martin