[strongSwan] left|rightauth in sql

Tobias Brunner tobias at strongswan.org
Thu Jun 4 09:16:20 CEST 2015


Hi Michael,

> The peer_configs table [0] is the only place I see something close.  The 
> table has "auth_method", which defaults to 1. According to [1] this is 
> AUTH_CLASS_PUBKEY

"auth_method" only refers to the local authentication, the remote
authentication can't be configured.  Unless EAP is used, it seems, i.e.
if "eap_type" is set (on the other hand an EAP type can't be configured
for the local peer).  I guess the DB backend was mainly designed for VPN
gateways in remote access scenarios.

> As a follow up, I'd be curious how to specifiy RFC 7427 hash algorithms 
> in sql, if this is even possible.

No, that's currently not possible.

Regards,
Tobias



More information about the Users mailing list