[strongSwan] Trouble configuring vpn connection to strongswan using smartcard

Tobias Brunner tobias at strongswan.org
Thu Jul 19 17:29:37 CEST 2018


Hi Nathan,

> The ids match! So it should be fine!

Only with strongSwan >= 5.5.1, with older releases the cert/key has to
be stored using a CKA_ID that matches the SPKI (i.e. your cert/key with
CKA_ID 3 would never be used).

> Any other help on why this does possibly not work?

Do you have strongSwan >= 5.5.1 installed?  Did you configure the pkcs11
plugin properly?  Is it loaded and does it enumerate certificates when
charon-nm is started (check the log for details)?

Regards,
Tobias


More information about the Users mailing list