[strongSwan] leftcert ikev2

[Noel Kuntze]

Hello,

Leftcert configures the certificate that should be used to authenticate the local peer to the remote peer. Read the manual for the configuration file. It explains it.

Kind regards

Noel

Am 23.10.18 um 19:39 schrieb bls s:
>
> I’m using the new swanctl strongSwan support, but I’m pretty sure that the certs item in a connection’s local description is the same as leftcert.
>
>  
>
> My understanding is that the cert is used by the client to validate that it’s talking to the server that it thinks it connected to. Obviously the CA can be validated. Windows and iOS clients also validate against the altNames to provide an extra level of assurance. Windows checks that the hostname it connected to is one of the altNames, and iOS checks that the RemoteID in the VPN configuration is one of the altNames.
>
>  
>
> Not sure about MacOS and Android (yet), but they are undoubtedly similar.
>
>  
>
> *From: *Markus Maurer <mailto:mm at v-net.tk>
> *Sent: *Tuesday, October 23, 2018 7:16 AM
> *To: *users at lists.strongswan.org <mailto:users at lists.strongswan.org>
> *Subject: *[strongSwan] leftcert ikev2
>
>  
>
> Hi,
> can anybody explain me why leftcert is needed in ikev2? What is it used for? I couldn't find an explanation about it.
>
> Thanks in advance!
> -- 
> This email was Malware checked by UTM 9. http://www.sophos.com

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.strongswan.org/pipermail/users/attachments/20181023/66925715/attachment.sig>