[strongSwan] ipsec.secrets loading p12 file fail due to no CRED_CONTAINER during enumeration

[Peter Hsiang]

Hi,

1) I am loading a .p12 file from ipsec.secrets, but in credential_factory.c create(), the enumerator type and subtype goes through a list of CRED_PRIVATE_KEY, CRED_PUBLIC_KEY, and CRED_CERTIFICATE, but there is no CRED_CONTAINER that it is looking for.

What could be causing the enumerator to not provide the CRED_CONTAINER?


2) In strongswan.conf it has:
charon {
load = random nonce aes md5 sha1 sha2 pem pkcs1 pkcs8 pkcs12 curve25519 gmp x509 curl revocation hmac gcm stroke kernel-netlink socket-default eap-tls updown

The log show pkcs1, pkcs8.  Any idea why there is no pkcs12 in the log message?

Feb  4 17:33:12 ubuntu daemon.info charon: 00[LIB] loaded plugins: charon random nonce aes md5 sha1 sha2 pem pkcs1 pkcs8 curve25519 gmp x509 revocation hmac gcm stroke kernel-netlink socket-default eap-tls updown

Thanks,
Peter


-----------------------------------------------------------------------------------
This email message is for the sole use of the intended recipient(s) and may contain
confidential information.  Any unauthorized review, use, disclosure or distribution
is prohibited.  If you are not the intended recipient, please contact the sender by
reply email and destroy all copies of the original message.
-----------------------------------------------------------------------------------
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20190205/f4c43007/attachment.html>