[strongSwan] ECDSDA certificates / keys?

[Kostya Vasilyev]

Thank you Tobias,

On Thu, Mar 14, 2019, at 3:41 PM, Tobias Brunner wrote:
> Hi Kostya,
> 
> > Does IPSec in general and strongSwan in particular support certificate authentication with ECDSA keys?
> 
> Sure.
> 
> > -----BEGIN EC PARAMETERS-----
> > Bgg.....==
> > -----END EC PARAMETERS-----
> > -----BEGIN EC PRIVATE KEY-----
> > MHcCA.......yDpwQ==
> > -----END EC PRIVATE KEY-----
> 
> Remove the parameters, the pem plugin only parses the first BEGIN/END
> section in a PEM file.

Yes this worked.

What also worked is to convert the key from PEM to DER format:

openssl pkcs8 -topk8 -inform PEM -outform DER \
	-in ec_server.pem \
	-out ec_server.der -nocrypt

I mention this if anyone else runs into this issue.

-- K