[strongSwan] rejecting certificate without digitalSignature or nonRepudiation, keyUsage flags

Tobias Brunner tobias at strongswan.org
Wed Oct 30 17:37:23 CET 2019


Hi,

> Is the problem caused be my certificates being crafted in a way which
> did not comply with what Strongswan requires?

Yep.

> Or this can be resolved with configuration?

No.  Either don't add any keyUsage flags to the certificate, or include
at least one of the mentioned flags.

Regards,
Tobias


More information about the Users mailing list