denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ike-auth: Add option to use EAP-only authentication without notify

Browse Source 
Some peers apparently don't send the notify and still expect to
authenticate with EAP-only authentication.  This option allows forcing
the configured use of EAP-only authentication in that scenario.
This commit is contained in:
Tobias Brunner
2020-05-07 15:05:55 +02:00
parent 0184a69b7b
commit 066fa42fcb
2 changed files with 17 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
conf/options/charon.opt
+4
View File
@@ -120,6 +120,10 @@ charon.flush_auth_cfg = no
charon.follow_redirects = yes
Whether to follow IKEv2 redirects (RFC 5685).
charon.force_eap_only_authentication = no
Violate RFC 5998 and use EAP-only authentication even if the peer did not
send an EAP_ONLY_AUTHENTICATION notify during IKE_AUTH.
charon.fragment_size = 1280
Maximum size (complete IP datagram size in bytes) of a sent IKE fragment
when using proprietary IKEv1 or standardized IKEv2 fragmentation, defaults