denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

testing: migrated openssl-ikev2/critical-extension to swanctl

Browse Source
This commit is contained in:
Andreas Steffen
2018-11-12 11:50:05 +01:00
parent 97493cbe17
commit e259ff3979
13 changed files with 73 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/openssl-ikev2/critical-extension/description.txt
+1 -1
View File
@@ -1,5 +1,5 @@
A connection between the subnets behind the gateways <b>moon</b> and <b>sun</b> is set up.
The authentication is based on <b>X.509 certificates</b> which contain a <b>critical</b> but
unsupported 'strongSwan' extension. Whereas <b>moon</b> ignores unsupported critical
unsupported 'strongSwan' extension. Whereas <b>moon</b> ignores unsupported critical
extensions by setting <b>libstrongswan.x509.enforce_critical = no</b> in strongswan.conf,
<b>sun</b> discards such certificates and aborts the connection setup.