Tobias Brunner
4aa24d4c13
RFC 7427 signature authentication is now used between strongSwan hosts by default, which causes the actual signature schemes to get logged.
16 lines
1.3 KiB
Plaintext
16 lines
1.3 KiB
Plaintext
carol::cat /var/log/daemon.log::authentication of 'moon.strongswan.org' with RSA.* successful::YES
|
|
carol::cat /var/log/daemon.log::server requested EAP_SIM authentication::YES
|
|
carol::cat /var/log/daemon.log::authentication of 'moon.strongswan.org' with EAP successful::YES
|
|
moon:: cat /var/log/daemon.log::authentication of '[email protected]' with EAP successful::YES
|
|
moon:: ipsec status 2> /dev/null::rw-eap.*ESTABLISHED.*moon.strongswan.org.*[email protected]::YES
|
|
carol::ipsec status 2> /dev/null::home.*ESTABLISHED.*[email protected].*moon.strongswan.org::YES
|
|
carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_req=1::YES
|
|
moon::tcpdump::IP carol.strongswan.org > moon.strongswan.org: ESP::YES
|
|
moon::tcpdump::IP moon.strongswan.org > carol.strongswan.org: ESP::YES
|
|
moon:: cat /var/log/daemon.log::RADIUS authentication of '[email protected]' failed::YES
|
|
moon:: cat /var/log/daemon.log::EAP method EAP_SIM failed for peer [email protected]::YES
|
|
moon:: ipsec status 2> /dev/null::rw-eap.*ESTABLISHED.*moon.strongswan.org.*[email protected]::NO
|
|
dave:: cat /var/log/daemon.log::received EAP_FAILURE, EAP authentication failed::YES
|
|
dave:: ipsec status 2> /dev/null::home.*ESTABLISHED::NO
|
|
dave:: ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_req=1::NO
|