RFC 7427 signature authentication is now used between strongSwan hosts by default, which causes the actual signature schemes to get logged.
15 lines
1.1 KiB
Plaintext
15 lines
1.1 KiB
Plaintext
carol::cat /var/log/daemon.log::authentication of 'moon.strongswan.org' with RSA.* successful::YES
|
|
carol::cat /var/log/daemon.log::TNCCS-Recommendation.*allow::YES
|
|
carol::cat /var/log/daemon.log::EAP method EAP_TTLS succeeded, MSK established::YES
|
|
carol::cat /var/log/daemon.log::CHILD_SA home{1} established.*TS 192.168.0.100/32 === 10.1.0.0/16::YES
|
|
dave:: cat /var/log/daemon.log::authentication of 'moon.strongswan.org' with RSA.* successful::YES
|
|
dave:: cat /var/log/daemon.log::TNCCS-Recommendation.*none::YES
|
|
dave:: cat /var/log/daemon.log::received EAP_FAILURE, EAP authentication failed::YES
|
|
dave:: cat /var/log/daemon.log::CHILD_SA home{1} established.*TS 192.168.0.200/32 === 10.1.0.0/16::NO
|
|
moon:: cat /var/log/daemon.log::authentication of '[email protected]' with EAP successful::YES
|
|
moon:: cat /var/log/daemon.log::RADIUS authentication of '[email protected]' failed::YES
|
|
moon:: cat /var/log/daemon.log::EAP method EAP_TTLS failed for peer [email protected]::YES
|
|
carol::ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_ALICE: icmp_req=1::YES
|
|
dave:: ping -c 1 PH_IP_ALICE::64 bytes from PH_IP_VENUS: icmp_req=1::NO
|
|
|