strongswan-ext

Files

T

Tobias Brunner e73af66f4a pubkey-authenticator: Avoid conflict with config switch based on EAP-Identity

The referenced commit ignored that INVALID_ARG was returned by this
authenticator if an unsupported signature scheme is encountered.  This
caused a crash in find_alternative_eap_cfg() as no EAP identity is
stored in the current auth config.

Since we don't distinguish the situation outside of the authenticator,
we can just return FAILED.

Closes strongswan/strongswan#2979

Fixes: 2f2e4abe3c ("ikev2: Add support to switch peer configs based on EAP-Identities")

2026-01-28 14:16:23 +01:00

attributes

mem-pool: Fix issue with make-before-break reauth and multiple IKE_SAs

2024-10-25 14:52:46 +02:00

bus

bus: Clarify that ALERT_TS_NARROWED is issued for local narrowing as well

2025-10-02 10:22:36 +02:00

config

child-cfg: Actually force narrowing TS in transport mode only as initiator

2025-07-11 14:15:06 +02:00

control

controller: Migrate tracked IKE SA in case of redirect during IKE_AUTH