Project

General

Profile

Feature #1002

No support for NT hashes in swanctl

Added by MichaƂ Zegan over 5 years ago. Updated over 3 years ago.

Status:
Closed
Priority:
Normal
Category:
swanctl
Target version:
Start date:
19.06.2015
Due date:
Estimated time:
Resolution:
Fixed

Description

Hello.

Although it is supported in ipsec.secrets, I do not seem to be able to use ntlm hashes in swanctl configuration.
Also, I believe it is not the only unsupported secret type.

Associated revisions

Revision ed105f45 (diff)
Added by Tobias Brunner over 3 years ago

vici: Add support for NT Hash secrets

Fixes #1002.

History

#1 Updated by Tobias Brunner over 5 years ago

  • Status changed from New to Feedback

Although it is supported in ipsec.secrets, I do not seem to be able to use ntlm hashes in swanctl configuration.

Correct, that's not supported at the moment. But NT hashes (unsalted MD4 hashes of the UTF-16-LE password) don't provide that much more security anyway.

Also, I believe it is not the only unsupported secret type.

Yes, looks like PINs for smart cards can't be configured.

#2 Updated by Tobias Brunner almost 4 years ago

  • Target version set to 5.5.2

#3 Updated by Tobias Brunner over 3 years ago

  • Subject changed from No support for nt hashes in swanctl to No support for NT hashes in swanctl
  • Status changed from Feedback to Closed
  • Assignee set to Tobias Brunner
  • Resolution set to Fixed

Also available in: Atom PDF