strongSwan

14.12.2016

13:09 strongSwan Issue #2184: configuration with multiple RSA keys

Tobias Brunner wrote:
> > why would be a certificate with an explicit DNS SAN like nikolaev-s01-i04.cg-dialup.net pi...

05:49 strongSwan Issue #2184: configuration with multiple RSA keys

the SANs look like this:
for apigen_server.crt:...

05:36 strongSwan Bug #2183: Initiator ends up with no route if IPv6 DAD for the virtual IP failed

thanks for the patch!
it works 100% of the time after your fix was applied. please merge it into stable when possible.

13.12.2016

13:55 strongSwan Issue #2184: configuration with multiple RSA keys

Tobias Brunner wrote:
> > I can 100% vouch for the setup presented above to fail for clients that were trying to use...

13:16 strongSwan Bug #2183: Initiator ends up with no route if IPv6 DAD for the virtual IP failed

Tobias Brunner wrote:
> Could you please try to verify that every time it fails @dadfailed@ is seen in that output f...

09.12.2016

14:34 strongSwan Bug #2183: Initiator ends up with no route if IPv6 DAD for the virtual IP failed

Tobias Brunner wrote:
> Could be a problem with [[IPv6NDP|NDP]], which you might have to passthrough.
I tried add...

13:22 strongSwan Issue #2184: configuration with multiple RSA keys

I confirm that conn profile selection was done via "remote id" in ios initiators and rightid in linux clients.
I c...

08.12.2016

18:58 strongSwan Issue #2184 (Feedback): configuration with multiple RSA keys

problem description:
once I introduce the last 6 lines in the responder's config (the ikev2-internal conn profil...

17:46 strongSwan Bug #2183 (Closed): Initiator ends up with no route if IPv6 DAD for the virtual IP failed

two problems will be described:
* the bug appears to resemble issue #1189, but the kernel used here is much newe...

17:08 strongSwan Issue #2182 (Rejected): strongswan android app does not connect to an ipv6-only server

we have a test case scenario in which a device connected to an ipv6-only wireless network (that has NAT64/DNS64 dis...