strongSwan

13.11.2019

12:58 strongSwan Issue #3257: Unable to parse letsencrypt ecdsa private key

> iOS won't look for certs in the system keychain.
That seems to be the case, I just manually import DST Root CA X...

12:51 strongSwan Issue #3257: Unable to parse letsencrypt ecdsa private key

Just to make sure I understand the RFC right. CERTREQ should contain sha1 hashes of trusted CA's public keys right? S...

11:47 strongSwan Issue #3257: Unable to parse letsencrypt ecdsa private key

Tobias Brunner wrote:
> > Is the intermedia cert redundant?
>
> No, it is usually sent by the server (it could be...

10:29 strongSwan Issue #3257: Unable to parse letsencrypt ecdsa private key

Tobias Brunner wrote:
> > Does that mean I shouldn’t use fullchain.pem where it contains multiple certs?
>
> It w...

10:03 strongSwan Issue #3258: How to enable save-keys?

Tobias Brunner wrote:
> > Looks like that's not the case.
>
> Not with this particular plugin. It's never loaded ...

12.11.2019

10:07 strongSwan Issue #3258: How to enable save-keys?

Tobias Brunner wrote:
> > and strongswan.conf
>
> Which is inadequate to use this particular plugin. It has to be...

05:09 strongSwan Issue #3237: Second client in LAN fails to connect to strongswan server

Tobias Brunner wrote:
> > Out of curiosity, what kind of hw should I install to enable hw offload?
>
> I think de...

05:04 strongSwan Issue #3258: How to enable save-keys?

Tobias Brunner wrote:
> > How do I enable the plugin?
>
> [[FAQ#Plugin-is-missing]].
FAQ doesn't seem to help....

11.11.2019

04:19 strongSwan Issue #3237: Second client in LAN fails to connect to strongswan server

Out of curiosity, what kind of hw should I install to enable hw offload? I'd like to give it a try.

09.11.2019

08:14 strongSwan Issue #3258 (Closed): How to enable save-keys?

I specified --enable-save-keys while compiling, but setting esp, ike and wireshark_keys didn't seem to have any effec...