Re: [strongSwan] ipsec.secrets loading p12 file fail due to no CRED_CONTAINER during enumeration

, February 5, 2019 12:12 AM To: Peter Hsiang; users@lists.strongswan.org Subject: Re: [strongSwan] ipsec.secrets loading p12 file fail due to no CRED_CONTAINER during enumeration Hi Peter, > Any idea why there is no pkcs12 in the log message? https://wiki.strongswan.org/projects/strongswan/w

[strongSwan] ipsec.secrets loading p12 file fail due to no CRED_CONTAINER during enumeration

Hi, 1) I am loading a .p12 file from ipsec.secrets, but in credential_factory.c create(), the enumerator type and subtype goes through a list of CRED_PRIVATE_KEY, CRED_PUBLIC_KEY, and CRED_CERTIFICATE, but there is no CRED_CONTAINER that it is looking for. What could be causing the enumerator

[strongSwan] Strongswan 5.7.2 test suite with 6 tests failed

Running the strongswan 5.7.2 testsuite, all tests passed except for the following: 412 tnccs-20-ev-pt-tls failed 419 tnccs-20-os failed 420 tnccs-20-os-pts failed 421 tnccs-20-pdp-eapfailed 422 tnccs-20-pdp-pt-tls failed 424 tnccs-20-pts-no-ecc failed Is there a

Re: [strongSwan] Strongswan test suite start-test failed to create network vnet1

Never mind. It works now. Thanks Peter From: Users on behalf of Peter Hsiang Sent: Thursday, January 24, 2019 10:36:30 AM To: users@lists.strongswan.org Subject: [strongSwan] Strongswan test suite start-test failed to create network vnet1 Hi, To build

[strongSwan] Handling DPD outside of strongswan

Hi, Given that the normal traffic is used for DPD, and the empty DPD packets are only used when there is a lack of data traffic to inform the other end that the connection is still active, is it possible to run the DPD part of the protocol outside of strongswan and still work properly in

Re: [strongSwan] Which version of openssl to use with strongswan

To: Peter Hsiang; users@lists.strongswan.org Subject: Re: [strongSwan] Which version of openssl to use with strongswan Hi Peter, > Do we have porting guidelines for integrating strongswan with boringssl for > Android P? Nope. You shouldn't use the system's libraries from an app anyway. &

Re: [strongSwan] Which version of openssl to use with strongswan

this work on Android P, and would it co-exist with the copy already in Android P (sharing the same libcrypto_static.a object files name space)? Thanks, Peter -Original Message- From: Tobias Brunner Sent: Tuesday, October 23, 2018 1:15 AM To: Peter Hsiang ; users@lists.strongswan.org

[strongSwan] Which version of openssl to use with strongswan

Hi, Which version of openssl is compatible with strongswan 5.6.1 for Android? I tried using the strongswan version of openssl from strongswan.org: https://git.strongswan.org/?p=android-ndk-openssl.git;a=summary but it seems this version of openssl is old and does not have some functions

[strongSwan] IPv6 tunnel connection ping with no response, and Router Advertisement multicast

I have a Strongswan IPv6 tunnel connection over the normal IPv4, and sometimes the IPv6 ping to the server does not get ping reply. Has anyone seen this issue too? The reason for sending the ping over the secure IPv6 tunnel is to test if the tunnel connection is up and running. Checking

[strongSwan] Multiple simultaneous IPSec connections with Strongswan

Hi, Does anyone know if it is possible for Strongswan to establish multiple simultaneous IPSec connections to multiple servers from one client device? Would this be just a matter of setting up multiple connection profiles and use the up command to connect? Peter

[strongSwan] ipsec.conf left=%any

Hello, In ipsec.conf on the client side, instead of using the client's own IP address for left, if I change it to left=%any, then the ipsec up home appears to still connect correctly and reaches the connection 'home' estabished successfully message. There was however a resolving 'any' failed:

Re: [strongSwan] ipsec.conf left=%any

fine. Regards, Noel Kuntze GPG Key id: 0x63EC6658 Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658 Am 06.06.2014 00:02, schrieb Peter Hsiang: Hello, In ipsec.conf on the client side, instead of using the client's own IP address for left, if I change it to left=%any

Re: [strongSwan] ipsec.conf strongswan.conf on Android

. The equivalent is in /system/lib/modules/ on Android. Thanks, Peter -Original Message- From: users-boun...@lists.strongswan.org [mailto:users-boun...@lists.strongswan.org] On Behalf Of Peter Hsiang Sent: Wednesday, May 28, 2014 10:31 AM To: Tobias Brunner; users@lists.strongswan.org Subject: Re