Project

General

Profile

Actions

Bug #16197

open
QY MM

underscore (_) is not permitted in Identifier (Pre-Shared key)

Bug #16197: underscore (_) is not permitted in Identifier (Pre-Shared key)

Added by Qian Yan over 1 year ago. Updated 4 days ago.

Status:
Feedback
Priority:
Normal
Assignee:
Category:
IPsec
Target version:
Start date:
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
26.10
Release Notes:
Default
Affected Version:
All
Affected Architecture:
All

Description

When I put underscore(_) in the identifier, for example "San_Zhang", it will report error when click save.

The following input errors were detected:
The identifier contains invalid characters.

I know this character is not allowed in DNS hostname, but it is allowed in e-mail address or account name.


Files

Pfsense_identifier_edit_v2.7.2.png (25.2 KB) Pfsense_identifier_edit_v2.7.2.png capture of PSK identifier edit. Qian Yan, 05/22/2025 02:40 AM
clipboard-202609081020-jl5i5.png (21.7 KB) clipboard-202609081020-jl5i5.png Alhusein Zawi, 09/08/2026 05:20 PM

QY Updated by Qian Yan over 1 year ago Actions #1

underscore(_) should be allowed in the account name or the name part (prefix) of the e-mail address, not the domain suffix.

examples of valid:

San_Zhang

examples of invalid:

San.Zhang@example_host.com

Found this doc, but I am not sure if it is right one for this issue.
[[https://www.rfc-editor.org/rfc/rfc4282]]

BTW,
please help to change Priority of this bug to low, I forgot to change it when I submited it.

BA Updated by Bryan Allen over 1 year ago Actions #2

  • Status changed from New to Confirmed
  • Priority changed from Normal to Low
  • Target version set to 2.8.0
  • Affected Version changed from 2.7.2 to 2.8.0

Confirmed this on:

2.8.0-RELEASE (amd64)
built on Wed May 21 23:12:00 UTC 2025
FreeBSD 15.0-CURRENT

&

24.11-RELEASE (amd64)
built on Sat Jan 11 10:11:00 CST 2025
FreeBSD 15.0-CURRENT

as well. same error comes up as attached above.

BA Updated by Bryan Allen over 1 year ago Actions #3

  • Affected Version changed from 2.8.0 to All

JP Updated by Jim Pingle over 1 year ago Actions #4

  • Target version changed from 2.8.0 to 2.9.0
  • Plus Target Version set to 25.07

JP Updated by Jim Pingle about 1 year ago Actions #5

  • Plus Target Version changed from 25.07 to 25.11

AP Updated by aleksei prokofiev 11 months ago Actions #6

Tested on
25.11-BETA (amd64)
built on Tue Oct 28 18:38:00 UTC 2025
FreeBSD 16.0-CURRENT

Issue still persists

JP Updated by Jim Pingle 10 months ago Actions #7

  • Plus Target Version changed from 25.11 to 26.03

JP Updated by Jim Pingle 7 months ago Actions #8

  • Plus Target Version changed from 26.03 to 26.07

JP Updated by Jim Pingle 3 months ago Actions #9

  • Plus Target Version changed from 26.07 to 26.11

JP Updated by Jim Pingle 3 months ago Actions #10

  • Plus Target Version changed from 26.11 to 26.10

MM Updated by Marcos M about 1 month ago Actions #11

  • Status changed from Confirmed to Ready To Test
  • Priority changed from Low to Normal
  • Target version changed from 2.9.0 to CE-Next
  • Plus Target Version changed from 26.10 to Plus-Next
  • Affected Architecture All added
  • Affected Architecture deleted (amd64)

I don't see any restrictions for the underscore so it looks to be safe.
https://docs.strongswan.org/docs/latest/config/identityParsing.html

Show

MM Updated by Marcos M 8 days ago Actions #12

  • Status changed from Ready To Test to Feedback
  • Assignee set to Marcos M
  • % Done changed from 0 to 100
  • Plus Target Version changed from Plus-Next to 26.10

Applied with c26ab2a2c14219cd376be2a248f90c478d0f204c.

AZ Updated by Alhusein Zawi 4 days ago Actions #13

underscore (_) is permitted in Identifier (Pre-Shared key). fixed.

26.10-DEVELOPMENT (amd64)
built on Tue Sep 8 13:16:00 UTC 2026
FreeBSD 16.0-CURRENT

Actions

Also available in: Atom