Project

General

Profile

Bug #5241

rightca should be specified in ipsec.conf

Added by Chris Buechler over 5 years ago. Updated over 5 years ago.

Status:
Resolved
Priority:
High
Assignee:
Matthew Smith
Category:
IPsec
Target version:
2.2.5
Start date:
10/02/2015
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
Release Notes:
Default
Affected Version:
2.2.x
Affected Architecture:

Description

RSA type VPNs should specify rightca in ipsec.conf.

Associated revisions

Revision 7a7e1ba9 (diff)
Added by Matthew Smith over 5 years ago

Set rightca for IPsec phase 1 using Mutual RSA, Mutual RSA + xauth, or EAP-TLS. Fixes #5241.

Revision cd4aa77c (diff)
Added by Matthew Smith over 5 years ago

Set rightca for IPsec phase 1 using Mutual RSA, Mutual RSA + xauth, or EAP-TLS. Fixes #5241.

History

#1 Updated by Jim Thompson over 5 years ago

  • Assignee set to Matthew Smith

#2 Updated by Matthew Smith over 5 years ago

  • Status changed from Confirmed to Feedback
  • % Done changed from 0 to 100

#4 Updated by David Wood over 5 years ago

rightca is set correctly on an EAP-TLS connection using pfSense-Full-Update-2.2.5-DEVELOPMENT-amd64-20151025-1504.tgz

The remote end is running the Android Strongswan app.

#5 Updated by Chris Buechler over 5 years ago

  • Status changed from Feedback to Resolved

it's set correctly now, and things still work

Also available in: Atom PDF