Feature #6775
closed
Strongswan PKCS#11 Support
Added by Anonymous about 8 years ago.
Updated almost 5 years ago.
Description
We developed a Smart Cards based authentication of StrongSwan-IPsec-VPN peers.
This already works on pfSense 2.2.6 by replacing the Strongswan version, but this does not work any longer on pfSense 2.3.X.
The goal is using Smart Cards together with future pfSense versions. Therefore we need StrongSwan PKCS#11 support.
Adding PKCS#11 support needs to be added during compilation/making the binary.
It would help us a lot, if you put PKCS#11 support to StrongSwan within the next pfSense release.
- Assignee set to Renato Botelho
- Target version changed from 2.4.0 to 2.4.1
- Target version changed from 2.4.1 to 2.4.2
- Target version changed from 2.4.2 to 2.4.3
- Target version changed from 2.4.3 to 2.4.4
- Target version changed from 2.4.4 to 48
- Target version changed from 48 to 2.5.0
- Status changed from New to Feedback
Plugin support was added to strongswan port on pfSense 2.5.0
I still don't know exactly what to do on GUI
Tested, with editing of ipsec.secrets, ipsec.conf and charon.conf
+ installing packages: ccid-1.4.30.txz, opensc-0.19.0.txz, pcsc-lite-1.8.24,2.txz + dependencies
HowTo: https://wiki.strongswan.org/projects/strongswan/wiki/SmartCards
Works
pfSense 2.5.0.a.20191024.0021
need GUI options to select ID of certificate on token + PIN
and testing with different tokens
tested with Aktiv Rutoken ECP
- Status changed from Feedback to Closed
Also available in: Atom
PDF