[strongSwan] Strongswan Code Flow

2010-06-15 Thread Dhanavel P
Hi All, Kindly help me out in understanding the code flow of strongswan 4.4.0. with just IKEv1 enabled. Thanks in Advance Regards, Dhanavel ___ Users mailing list Users@lists.strongswan.org https://lists.strongswan.org/mailman/listinfo/users

[strongSwan] Fwd: Re: No conn has been authorized; was: (no subject)

2010-06-15 Thread Peter Daum
Original-Nachricht Datum: Tue, 15 Jun 2010 14:04:47 +0200 Von: pd...@gmx.de An: Andreas Steffen andreas.stef...@strongswan.org Betreff: Re: [strongSwan] No conn has been authorized; was: (no subject) Hi Steffen Yes, this is already case (sorry for not mentioning it in the first

Re: [strongSwan] Trouble compiling StrongSWAN 4.4.0 on FreeBSD 8.1-PRERELEASE on amd64

2010-06-15 Thread Tobias Brunner
Hi Holger, I've read the instructions at http://wiki.strongswan.org/projects/strongswan/wiki/FreeBSD As you've probably seen, this currently covers only FreeBSD 7.x and its NAT-T patches. With the inclusion of NAT-T in FreeBSD 8 some details have changed. For instance, the

Re: [strongSwan] Intermediate CAs - ordering important?

2010-06-15 Thread Andreas Steffen
Hi Holger, as far as I remember pluto supports the import of intermediate CA certificates received via IKEv1 only if the are embedded together with the end entity certificate in a PKCS#7 envelope. This is what Microsoft Windows clients are typically doing. Since over the last 10 years no one

Re: [strongSwan] Intermediate CAs - ordering important?

2010-06-15 Thread Andreas Steffen
Hi Holger, The ikev1/multi-level-ca-ldapscenario stores the intermediate CA certs locally in /etc/ipsec.d/cacerts. The multiple authentication failures occur due to the strictcrlpolicy=yes setting where the CRLs issued by the intermediate CA and root CA must be fetched asynchronously, first,

Re: [strongSwan] Strongswan Code Flow

2010-06-15 Thread Harini Gopalakrishnan
hi dhanavel and suresh maybe even i ll join in for understaanding the code flow of strongswan 4.4.0 with iKEv1 enabled . lets share our ideas thanks harini hi dhanavel, i spent sometime on pluto dameon(ikev1) for code understanding. i can help you