Thank you Tobias for the reply.
Is there any other way to get to tls_peer_t from the updown_listener.c ?

regards,
-sk

On Wed, Nov 28, 2018 at 2:39 AM Tobias Brunner <[email protected]>
wrote:

> Hi,
>
> > Is there a way to get to the peer's certificate from an ike_sa_t pointer
> > for an eap-tls connection.
>
> No, there isn't.  The auth_cfg_t used in the TLS library (tls_peer_t,
> via eap-tls plugin), which stores the certificate, is never merged with
> that used for IKE.
>
> Regards,
> Tobias
>

Reply via email to