Re: [strongSwan-dev] [strongSwan] initialzing EAP TLS peer with a different IDi than the IDi used in teh first IKE AUTH message

2016-10-11 Thread Ravi Kanth Vanapalli
Sure Andreas. Thank you for this valuable input. I will give a try. Could you please confirm the difference between 1 and 2 below 1) auth->add(auth, AUTH_RULE_IDENTITY, id); 2) auth->add(auth, AUTH_RULE_EAP_IDENTITY, id); My understanding is that (1) is used to fill the IDi in the first

Re: [strongSwan-dev] [strongSwan] initialzing EAP TLS peer with a different IDi than the IDi used in teh first IKE AUTH message

2016-10-11 Thread Ravi Kanth Vanapalli
Adding option (3) here. 3) auth->add(auth, AUTH_RULE_AAA_IDENTITY, id) Which of the following identities (1),2 or 3 is used to fetch the private key in EAP_TLS authentcation. On Tue, Oct 11, 2016 at 7:28 AM, Ravi Kanth Vanapalli < vvnrk.vanapa...@gmail.com> wrote: > Sure Andreas. Thank you

Re: [strongSwan-dev] [strongSwan] initialzing EAP TLS peer with a different IDi than the IDi used in teh first IKE AUTH message

2016-10-11 Thread Andreas Steffen
Hi Ravi, why don't you use the eap_identity parameter? Regards Andreas On 10.10.2016 22:13, Ravi Kanth Vanapalli wrote: > Hi all, > > I have a situation wherein I need to alter the IDi slightly before the > EAP-TLS authentication proceeds. I.e IDi in the first IKE_AUTH message > should be