Re: [Swan] cannot locate my private key for RSA Signature

On Sun, 18 Feb 2018, klwilson...@comcast.net wrote: Paul, I tried ran the attached reset script to reconfigure the environment. Hopefully there is absolutely no ambiguity in what I am attempting to do or use in my configuration. I also attached the host_to_host.conf file that results from

Re: [Swan] What ways're possible for bringing a VTI up?

After a few days of testing, I think you're perfectly right Paul. Indeed, "auto" works as expected. With little exemption of VTI behavior (on which I'll elaborate a little bit further), Libreswan indeed works like a charm, PFS being the real culprit. As a programmer, I understand that we indeed

[Swan-commit] Changes to ref refs/heads/master

New commits: commit 2d5b488f1793a4cbcd72f0a479c3fa88b77c5ac2 Author: Paul Wouters Date: Mon Feb 19 18:22:49 2018 -0500 pluto: ignore -Wformat-truncation in linux_audit.c We want to truncate the message if it is too long. gcc should let us do that.

[Swan-commit] Changes to ref refs/heads/master

New commits: commit daf3c16bfd8b2747271d68b2c7f0072b54800d02 Author: Vukasin Date: Mon Feb 19 23:32:16 2018 -0500 documentation: manpages: small addition regarding PPK Signed-off-by: Paul Wouters

[Swan-commit] Changes to ref refs/heads/master

New commits: commit 3938bdb193ea2bf329fba05ca762add9fef4cdc3 Author: Paul Wouters Date: Mon Feb 19 15:47:05 2018 -0500 documentation: update installed ipsec.conf - minor cleanup - add pointer for use with crypto-policies package - commented item for

[Swan-commit] Changes to ref refs/heads/master

New commits: commit 6648613fbebbc72a41780a037bd4165fba691847 Author: Andrew Cagney Date: Sat Feb 17 18:49:47 2018 -0500 state: split duplicate_state() into IKEv1 and IKEv2 variants Setting things up for IKEv2 doing stuff different to IKEv1; start by explictly