[strongSwan] Wilcard matching in ipsec.conf rightid param

2011-03-21 Thread Graham Hudspith
Dear All, I wonder if anyone can help me with a strongSwan config issue ? I'm trying to configure a SeGW running strongSwan (v4.5.1) to accept incoming tunnel attempts and assign them to different virtual address pools. I thought the easiest way to do this was to create different config

Re: [strongSwan] Wilcard matching in ipsec.conf rightid param

2011-03-21 Thread Martin Willi
Hi Graham, rightid=*@foo.abc*.def235.bar.org Wildcard matching for email addresses currently does not support asterisks at arbitrary positions. Only a leading one is used in the matching function. Extending the RFC822_ADDR matching function to your needs should be not to difficult,

Re: [strongSwan] PSK_with_ideal_keys, charon_crashes_with_8m_keylife_?

2011-03-21 Thread Martin Willi
Hi Nikos, How could I take advantage of the given ideal keys ? Is it possible to use the DH derived keys as an index to the pool of those ideal keys? The IKEv2 protocol uses the DH exchange as a base to derive the cryptographic keys. With PSK authentication, the PSKs are not part of the key

[strongSwan] Strongswan on android

2011-03-21 Thread antoine . david
Hi, As part of my internship I am trying to build strongswan on Android 2.2. I have followed these steps using the special HOWTO for android provided on the strongswan website: -I have downloaded the android 2.2.1 sources using repo -I have built the sources (without strongswan) using the

[strongSwan] Dynamic addition/deletion of tunnel configuration in StrongSwan

2011-03-21 Thread Janis Dzerve
Hi, I want to create a vpn hub with dynamic config: - When new tunnel config is added: add a conn entry and be ready to establish a tunnel when initiated by peer. - When tunnel config is deleted: delete connection config and break down any tunnels established associated with the connection.