[strongSwan] Load tester: Dump the on demand end entity node certificate in pem format

2014-02-09 Thread Narendra K A
Hi all, Am using load tester plugin. I need to check the end entity certificate contents (on demand certificate). So need the on demand certificate in .pem format. I tried adding the below code to the load_tester_creds.c file before destroy, but it is dumping the Issuer certificate in pem format.

[strongSwan] (no subject)

2014-02-09 Thread Dean Smith
I run a number of linux boxes on various VPS providers that use IPsec to connect tunnelled ip interfaces which then run OSPF. This setup has work fine for a number of years. Recently my systems seem to have upgraded from 5.0.4 to 5.1.1 and everything has stopped working, a few connection will

[strongSwan] On CHILD_SA expiry strongSwan Stack is not sending delete SAD till it receives INFO (Delete) confirmation from peer.

2014-02-09 Thread Sajal Malhotra
Hi, I have a setup where i have a Linux Box (with Strongswan running on it) connected to a Juniper Firewall Device. I have configured an IKE Tunnel with 3 CHILD SAs under it. Now this is what happens: 1. Linux Box has a faster CHILD SA rekey time so it always triggers rekey. 2. All Rekey's are