Re: [strongSwan] Password protection on private key using PKI tool

2020-03-28 Thread driesm.michiels
Andreas, Yea that helps thanks! Do you think this might be implemented in the PKI tool (pki --gen) at one point? Would be nice to get a coherent experience using the PKI tool. :-) Mvg, Dries > -Original Message- > From: Andreas Steffen > Sent: zaterdag 28 maart 2020 8:59 > To:

Re: [strongSwan] Password protection on private key using PKI tool

2020-03-28 Thread Andreas Steffen
Hi Dries, no the strongSwan pki tool does not support password protection of private keys. But after generating a key with e.g. pki --gen --type rsa --size 3072 --outform pem > key.pem you can protect it with a password using openssl: openssl rsa -in key.pem -aes256 -out key.pem Enter

[strongSwan] Password protection on private key using PKI tool

2020-03-28 Thread driesm.michiels
Hi Strongswan Mail list, This is a quick question regarding certificates/keys created with the PKI tool. Does the PKI tool currently support password protection of private keys? This would mean that regardless of the key install on a client one still needs the password to use them.

[strongSwan] What am I gonna do?Strongswan cannot recognize the custom af_alg algorithm.

2020-03-28 Thread huangjin...@mail.tsinghua.edu.cn
Hello. I want to use strongswan to call my own implementation of the af_alg algorithm. Use of test scenario is af-alg/rw-cert: https://strongswan.org/testresults.html But every time the client connects, the moon gateway always prompts: ``` 09[NET] received packet: from 192.168.0.100[4500] to