Re: [strongSwan] Query on client authentication using EAP-TLS

2015-02-23 Thread Akash Deep
Hi, In* ipsec.secrets* I have given the following key: :RSA fap-tls-10.prv 223456789123...@nai.epc.mnc213.mcc090.3gppnetwork.org %any : PSK abcd 223456789123...@nai.epc.mnc213.mcc090.3gppnetwork.org : EAP abcdedfgh Still facing the issue. Regards, Akash On Mon, Feb 23, 2015 at 6:36 PM, Mart

Re: [strongSwan] Query on client authentication using EAP-TLS

2015-02-23 Thread Martin Willi
Hi Akash, > no TLS peer certificate found for > '223456789123...@nai.epc.mnc213.mcc090.3gppnetwork.org', skipping client > authentication > EAP_TLS method failed As the TLS stack does not find a usable certificate with a private for your ID, it skips client authentication. Your server most like

[strongSwan] Query on client authentication using EAP-TLS

2015-02-23 Thread Akash Deep
Hi, I am trying to run EAP-TLS client authentication with diameter server. Strongswan is failing EAP-TLS method. *Strongswan log:* initiating IKE_SA init_nai_v4_v4_tls[1] to 122.122.122.120 generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) ] sending packet: from 157.121.121.1

Re: [strongSwan] query on client authentication using EAP-TLS

2012-09-19 Thread Martin Willi
Hi, > no TLS peer certificate found for > '01234...@ims.mnc212.mcc091.3gppnetwork.org', > skipping client authentication Your configuration uses this client ID, but you didn't configure a certificate. Try to define a certificate to use for TLS authentication using the "leftcert" option. This cer

[strongSwan] query on client authentication using EAP-TLS

2012-09-19 Thread Gurminder Singh
Hi All, I am trying to run EAP-TLS client authentication with radius server. Strongswan is failing EAP-TLS method. Find attached the deamon logs, ipsec.conf and ipsec.secrets. Kindly let me know if there is any configuration issue. Regards Gurminder