Public bug reported:
Based on a discussion I had related to the zesty merge of latest
Strongswan I got this info:
The only (small) problem I have with Strongswan in Xenial is that what's
installed by default doesn't provide enough features to make a good
roadwarrior client compatible with VPN targeting OSX/iOS, Windows and
Android clients.
2 plugins are missing from the default install:
1) eap-mschapv2 is required on the client side to connect to VPN
concentrators configured for Windows 7+ and modern OSX/iOS using IKEv2.
In such scenario, the VPN concentrator identifies itself with a public
key and asks the client to authenticate with MSCHAPv2.
2) xauth-generic is required on the client side to connect to VPN
concentrators configured for Android and older OSX/iOS using IKEv1 and
XAUTH. In such scenario, the VPN concentrator identifies itself with a
public key or a shared secret and asks the client to authenticate with a
XAUTH password.
Currently in Xenial, installing Strongswan only suggests
libcharon-extra-plugins. That seems reasonable since
libcharon-extra-plugins is pretty big on it's own and pulls in
strongswan-tnc-base. Maybe the TNC stuff could be made completely
independent and then making libcharon-extra-plugins a recommends would
be doable?
Definitely worth to look into it, so I opened this bug to track it.
** Affects: strongswan (Ubuntu)
Importance: Medium
Status: Triaged
** Changed in: strongswan (Ubuntu)
Status: New => Triaged
** Changed in: strongswan (Ubuntu)
Importance: Undecided => Medium
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1640826
Title:
please evaluate enabling more plugins to make strongswan more useful
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/strongswan/+bug/1640826/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
