Hi,

> 1: Does Strongswan support Hybrid Authentication?
> 2: Does Strongswan support Hybrid Authentication with RSA?

Yes, we support Hybrid Mode in our experimental 5.0 pre-release.

> 3: What kind of configration does Strongswan look for when the client
> ask for "HybridInitRSA"?

>        left=linux.hogehoge.jp
>        leftcert=serverCert.pem
>        leftauth=xauth
>        right=%any
>        rightsourceip=192.168.246.230/24
>        rightcert=clientCert.pem
>        rightauth=pubkey

Left seems to be your responder. In Hybrid mode, the responder
authenticates with a public key, the initiator with XAuth only. Try it
the other way round:

   leftauth=pubkey
   rightauth=xauth

Regards
Martin


_______________________________________________
Users mailing list
[email protected]
https://lists.strongswan.org/mailman/listinfo/users

Reply via email to