Hi Michael,

> The peer_configs table [0] is the only place I see something close.  The 
> table has "auth_method", which defaults to 1. According to [1] this is 
> AUTH_CLASS_PUBKEY

"auth_method" only refers to the local authentication, the remote
authentication can't be configured.  Unless EAP is used, it seems, i.e.
if "eap_type" is set (on the other hand an EAP type can't be configured
for the local peer).  I guess the DB backend was mainly designed for VPN
gateways in remote access scenarios.

> As a follow up, I'd be curious how to specifiy RFC 7427 hash algorithms 
> in sql, if this is even possible.

No, that's currently not possible.

Regards,
Tobias

_______________________________________________
Users mailing list
[email protected]
https://lists.strongswan.org/mailman/listinfo/users

Reply via email to