[Swan] Swan Digest, Vol 3, Issue 34

Philippe Vouters philippe.vouters at laposte.net
Mon Mar 25 17:33:48 EET 2013


Pavel,

Attempt to deeper observe whether Android or IOS would not eventually 
request for Hybrid mode. A Libreswan source good reading likely emitting 
the message you read would remain routine parse_isakmp_sa_body in 
./programs/pluto/spdb_v1_struct.c

Philippe Vouters (Fontainebleau/France)
URL: http://vouters.dyndns.org/
SIP: sip:Vouters at sip.linphone.org

Le 25/03/2013 16:03, Paul Wouters a écrit :
> On Mon, 25 Mar 2013, Pavel Kopchyk wrote:
>
>> My test case is - Linux, Windows and Mac OS clients use certificates,
>> mobile clients (Android and IOS) use a PSK.
>>
>> If I am connected from Linux or Windows system using a certificate,
>> then I can't connect with a PSK from Android or IOS.
>>
>>
>> Is it possible to implement this configuration?
>
> Why not use certs with iOS and Android as well? iOS can do "Cisco IPsec
> mode" with certificates, which in Android is called "RSA XAUTH".
>
> Paul
> _______________________________________________
> Swan mailing list
> Swan at lists.libreswan.org
> https://lists.libreswan.org/mailman/listinfo/swan
>



More information about the Swan mailing list