[Swan] disconnect after 3600s
Kontakt
kontakt at smieci.de
Mon Jan 25 15:15:32 UTC 2021
Hello,
what about my case? ;)
I have no certificate and also disconnects - I have PSK.
pon., 25 sty 2021 o 16:05 Paul Wouters <paul at nohats.ca> napisał(a):
> On Mon, 25 Jan 2021, António Silva wrote:
>
> > I’m using PSK.
>
> > Putting extra debug now.
>
> If you are using PSK then the error CERTIFICATE_UNAVAILABLE from the
> remote peer makes no sense whatsoevef.
>
> RFC 2408 states:
>
> 3. Process the Certificate Request. If a requested Certificate Type
> with the specified Certificate Authority is not available, then
> the payload is discarded and the following actions are taken:
>
> (a) The event, CERTIFICATE-UNAVAILABLE, MAY be logged in the
> appropriate system audit file.
>
> (b) An Informational Exchange with a Notification payload
> containing the CERTIFICATE-UNAVAILABLE message type MAY be
> sent to the transmitting entity. This action is dictated by
> a system security policy.
>
>
> I guess your debugging will show if libreswan sent any CERT or CERTREQ
> payload that might have confused the other end ?
>
> Paul
> _______________________________________________
> Swan mailing list
> Swan at lists.libreswan.org
> https://lists.libreswan.org/mailman/listinfo/swan
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.libreswan.org/pipermail/swan/attachments/20210125/a997f5c4/attachment.html>
More information about the Swan
mailing list