[Swan] disconnect after 3600s

Kontakt kontakt at smieci.de
Mon Jan 25 15:15:32 UTC 2021


Hello,
what about my case? ;)
I have no certificate and also disconnects - I have PSK.

pon., 25 sty 2021 o 16:05 Paul Wouters <paul at nohats.ca> napisał(a):

> On Mon, 25 Jan 2021, António Silva wrote:
>
> > I’m using PSK.
>
> > Putting extra debug now.
>
> If you are using PSK then the error CERTIFICATE_UNAVAILABLE from the
> remote peer makes no sense whatsoevef.
>
> RFC 2408 states:
>
>     3.  Process the Certificate Request.  If a requested Certificate Type
>         with the specified Certificate Authority is not available, then
>         the payload is discarded and the following actions are taken:
>
>         (a)  The event, CERTIFICATE-UNAVAILABLE, MAY be logged in the
>              appropriate system audit file.
>
>         (b)  An Informational Exchange with a Notification payload
>              containing the CERTIFICATE-UNAVAILABLE message type MAY be
>              sent to the transmitting entity.  This action is dictated by
>              a system security policy.
>
>
> I guess your debugging will show if libreswan sent any CERT or CERTREQ
> payload that might have confused the other end ?
>
> Paul
> _______________________________________________
> Swan mailing list
> Swan at lists.libreswan.org
> https://lists.libreswan.org/mailman/listinfo/swan
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.libreswan.org/pipermail/swan/attachments/20210125/a997f5c4/attachment.html>


More information about the Swan mailing list