Return to description.txt CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / strongswan / testing / tests / ikev2 / critical-extension

Annotation of embedaddon/strongswan/testing/tests/ikev2/critical-extension/description.txt, revision 1.1.1.1

1.1       misho       1: A connection between the subnets behind the gateways <b>moon</b> and <b>sun</b> is set up.
                      2: The authentication is based on <b>X.509 certificates</b> which contain a <b>critical</b> but
                      3: unsupported 'strongSwan' extension. Whereas <b>moon</b> ignores unsupported critical 
                      4: extensions by setting <b>libstrongswan.x509.enforce_critical = no</b> in strongswan.conf,
                      5: <b>sun</b> discards such certificates and aborts the connection setup.