New answers tagged

1

The article provides basic principles for VPN and network design, and then gives fixed sets of encryption options without further explaining what their features are. Both PRIME (IKEv2) and foundation (IKEv1) profiles seem to use Diffie-Hellman Groups for deriving key material, providing perfect forward secrecy PFS. Explaining this or the other choices made ...


0

The cert_policy constraint (swanctl.conf) enforces specific OIDs in a certificate's certificate policies extension, so that might not be what you are looking for. As for matching identities with wildcards, strongSwan currently only allows ignoring complete RDNs (not parts of them), for instance, C=CH, O=strongSwan, CN=* (multiple RDNs may be ignored). With ...


Top 50 recent answers are included