[Openswan dev] RE: [Openswan Users] [PATCH] openswan-1.0.0-roadwarrior-psk-rsa.diff

[Trevor Benson]

> -----BEGIN PGP SIGNED MESSAGE-----
> 
> 
> >>>>> "Ken" == Ken Bantoft <ken at xelerance.com> writes:
>     >> I've made a patch to suppress one of pluto's current limitation
:
>     >> allow usage of both PSK and RSA authentication for
roadwarriors.
>     >>
>     >> Comments are appreciated.
>     >>
>     >> Patch is against Openswan 1.0.0 and is available at
>     >> http://open-source.arkoon.net/openswan.php
>     >>
>     >> --
>     >> Mathieu Lafon - Arkoon Network Security
> 
>     Ken> Thanks!  I know this has annoyed me personally in the past,
so
>     Ken> this is a welcome feature.  I've applied this to 1.x CVS, so
it
>     Ken> will appear in 1.0.2 in a few days after some testing.
> 
>   uh, how does one use two authentication modes for IKE?
>   Only one can be selected at a time.

I think that he enabled both authentication modes to be used
individually. So you can now enable one or the other, not both at the
same time.

Is this accurate?

Trevor

> - --
> ]       ON HUMILITY: to err is human. To moo, bovine.           |
> firewalls  [
> ]   Michael Richardson,    Xelerance Corporation, Ottawa, ON    |net
> architect[
> ] mcr at xelerance.com      http://www.sandelman.ottawa.on.ca/mcr/
|device
> driver[
> ] panic("Just another Debian GNU/Linux using, kernel hacking, security
> guy"); [
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.2 (GNU/Linux)
> Comment: Finger me for keys
> 
> iQCVAwUBQFJ0moqHRg3pndX9AQGiiAQAwTJJbh5mbhWLVZoiFWNAymusgxRJX3DR
> svYRT853ZX/13bcnNylISinK5OSiX1dU0NMOgmJzElTczzIq6DkH8RD8frsbk8/E
> xCyXQl16nlsqWR/QzI53jF3gEoeU1v/gGxu9cnLL8FX/CaN/drWrTxRd+WOnClWq
> 0S85Ik59OUs=
> =N7F4
> -----END PGP SIGNATURE-----