Re: iked without psk

2014-11-10 Thread Peter J. Philipp
On Mon, Nov 10, 2014 at 02:06:33PM +0100, Mike Belopuhov wrote: > hi, > > psk is now fixed in current. > > there are two other ways to authenticate hosts: rsa pubkeys (a recent > addition - works the same way as in isakmpd) and x.509 certificates. > both these options do not require any special

Re: iked without psk

2014-11-10 Thread Mike Belopuhov
On 6 November 2014 10:19, Peter J. Philipp wrote: > Hi, > > Since my upgrade on saturday to 5.6 my iked stopped working with psk. > I've disabled it by now but the config was something of the order of: > > ikev2 active esp from 192.168.179.1 to 192.168.179.10 psk "icutwithanulu!" > ikev2 active es

Re: iked without psk

2014-11-06 Thread Josh Grosse
On Thu, Nov 06, 2014 at 10:19:01AM +0100, Peter J. Philipp wrote: > Hi, > > Since my upgrade on saturday to 5.6 my iked stopped working with psk. I recently implemented a point-to-point solution, on -current, and while I had no intention of using psk in production I was unable to get it working i

iked without psk

2014-11-06 Thread Peter J. Philipp
Hi, Since my upgrade on saturday to 5.6 my iked stopped working with psk. I've disabled it by now but the config was something of the order of: ikev2 active esp from 192.168.179.1 to 192.168.179.10 psk "icutwithanulu!" ikev2 active esp from 192.168.179.10 to 192.168.179.1 psk "icutwithanulu!" An