Re: Need review of adding X.509 certs to Strongswan

2021-01-22 Thread Philip Prindeville
I'll try splitting it into smaller pieces as well. https://github.com/openwrt/packages/pull/14535 > On Jan 22, 2021, at 11:47 AM, Philip Prindeville > wrote: > > Hi, > > I posted the following PR some time ago (late November) and it's languishing: > > https://github.com/openwrt/packages/pul

Need review of adding X.509 certs to Strongswan

2021-01-22 Thread Philip Prindeville
Hi, I posted the following PR some time ago (late November) and it's languishing: https://github.com/openwrt/packages/pull/14028 Can I get some reviews of it? X.509 authentication is a more attractive alternative to simple PSK authentication (more entropy, less susceptible to dictionary attack