Blob Blame History Raw
Basic pluto with IKEv2 using X.509 on the responder (east), and Strongswan on
the initiator (west).

This is the reverse test of interop-ikev2-strongswan-04-x509-responder

This is the basic test for Authentication method as Digital Signatures as 
specified in RFC 7427. Currently supported for RSA-PSS.

This includes a new notification of type SIGNATURE_HASH_ALGORITHMS.

Authentication is successful with rsa-sha2_384

Caveat: strongswan with authby=rsasig accepts RSA-PSS SHA2 signatures,
but responds with RSAv1.5 SHA2 signatures, which we refuse. According
to RFC 7427/8247 RSA-PSS SHA2 is MUST and RSAv1.5 SHA2 is MAY implement.
Workaround is to explicitly configure strongswan for RSA-PSS