Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enable MSCHAPv2 with StrongSwan. #30642

Merged
merged 1 commit into from May 3, 2021
Merged

Enable MSCHAPv2 with StrongSwan. #30642

merged 1 commit into from May 3, 2021

Conversation

dstolfa
Copy link
Contributor

@dstolfa dstolfa commented May 3, 2021

StrongSwan on Void currently has issues with EAP-MSCHAPv2 in different ways.

(1) eap-identity needs to be enabled in order for config files with eap_identity=%any and similar lines to work (you essentially end up with EAP_NAK when EAP_IDENTITY is requested);
(2) eap-mschapv2 requires md4 to be enabled as a plugin
(3) eap-dynamic might be required on some setups, so this pull request enables it to avoid issues in the future.

General

Have the results of the proposed changes been tested?

  • I use the packages affected by the proposed changes on a regular basis and confirm this PR works for me
  • I generally don't use the affected packages but briefly tested this PR

Does it build and run successfully?

(Please choose at least one native build and, if supported, at least one cross build. More are better.)

  • I built this PR locally for my native architecture, (ARCH-LIBC)
  • I built this PR locally for these architectures (if supported. mark crossbuilds):
    • aarch64-musl
    • armv7l
    • armv6l-musl

I have not tested if it runs on any of the cross builds, I simply tested that it indeed does build.

According to the documentation [1], StrongSwan needs --enable-md4 for
eap-mschapv2 to work. Moreover, many EAP-MSCHAPv2 based VPNs require
--enable-eap-identity and --enable-eap-dynamic to correctly work. This
commit simply adds these flags in the StrongSwan `template` file.

https://wiki.strongswan.org/projects/strongswan/wiki/AutoConf
@ericonr ericonr merged commit 81a158d into void-linux:master May 3, 2021
@github-actions github-actions bot locked as resolved and limited conversation to collaborators Aug 1, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants