search

strongswan / strongMan

Management UI for strongSwan
https://www.strongswan.org/
Other
114 stars 39 forks source link

Support for PSK #105

Closed sergeyspatar closed 5 years ago

sergeyspatar commented 5 years ago

Do you have plan to add support for authentication using pre-shared key?

tobiasbrunner commented 5 years ago

No. PSK-based authentication is potentially very dangerous because the client might send the hash of a weak password to a rogue VPN server. Thus we prefer EAP authentication where the server is first authenticated with a certificate and only afterwards the client uses its password.