pyikev2 icon indicating copy to clipboard operation
pyikev2 copied to clipboard

add sslscan proxy feature to test EAP-TLS over IKEv2

Open michael-dev opened this issue 1 year ago • 1 comments

This pull request adds

  • support for testing IKEv2 without actually configuring the kernel
  • parsing CERT, CERTREQ und EAP payloads
  • tunneling EAP-TLS to any TLS-Client, e.g. for sslscan
  • more DH transforms
  • ability to disable peer ID checking or using certificate fingerprinting instead of providing the public key
  • handle SHA-1 PayloadAUTH signatures
  • more flexibility in specifying the peer id

michael-dev avatar Mar 13 '24 08:03 michael-dev

Hi @michael-dev. I'm not actively workig on this project, but I'm curious about how you are using it. Is it educational?

alejandro-perez avatar Oct 09 '25 11:10 alejandro-perez