<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Tahoma
}
--></style>
</head>
<body class='hmmessage'><div dir='ltr'>
Hi Martin,<br><br>I've imported the CA certificate (right?) but it doesn't help. I generated the certificate using the instruction here:<br>http://wiki.strongswan.org/projects/strongswan/wiki/IOS_%28Apple%29<br>where it says "the serverAuth flag is not required for authentication with an iOS client, but will allow both iOS and <br><a href="http://wiki.strongswan.org/projects/strongswan/wiki/Win7CertReq" class="wiki-page">Windows 7</a> clients to authenticate using the same server certificate.".<br><br><div>> Subject: Re: [strongSwan] Strongswan+RADIUS secret code problem?<br>> From: martin@strongswan.org<br>> To: ttzforj@hotmail.com<br>> CC: users@lists.strongswan.org<br>> Date: Fri, 28 Oct 2011 17:56:35 +0200<br>> <br>> Hi,<br>> <br>> > Testing with Windows 7 IKEv2 client, it prompts "Error 13801: IKE<br>> > authentication credentials are unacceptable."<br>> <br>> > 10[ENC] generating IKE_AUTH response 1 [ IDr CERT AUTH EAP/REQ/MD5 ]<br>> <br>> Looks to me like the client does not accept the certificate it gets from<br>> the gateway. Does it have the properties outlined at [1]? Did you import<br>> the certificate or the CA in the Windows machine certificate store?<br>> <br>> Regards<br>> Martin<br>> <br>> [1]http://wiki.strongswan.org/projects/strongswan/wiki/Win7CertReq<br>> <br>> <br>> <br></div> </div></body>
</html>