<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><div><span>Hi Tobias, </span></div><div><span><br></span></div><div><span>I finally get my tunnel to work. To me the key was to make sure the SAN of the server side cert has to be he host address of the vpn server, so the configuration can match. </span></div><div><span><br></span></div><div>many thanks to you and others for the help. </div><div><br></div><div>-zhen </div><div><br></div><div><br></div> <div style="font-size: 12pt; font-family: 'times new roman', 'new york', times, serif; "> <div style="font-size: 12pt; font-family: 'times new roman', 'new york', times, serif; "> <font size="2" face="Arial"> <hr size="1"> <b><span style="font-weight:bold;">From:</span></b> Tobias Brunner <tobias@strongswan.org><br> <b><span style="font-weight: bold;">To:</span></b> zhen chen <zchen2711@yahoo.com>
<br><b><span style="font-weight: bold;">Cc:</span></b> "users@lists.strongswan.org" <users@lists.strongswan.org> <br> <b><span style="font-weight: bold;">Sent:</span></b> Tuesday, November 22, 2011 8:07 AM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: [strongSwan] Android/Stongswan Integration<br> </font> <br>
> 1. Doesn't seem that Charon loads the the ipsec.conf file.<br><br>What makes you say so? Do you get any errors? Where did you put the<br>file? Can you verify that it's there when you log into the emulator<br>with 'adb shell'? And is that path equal to what you configured in the<br>top <a target="_blank" href="http://Android.mk">Android.mk</a> file as strongswan_CONFDIR?<br><br>> 2. If I use ipsec up to force the starter to bring up the conn, ipsec up<br>> gave some error like " unnamed error ] ] ]". <br><br>The ipsec script is not really working on Android as there is no 'test'<br>or '[' command, of which the script makes use extensively. Simply use<br>starter and stroke directly. Use 'starter' to start starter and charon<br>and use 'stroke up' to start a connection (to terminate them just kill<br>starter). Have a look at how the script uses starter and stroke to<br>implement individual
commands.<br><br>Regards,<br>Tobias<br><br><br> </div> </div> </div></body></html>