<div dir="ltr"><div><div><div><div>Hello,<br></div>I am trying to configure a roadwarrior system between Linux Debian and Windows XP.<br><br></div>I configure the gateway like in the example but it give me this error:<br><br>
Mar 26 14:06:51 debian charon: 12[IKE] no trusted RSA public key found for '<a href="mailto:diego@ipsec.org">diego@ipsec.org</a>'<br>Mar 26 14:06:51 debian charon: 12[CFG] no alternative config found<br>Mar 26 14:06:51 debian charon: 12[ENC] generating INFORMATIONAL_V1 request 2480925513 [ HASH N(AUTH_FAILED) ]<br>
<br></div>How can I solve it?<br></div>Thank you very much.<br><br><br clear="all"><div><div><div><div><div><br>LOG FILE<br><br>Mar 26 14:06:40 debian charon: 00[DMN] signal of type SIGINT received. Shutting down<br>Mar 26 14:06:43 debian charon: 00[DMN] Starting IKE charon daemon (strongSwan 5.0.2, Linux 2.6.32-5-amd64, x86_64)<br>
Mar 26 14:06:43 debian charon: 00[CFG] loading ca certificates from '/etc/ipsec.d/cacerts'<br>Mar 26 14:06:43 debian charon: 00[CFG] loaded ca certificate "C=UK, ST=Beds, L=Luton, O=Beds, OU=IT, CN=Beds CA, N=IPSec, E=<a href="mailto:root@ipsec.com">root@ipsec.com</a>" from '/etc/ipsec.d/cacerts/ca.crt'<br>
Mar 26 14:06:43 debian charon: 00[CFG] loading aa certificates from '/etc/ipsec.d/aacerts'<br>Mar 26 14:06:43 debian charon: 00[CFG] loading ocsp signer certificates from '/etc/ipsec.d/ocspcerts'<br>Mar 26 14:06:43 debian charon: 00[CFG] loading attribute certificates from '/etc/ipsec.d/acerts'<br>
Mar 26 14:06:43 debian charon: 00[CFG] loading crls from '/etc/ipsec.d/crls'<br>Mar 26 14:06:43 debian charon: 00[CFG] loading secrets from '/etc/ipsec.secrets'<br>Mar 26 14:06:43 debian charon: 00[CFG] loaded RSA private key from '/etc/ipsec.d/private/gateway.key'<br>
Mar 26 14:06:43 debian charon: 00[DMN] loaded plugins: charon curl test-vectors aes des sha1 sha2 md5 pem pkcs1 pkcs8 gmp random nonce x509 revocation hmac xcbc cmac ctr ccm gcm stroke kernel-netlink socket-default updown<br>
Mar 26 14:06:43 debian charon: 00[JOB] spawning 16 worker threads<br>Mar 26 14:06:43 debian charon: 08[CFG] received stroke: add connection 'rw'<br>Mar 26 14:06:43 debian charon: 08[CFG] loaded certificate "C=UK, ST=Beds, L=Luton, O=Beds, OU=IT, CN=gateway, N=IPSec, E=<a href="mailto:root@ipsec.com">root@ipsec.com</a>" from 'gateway.crt'<br>
Mar 26 14:06:43 debian charon: 08[CFG] id '<a href="http://gw.ipsec.com">gw.ipsec.com</a>' not confirmed by certificate, defaulting to 'C=UK, ST=Beds, L=Luton, O=Beds, OU=IT, CN=gateway, N=IPSec, E=<a href="mailto:root@ipsec.com">root@ipsec.com</a>'<br>
Mar 26 14:06:43 debian charon: 08[CFG] added configuration 'rw'<br>Mar 26 14:06:51 debian charon: 10[NET] received packet: from 172.16.151.141[500] to 172.16.151.100[500] (3756 bytes)<br>Mar 26 14:06:51 debian charon: 10[ENC] parsed ID_PROT request 0 [ SA V V V V V V V V V V V ]<br>
Mar 26 14:06:51 debian charon: 10[IKE] received draft-ietf-ipsec-nat-t-ike-00 vendor ID<br>Mar 26 14:06:51 debian charon: 10[ENC] received unknown vendor ID: 16:f6:ca:16:e4:a4:06:6d:83:82:1a:0f:0a:ea:a8:62<br>Mar 26 14:06:51 debian charon: 10[IKE] received draft-ietf-ipsec-nat-t-ike-02\n vendor ID<br>
Mar 26 14:06:51 debian charon: 10[IKE] received draft-ietf-ipsec-nat-t-ike-03 vendor ID<br>Mar 26 14:06:51 debian charon: 10[IKE] received NAT-T (RFC 3947) vendor ID<br>Mar 26 14:06:51 debian charon: 10[IKE] received FRAGMENTATION vendor ID<br>
Mar 26 14:06:51 debian charon: 10[IKE] received DPD vendor ID<br>Mar 26 14:06:51 debian charon: 10[ENC] received unknown vendor ID: f1:4b:94:b7:bf:f1:fe:f0:27:73:b8:c4:9f:ed:ed:26<br>Mar 26 14:06:51 debian charon: 10[ENC] received unknown vendor ID: 16:6f:93:2d:55:eb:64:d8:e4:df:4f:d3:7e:23:13:f0:d0:fd:84:51<br>
Mar 26 14:06:51 debian charon: 10[ENC] received unknown vendor ID: 84:04:ad:f9:cd:a0:57:60:b2:ca:29:2e:4b:ff:53:7b<br>Mar 26 14:06:51 debian charon: 10[IKE] received Cisco Unity vendor ID<br>Mar 26 14:06:51 debian charon: 10[IKE] 172.16.151.141 is initiating a Main Mode IKE_SA<br>
Mar 26 14:06:51 debian charon: 10[ENC] generating ID_PROT response 0 [ SA V V V ]<br>Mar 26 14:06:51 debian charon: 10[NET] sending packet: from 172.16.151.100[500] to 172.16.151.141[500] (140 bytes)<br>Mar 26 14:06:51 debian charon: 11[NET] received packet: from 172.16.151.141[500] to 172.16.151.100[500] (365 bytes)<br>
Mar 26 14:06:51 debian charon: 11[ENC] parsed ID_PROT request 0 [ KE No CERTREQ NAT-D NAT-D ]<br>Mar 26 14:06:51 debian charon: 11[IKE] ignoring certificate request without data<br>Mar 26 14:06:51 debian charon: 11[IKE] sending cert request for "C=UK, ST=Beds, L=Luton, O=Beds, OU=IT, CN=Beds CA, N=IPSec, E=<a href="mailto:root@ipsec.com">root@ipsec.com</a>"<br>
Mar 26 14:06:51 debian charon: 11[ENC] generating ID_PROT response 0 [ KE No CERTREQ NAT-D NAT-D ]<br>Mar 26 14:06:51 debian charon: 11[NET] sending packet: from 172.16.151.100[500] to 172.16.151.141[500] (517 bytes)<br>Mar 26 14:06:51 debian charon: 12[NET] received packet: from 172.16.151.141[500] to 172.16.151.100[500] (1564 bytes)<br>
Mar 26 14:06:51 debian charon: 12[ENC] parsed ID_PROT request 0 [ ID CERT SIG ]<br>Mar 26 14:06:51 debian charon: 12[IKE] received end entity cert "C=UK, ST=Beds, L=Luton, O=Beds, OU=IT, CN=client, N=IPSec, E=<a href="mailto:root@ipsec.com">root@ipsec.com</a>"<br>
Mar 26 14:06:51 debian charon: 12[CFG] looking for RSA signature peer configs matching 172.16.151.100...172.16.151.141[<a href="mailto:diego@ipsec.org">diego@ipsec.org</a>]<br>Mar 26 14:06:51 debian charon: 12[CFG] selected peer config "rw"<br>
Mar 26 14:06:51 debian charon: 12[IKE] no trusted RSA public key found for '<a href="mailto:diego@ipsec.org">diego@ipsec.org</a>'<br>Mar 26 14:06:51 debian charon: 12[CFG] no alternative config found<br>Mar 26 14:06:51 debian charon: 12[ENC] generating INFORMATIONAL_V1 request 2480925513 [ HASH N(AUTH_FAILED) ]<br>
Mar 26 14:06:51 debian charon: 12[NET] sending packet: from 172.16.151.100[500] to 172.16.151.141[500] (92 bytes)<br>Mar 26 14:07:18 debian mpt-statusd: detected non-optimal RAID status<br><br><br><br><br><br><br><br><br>
<br><br><br><br>-- <br><a href="http://www.2dd.it" target="_blank">http://www.2dd.it</a>
</div></div></div></div></div></div>