<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/4.6.6">
</HEAD>
<BODY>
Simple setup...shown below:<BR>
Server:<BR>
<TT>conn rw</TT><BR>
<TT> leftsubnet=192.168.1.0/24</TT><BR>
<TT> leftcert=StrongSwanHostCert.pem</TT><BR>
<TT> right=%any</TT><BR>
<TT> rightsourceip=192.168.1.11</TT><BR>
<TT> auto=add</TT><BR>
<BR>
Client<BR>
<TT> conn rw</TT><BR>
<TT> leftsourceip=192.168.1.11</TT><BR>
<TT> leftcert=mycert.pem</TT><BR>
<TT> right=ext.ip</TT><BR>
<TT> rightsubnet=.192.168.1.0/24</TT><BR>
<TT> rightid="C=CH, O=strongswan, CN=my.server.name</TT><BR>
<TT> a</TT>uto=add<BR>
<BR>
This is literally it....really easy, no internet required, just one client ever to connect, me. Here's the log with error...again, this was working just fine a month ago...no clue what happened besides package updates to Ubuntu 14. Thanks for any help:<BR>
<BR>
<TT>Mar 1 17:45:22 gateway charon: 00[DMN] Starting IKE charon daemon (strongSwan 5.1.2, Linux 3.13.0-46-generic, i686)</TT><BR>
<TT>Mar 1 17:45:22 gateway charon: 00[LIB] Padlock not found, CPU is GenuineIntel</TT><BR>
<TT>Mar 1 17:45:22 gateway charon: 00[LIB] plugin 'padlock': failed to load - padlock_plugin_create returned NULL</TT><BR>
<TT>Mar 1 17:45:23 gateway charon: 00[CFG] loading ca certificates from '/etc/ipsec.d/cacerts'</TT><BR>
<TT>Mar 1 17:45:23 gateway charon: 00[CFG] loaded ca certificate "C=CH, O=strongSwan, CN=strongSwan Root CA" from '/etc/ipsec.d/cacerts/StrongSwanCACert.pem'</TT><BR>
<TT>Mar 1 17:45:23 gateway charon: 00[CFG] loading aa certificates from '/etc/ipsec.d/aacerts'</TT><BR>
<TT>Mar 1 17:45:23 gateway charon: 00[CFG] loading ocsp signer certificates from '/etc/ipsec.d/ocspcerts'</TT><BR>
<TT>Mar 1 17:45:23 gateway charon: 00[CFG] loading attribute certificates from '/etc/ipsec.d/acerts'</TT><BR>
<TT>Mar 1 17:45:23 gateway charon: 00[CFG] loading crls from '/etc/ipsec.d/crls'</TT><BR>
<TT>Mar 1 17:45:23 gateway charon: 00[CFG] loading secrets from '/etc/ipsec.secrets'</TT><BR>
<TT>Mar 1 17:45:23 gateway charon: 00[CFG] loaded RSA private key from '/etc/ipsec.d/private/StrongSwanHostKey.pem'</TT><BR>
<TT>Mar 1 17:45:23 gateway charon: 00[LIB] loaded plugins: charon test-vectors aes rc2 sha1 sha2 md4 md5 random nonce x509 revocation constraints pkcs1 pkcs7 pkcs8 pkcs12 pem openssl xcbc cmac hmac ctr ccm gcm attr kernel-netlink resolve socket-default stroke updown eap-identity xauth-generic addrblock</TT><BR>
<TT>Mar 1 17:45:23 gateway charon: 00[LIB] unable to load 5 plugin features (5 due to unmet dependencies)</TT><BR>
<TT>Mar 1 17:45:23 gateway charon: 00[LIB] dropped capabilities, running as uid 0, gid 0</TT><BR>
<TT>Mar 1 17:45:23 gateway charon: 00[JOB] spawning 16 worker threads</TT><BR>
<TT>Mar 1 17:45:23 gateway ipsec_starter[598]: charon (599) started after 740 ms</TT><BR>
<TT>Mar 1 17:45:23 gateway charon: 06[CFG] received stroke: add connection 'rw'</TT><BR>
<TT>Mar 1 17:45:23 gateway charon: 06[CFG] left nor right host is our side, assuming left=local</TT><BR>
<TT>Mar 1 17:45:23 gateway charon: 06[CFG] adding virtual IP address pool 192.168.1.11</TT><BR>
<TT>Mar 1 17:45:23 gateway charon: 06[CFG] loaded certificate "C=CH, O=strongSwan, CN=ns1.my.domain" from 'StrongSwanHostCert.pem'</TT><BR>
<TT>Mar 1 17:45:23 gateway charon: 06[CFG] id '%any' not confirmed by certificate, defaulting to 'C=CH, O=strongSwan, CN=ns1.my.domain'</TT><BR>
<TT>Mar 1 17:45:23 gateway charon: 06[CFG] added configuration 'rw'</TT><BR>
<TT>Mar 1 17:46:17 gateway charon: 05[NET] received packet: from client.external.ip[31551] to server.external.ip[500] (1212 bytes)</TT><BR>
<TT>Mar 1 17:46:17 gateway charon: 05[ENC] parsed IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) ]</TT><BR>
<TT>Mar 1 17:46:17 gateway charon: 05[IKE] client.external.ip is initiating an IKE_SA</TT><BR>
<TT>Mar 1 17:46:17 gateway charon: 05[IKE] client.external.ip is initiating an IKE_SA</TT><BR>
<TT>Mar 1 17:46:17 gateway charon: 05[IKE] remote host is behind NAT</TT><BR>
<TT>Mar 1 17:46:17 gateway charon: 05[IKE] sending cert request for "C=CH, O=strongSwan, CN=strongSwan Root CA"</TT><BR>
<TT>Mar 1 17:46:17 gateway charon: 05[ENC] generating IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) CERTREQ N(MULT_AUTH) ]</TT><BR>
<TT>Mar 1 17:46:17 gateway charon: 05[NET] sending packet: from server.external.ip[500] to client.external.ip[31551] (465 bytes)</TT><BR>
<TT>Mar 1 17:46:17 gateway charon: 08[NET] received packet: from client.external.ip[15546] to server.external.ip[4500] (1916 bytes)</TT><BR>
<TT>Mar 1 17:46:17 gateway charon: 08[ENC] parsed IKE_AUTH request 1 [ IDi CERT N(INIT_CONTACT) CERTREQ IDr AUTH CPRQ(ADDR DNS) SA TSi TSr N(MOBIKE_SUP) N(ADD_4_ADDR) N(MULT_AUTH) N(EAP_ONLY) ]</TT><BR>
<TT>Mar 1 17:46:17 gateway charon: 08[IKE] received cert request for "C=CH, O=strongSwan, CN=strongSwan Root CA"</TT><BR>
<TT>Mar 1 17:46:17 gateway charon: 08[IKE] received end entity cert "C=CH, O=strongSwan, CN=me@my.domain"</TT><BR>
<TT>Mar 1 17:46:17 gateway charon: 08[CFG] looking for peer configs matching server.external.ip[C=CH, O=strongSwan, CN=ns1.my.domain]...client.external.ip[C=CH, O=strongSwan, CN=me@my.domain]</TT><BR>
<TT>Mar 1 17:46:17 gateway charon: 08[CFG] selected peer config 'rw'</TT><BR>
<TT>Mar 1 17:46:17 gateway charon: 08[CFG] using certificate "C=CH, O=strongSwan, CN=me@my.domain"</TT><BR>
<TT>Mar 1 17:46:17 gateway charon: 08[CFG] using trusted ca certificate "C=CH, O=strongSwan, CN=strongSwan Root CA"</TT><BR>
<TT>Mar 1 17:46:17 gateway charon: 08[CFG] checking certificate status of "C=CH, O=strongSwan, CN=me@my.domain"</TT><BR>
<TT>Mar 1 17:46:17 gateway charon: 08[CFG] certificate status is not available</TT><BR>
<TT>Mar 1 17:46:17 gateway charon: 08[CFG] reached self-signed root ca with a path length of 0</TT><BR>
<TT>Mar 1 17:46:17 gateway charon: 08[IKE] authentication of 'C=CH, O=strongSwan, CN=me@my.domain' with RSA signature successful</TT><BR>
<TT>Mar 1 17:46:17 gateway charon: 08[IKE] peer supports MOBIKE</TT><BR>
<TT>Mar 1 17:46:17 gateway charon: 08[IKE] authentication of 'C=CH, O=strongSwan, CN=ns1.my.domain' (myself) with RSA signature successful</TT><BR>
<TT>Mar 1 17:46:17 gateway charon: 08[IKE] IKE_SA rw[1] established between server.external.ip[C=CH, O=strongSwan, CN=ns1.my.domain]...client.external.ip[C=CH, O=strongSwan, CN=me@my.domain]</TT><BR>
<TT>Mar 1 17:46:17 gateway charon: 08[IKE] IKE_SA rw[1] established between server.external.ip[C=CH, O=strongSwan, CN=ns1.my.domain]...client.external.ip[C=CH, O=strongSwan, CN=me@my.domain]</TT><BR>
<TT>Mar 1 17:46:17 gateway charon: 08[IKE] scheduling reauthentication in 9739s</TT><BR>
<TT>Mar 1 17:46:17 gateway charon: 08[IKE] maximum IKE_SA lifetime 10279s</TT><BR>
<TT>Mar 1 17:46:17 gateway charon: 08[IKE] sending end entity cert "C=CH, O=strongSwan, CN=ns1.my.domain"</TT><BR>
<TT>Mar 1 17:46:17 gateway charon: 08[IKE] peer requested virtual IP 192.168.1.11</TT><BR>
<TT>Mar 1 17:46:17 gateway charon: 08[CFG] assigning new lease to 'C=CH, O=strongSwan, CN=me@my.domain'</TT><BR>
<TT>Mar 1 17:46:17 gateway charon: 08[IKE] assigning virtual IP 192.168.1.11 to peer 'C=CH, O=strongSwan, CN=me@my.domain'</TT><BR>
<TT>Mar 1 17:46:17 gateway charon: 08[IKE] CHILD_SA rw{1} established with SPIs c3749028_i c5defa7e_o and TS 192.168.1.0/24 === 192.168.1.11/32 </TT><BR>
<TT>Mar 1 17:46:17 gateway charon: 08[IKE] CHILD_SA rw{1} established with SPIs c3749028_i c5defa7e_o and TS 192.168.1.0/24 === 192.168.1.11/32 </TT><BR>
<TT>Mar 1 17:46:17 gateway charon: 08[ENC] generating IKE_AUTH response 1 [ IDr CERT AUTH CPRP(ADDR) SA TSi TSr N(AUTH_LFT) N(MOBIKE_SUP) N(ADD_4_ADDR) ]</TT><BR>
<TT>Mar 1 17:46:17 gateway charon: 08[NET] sending packet: from server.external.ip[4500] to client.external.ip[15546] (2204 bytes)</TT><BR>
<TT>Mar 1 17:46:21 gateway charon: 11[NET] received packet: from client.external.ip[15546] to server.external.ip[4500] (1916 bytes)</TT><BR>
<TT>Mar 1 17:46:21 gateway charon: 11[ENC] parsed IKE_AUTH request 1 [ IDi CERT N(INIT_CONTACT) CERTREQ IDr AUTH CPRQ(ADDR DNS) SA TSi TSr N(MOBIKE_SUP) N(ADD_4_ADDR) N(MULT_AUTH) N(EAP_ONLY) ]</TT><BR>
<TT>Mar 1 17:46:21 gateway charon: 11[IKE] received retransmit of request with ID 1, retransmitting response</TT>
</BODY>
</HTML>