<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:12px"><div id="yui_3_16_0_1_1432694074921_2480" class="" style="" dir="ltr">I am trying to use ECDSA certificates with my setup and I keep getting "no private key found" on my strongswan server when a client connects. I am using CentOS 7 and strongSwan 5.2.0. I am using the android client to connect and the certificate authentication works fine on the Android device.</div><div id="yui_3_16_0_1_1432694074921_2480" class="" style="" dir="ltr"><br></div><div id="yui_3_16_0_1_1432694074921_2480" class="" style="" dir="ltr">Any ideas on what would cause the private key to not be found or be authenticated correctly?</div><div id="yui_3_16_0_1_1432694074921_2480" class="" style=""><br></div><div id="yui_3_16_0_1_1432694074921_2480" class="" style=""><br></div><div id="yui_3_16_0_1_1432694074921_2480" class="" style="">14[CFG] using trusted ca certificate "C=US, ST=MA, L=SELF, O=SSCA, OU=SS, CN=192.168.1.7"</div><div id="yui_3_16_0_1_1432694074921_2480" class="" style="">14[CFG] checking certificate status of "C=US, ST=MA, L=SELF, O=SSCA, OU=SS, CN=phone1ecc"</div><div id="yui_3_16_0_1_1432694074921_2480" class="" style="">14[CFG] certificate status is not available</div><div id="yui_3_16_0_1_1432694074921_2480" class="" style="">14[CFG] reached self-signed root ca with a path length of 0</div><div id="yui_3_16_0_1_1432694074921_2480" class="" style="">14[IKE] authentication of 'C=US, ST=MA, L=SELF, O=SSCA, OU=SS, CN=phone1ecc' with ECDSA-384 signature successful</div><div id="yui_3_16_0_1_1432694074921_2480" class="" style="">14[IKE] received ESP_TFC_PADDING_NOT_SUPPORTED, not using ESPv3 TFC padding</div><div id="yui_3_16_0_1_1432694074921_2480" class="" style="">14[IKE] peer supports MOBIKE</div><div id="yui_3_16_0_1_1432694074921_2480" class="" style="">14[IKE] no private key found for 'C=US, ST=MA, L=SELF, OU=SSCA'</div><div id="yui_3_16_0_1_1432694074921_2480" class="" style="">14[ENC] generating IKE_AUTH response 1 [ N(AUTH_FAILED) ]</div><div id="yui_3_16_0_1_1432694074921_2480" class="" style="">14[NET] sending packet: from 192.168.1.7[4500] to 70.162.232.57[5477] (88 bytes)</div><div dir="ltr" class="" style="" id="yui_3_16_0_1_1432694074921_2502"><br class="" style=""></div><div id="yui_3_16_0_1_1432694074921_2480" class="" style=""><br class="" style=""></div></div></body></html>