Jul 6 17:26:21 00[DMN] Starting IKE charon daemon (strongSwan 5.4.0, Linux 3.4.110-cyanogenmod-gdb51504, armv7l) Jul 6 17:26:21 00[LIB] loaded plugins: androidbridge charon android-log openssl fips-prf random nonce pubkey pkcs1 pkcs8 pem xcbc hmac socket-default eap-identity eap-mschapv2 eap-md5 eap-gtc eap-tls Jul 6 17:26:21 00[JOB] spawning 16 worker threads Jul 6 17:26:21 07[IKE] initiating IKE_SA android[5] to 2.2.2.2 Jul 6 17:26:21 07[ENC] generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) N(HASH_ALG) N(REDIR_SUP) ] Jul 6 17:26:21 07[NET] sending packet: from 192.168.0.12[58939] to 2.2.2.2[500] (732 bytes) Jul 6 17:26:21 06[NET] received packet: from 2.2.2.2[500] to 192.168.0.12[58939] (38 bytes) Jul 6 17:26:21 06[ENC] parsed IKE_SA_INIT response 0 [ N(INVAL_KE) ] Jul 6 17:26:21 06[IKE] peer didn't accept DH group ECP_256, it requested MODP_2048 Jul 6 17:26:21 06[IKE] initiating IKE_SA android[5] to 2.2.2.2 Jul 6 17:26:21 06[ENC] generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) N(HASH_ALG) N(REDIR_SUP) ] Jul 6 17:26:21 06[NET] sending packet: from 192.168.0.12[58939] to 2.2.2.2[500] (924 bytes) Jul 6 17:26:22 11[NET] received packet: from 2.2.2.2[500] to 192.168.0.12[58939] (448 bytes) Jul 6 17:26:22 11[ENC] parsed IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) N(MULT_AUTH) ] Jul 6 17:26:22 11[IKE] local host is behind NAT, sending keep alives Jul 6 17:26:22 11[IKE] sending cert request for "C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Hardware" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust ECC Certification Authority" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=GeoTrust Inc., CN=GeoTrust Global CA" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=Digital Signature Trust, OU=DST ACES, CN=DST ACES CA X6" Jul 6 17:26:22 11[IKE] sending cert request for "C=RO, O=certSIGN, OU=certSIGN ROOT CA" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=GeoTrust Inc., OU=(c) 2007 GeoTrust Inc. - For authorized use only, CN=GeoTrust Primary Certification Authority - G2" Jul 6 17:26:22 11[IKE] sending cert request for "C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA" Jul 6 17:26:22 11[IKE] sending cert request for "C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=Secure Certificate Services" Jul 6 17:26:22 11[IKE] sending cert request for "C=DE, O=D-Trust GmbH, CN=D-TRUST Root Class 3 CA 2 2009" Jul 6 17:26:22 11[IKE] sending cert request for "C=SE, O=AddTrust AB, OU=AddTrust TTP Network, CN=AddTrust Class 1 CA Root" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2" Jul 6 17:26:22 11[IKE] sending cert request for "C=ch, O=Swisscom, OU=Digital Certificate Services, CN=Swisscom Root CA 2" Jul 6 17:26:22 11[IKE] sending cert request for "O=RSA Security Inc, OU=RSA Security 2048 V3" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=GeoTrust Inc., CN=GeoTrust Primary Certification Authority" Jul 6 17:26:22 11[IKE] sending cert request for "C=PL, O=Unizeto Sp. z o.o., CN=Certum CA" Jul 6 17:26:22 11[IKE] sending cert request for "C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 1 G3" Jul 6 17:26:22 11[IKE] sending cert request for "CN=T??RKTRUST Elektronik Sertifika Hizmet Sa??lay??c??s??, C=TR, L=Ankara, O=T??RKTRUST Bilgi ??leti??im ve Bili??im G??venli??i Hizmetleri A.??. (c) Kas??m 2005" Jul 6 17:26:22 11[IKE] sending cert request for "C=DE, O=T-Systems Enterprise Services GmbH, OU=T-Systems Trust Center, CN=T-TeleSec GlobalRoot Class 3" Jul 6 17:26:22 11[IKE] sending cert request for "C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2" Jul 6 17:26:22 11[IKE] sending cert request for "C=FR, O=Dhimyotis, CN=Certigna" Jul 6 17:26:22 11[IKE] sending cert request for "C=CH, O=SwissSign AG, CN=SwissSign Silver CA - G2" Jul 6 17:26:22 11[IKE] sending cert request for "C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Trusted Network CA" Jul 6 17:26:22 11[IKE] sending cert request for "C=TR, L=Ankara, O=T??RKTRUST Bilgi ??leti??im ve Bili??im G??venli??i Hizmetleri A.??., CN=T??RKTRUST Elektronik Sertifika Hizmet Sa??lay??c??s?? H6" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2" Jul 6 17:26:22 11[IKE] sending cert request for "C=IL, O=StartCom Ltd., OU=Secure Digital Certificate Signing, CN=StartCom Certification Authority" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA" Jul 6 17:26:22 11[IKE] sending cert request for "CN=T??RKTRUST Elektronik Sertifika Hizmet Sa??lay??c??s??, C=TR, L=ANKARA, O=(c) 2005 T??RKTRUST Bilgi ??leti??im ve Bili??im G??venli??i Hizmetleri A.??." Jul 6 17:26:22 11[IKE] sending cert request for "CN=Atos TrustedRoot 2011, O=Atos, C=DE" Jul 6 17:26:22 11[IKE] sending cert request for "C=SK, L=Bratislava, O=Disig a.s., CN=CA Disig Root R2" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=GeoTrust Inc., OU=(c) 2008 GeoTrust Inc. - For authorized use only, CN=GeoTrust Primary Certification Authority - G3" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=(c) 2012 Entrust, Inc. - for authorized use only, CN=Entrust Root Certification Authority - EC1" Jul 6 17:26:22 11[IKE] sending cert request for "OU=GlobalSign Root CA - R2, O=GlobalSign, CN=GlobalSign" Jul 6 17:26:22 11[IKE] sending cert request for "C=ch, O=Swisscom, OU=Digital Certificate Services, CN=Swisscom Root EV CA 2" Jul 6 17:26:22 11[IKE] sending cert request for "C=FR, O=Certinomis, OU=0002 433998903, CN=Certinomis - Root CA" Jul 6 17:26:22 11[IKE] sending cert request for "C=TR, L=Ankara, O=E-Tu??ra EBG Bili??im Teknolojileri ve Hizmetleri A.??., OU=E-Tugra Sertifikasyon Merkezi, CN=E-Tugra Certification Authority" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=GeoTrust Inc., CN=GeoTrust Universal CA" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=SecureTrust Corporation, CN=SecureTrust CA" Jul 6 17:26:22 11[IKE] sending cert request for "CN=ACCVRAIZ1, OU=PKIACCV, O=ACCV, C=ES" Jul 6 17:26:22 11[IKE] sending cert request for "C=EU, L=Madrid (see current address at www.camerfirma.com/address), SN=A82743287, O=AC Camerfirma S.A., CN=Chambers of Commerce Root - 2008" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=(c) 2009 Entrust, Inc. - for authorized use only, CN=Entrust Root Certification Authority - G2" Jul 6 17:26:22 11[IKE] sending cert request for "C=IL, O=StartCom Ltd., CN=StartCom Certification Authority G2" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=VISA, OU=Visa International Service Association, CN=Visa eCommerce Root" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Trusted Root G4" Jul 6 17:26:22 11[IKE] sending cert request for "C=GB, O=Trustis Limited, OU=Trustis FPS Root CA" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=AffirmTrust, CN=AffirmTrust Networking" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=IdenTrust, CN=IdenTrust Public Sector Root CA 1" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=SecureTrust Corporation, CN=Secure Global CA" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root G2" Jul 6 17:26:22 11[IKE] sending cert request for "C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 3 G3" Jul 6 17:26:22 11[IKE] sending cert request for "C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services" Jul 6 17:26:22 11[IKE] sending cert request for "C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=Trusted Certificate Services" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=AffirmTrust, CN=AffirmTrust Premium" Jul 6 17:26:22 11[IKE] sending cert request for "C=NL, O=Staat der Nederlanden, CN=Staat der Nederlanden Root CA" Jul 6 17:26:22 11[IKE] sending cert request for "C=HU, L=Budapest, O=Microsec Ltd., CN=Microsec e-Szigno Root CA 2009, E=info@e-szigno.hu" Jul 6 17:26:22 11[IKE] sending cert request for "C=IL, O=StartCom Ltd., OU=Secure Digital Certificate Signing, CN=StartCom Certification Authority" Jul 6 17:26:22 11[IKE] sending cert request for "C=NO, O=Buypass AS-983163327, CN=Buypass Class 3 Root CA" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=Network Solutions L.L.C., CN=Network Solutions Certificate Authority" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=IdenTrust, CN=IdenTrust Commercial Root CA 1" Jul 6 17:26:22 11[IKE] sending cert request for "C=TW, O=Government Root Certification Authority" Jul 6 17:26:22 11[IKE] sending cert request for "C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority" Jul 6 17:26:22 11[IKE] sending cert request for "O=Digital Signature Trust Co., CN=DST Root CA X3" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, OU=www.xrampsecurity.com, O=XRamp Security Services Inc, CN=XRamp Global Certification Authority" Jul 6 17:26:22 11[IKE] sending cert request for "C=HU, L=Budapest, O=NetLock Kft., OU=Tan??s??tv??nykiad??k (Certification Services), CN=NetLock Arany (Class Gold) F??tan??s??tv??ny" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2008 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA - G3" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Root Certificate Authority - G2" Jul 6 17:26:22 11[IKE] sending cert request for "C=HK, O=Hongkong Post, CN=Hongkong Post Root CA 1" Jul 6 17:26:22 11[IKE] sending cert request for "C=TR, L=Ankara, O=T??RKTRUST Bilgi ??leti??im ve Bili??im G??venli??i Hizmetleri A.??., CN=T??RKTRUST Elektronik Sertifika Hizmet Sa??lay??c??s?? H5" Jul 6 17:26:22 11[IKE] sending cert request for "CN=T??RKTRUST Elektronik Sertifika Hizmet Sa??lay??c??s??, C=TR, L=Ankara, O=T??RKTRUST Bilgi ??leti??im ve Bili??im G??venli??i Hizmetleri A.??. (c) Aral??k 2007" Jul 6 17:26:22 11[IKE] sending cert request for "C=EU, L=Madrid (see current address at www.camerfirma.com/address), SN=A82743287, O=AC Camerfirma S.A., CN=Global Chambersign Root - 2008" Jul 6 17:26:22 11[IKE] sending cert request for "C=ES, O=IZENPE S.A., CN=Izenpe.com" Jul 6 17:26:22 11[IKE] sending cert request for "OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=Equifax, OU=Equifax Secure Certificate Authority" Jul 6 17:26:22 11[IKE] sending cert request for "C=ES, O=Agencia Catalana de Certificacio (NIF Q-0801176-I), OU=Serveis Publics de Certificacio, OU=Vegeu https://www.catcert.net/verarrel (c)03, OU=Jerarquia Entitats de Certificacio Catalanes, CN=EC-ACC" Jul 6 17:26:22 11[IKE] sending cert request for "C=SK, L=Bratislava, O=Disig a.s., CN=CA Disig Root R1" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., CN=Go Daddy Root Certificate Authority - G2" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root G3" Jul 6 17:26:22 11[IKE] sending cert request for "C=CH, O=SwissSign AG, CN=SwissSign Gold CA - G2" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=thawte, Inc., OU=(c) 2007 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA - G2" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=Entrust, Inc., OU=www.entrust.net/CPS is incorporated by reference, OU=(c) 2006 Entrust, Inc., CN=Entrust Root Certification Authority" Jul 6 17:26:22 11[IKE] sending cert request for "CN=ACEDICOM Root, OU=PKI, O=EDICOM, C=ES" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=GeoTrust Inc., CN=GeoTrust Global CA 2" Jul 6 17:26:22 11[IKE] sending cert request for "CN=EBG Elektronik Sertifika Hizmet Sa??lay??c??s??, O=EBG Bili??im Teknolojileri ve Hizmetleri A.??., C=TR" Jul 6 17:26:22 11[IKE] sending cert request for "C=CH, O=WISeKey, OU=Copyright (c) 2005, OU=OISTE Foundation Endorsed, CN=OISTE WISeKey Global Root GA CA" Jul 6 17:26:22 11[IKE] sending cert request for "C=BM, O=QuoVadis Limited, OU=Root Certification Authority, CN=QuoVadis Root Certification Authority" Jul 6 17:26:22 11[IKE] sending cert request for "C=TW, O=TAIWAN-CA, OU=Root CA, CN=TWCA Root Certification Authority" Jul 6 17:26:22 11[IKE] sending cert request for "C=AT, O=A-Trust Ges. f. Sicherheitssysteme im elektr. Datenverkehr GmbH, OU=A-Trust-nQual-03, CN=A-Trust-nQual-03" Jul 6 17:26:22 11[IKE] sending cert request for "C=CN, O=China Financial Certification Authority, CN=CFCA EV ROOT" Jul 6 17:26:22 11[IKE] sending cert request for "C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication EV RootCA1" Jul 6 17:26:22 11[IKE] sending cert request for "C=EU, O=AC Camerfirma SA CIF A82743287, OU=http://www.chambersign.org, CN=Global Chambersign Root" Jul 6 17:26:22 11[IKE] sending cert request for "C=HU, L=Budapest, O=Microsec Ltd., OU=e-Szigno CA, CN=Microsec e-Szigno Root CA" Jul 6 17:26:22 11[IKE] sending cert request for "C=TW, O=Chunghwa Telecom Co., Ltd., OU=ePKI Root Certification Authority" Jul 6 17:26:22 11[IKE] sending cert request for "C=GR, O=Hellenic Academic and Research Institutions Cert. Authority, CN=Hellenic Academic and Research Institutions RootCA 2011" Jul 6 17:26:22 11[IKE] sending cert request for "O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048)" Jul 6 17:26:22 11[IKE] sending cert request for "C=IT, L=Milan, O=Actalis S.p.A./03358520967, CN=Actalis Authentication Root CA" Jul 6 17:26:22 11[IKE] sending cert request for "C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication RootCA2" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=The Go Daddy Group, Inc., OU=Go Daddy Class 2 Certification Authority" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority" Jul 6 17:26:22 11[IKE] sending cert request for "C=CN, O=WoSign CA Limited, CN=Certification Authority of WoSign" Jul 6 17:26:22 11[IKE] sending cert request for "C=FR, O=Certplus, CN=Class 2 Primary CA" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=AffirmTrust, CN=AffirmTrust Premium ECC" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=Wells Fargo WellsSecure, OU=Wells Fargo Bank NA, CN=WellsSecure Public Root Certificate Authority" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=Starfield Technologies, Inc., OU=Starfield Class 2 Certification Authority" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=AffirmTrust, CN=AffirmTrust Commercial" Jul 6 17:26:22 11[IKE] sending cert request for "C=EU, O=AC Camerfirma SA CIF A82743287, OU=http://www.chambersign.org, CN=Chambers of Commerce Root" Jul 6 17:26:22 11[IKE] sending cert request for "C=CN, O=CNNIC, CN=CNNIC ROOT" Jul 6 17:26:22 11[IKE] sending cert request for "C=FI, O=Sonera, CN=Sonera Class2 CA" Jul 6 17:26:22 11[IKE] sending cert request for "C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 3" Jul 6 17:26:22 11[IKE] sending cert request for "C=CN, O=China Internet Network Information Center, CN=China Internet Network Information Center EV Certificates Root" Jul 6 17:26:22 11[IKE] sending cert request for "C=DE, O=T-Systems Enterprise Services GmbH, OU=T-Systems Trust Center, CN=T-TeleSec GlobalRoot Class 2" Jul 6 17:26:22 11[IKE] sending cert request for "C=HU, ST=Hungary, L=Budapest, O=NetLock Halozatbiztonsagi Kft., OU=Tanusitvanykiadok, CN=NetLock Kozjegyzoi (Class A) Tanusitvanykiado" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=Internet Security Research Group, CN=ISRG Root X1" Jul 6 17:26:22 11[IKE] sending cert request for "C=JP, O=Japan Certification Services, Inc., CN=SecureSign RootCA11" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G3" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2008 VeriSign, Inc. - For authorized use only, CN=VeriSign Universal Root Certification Authority" Jul 6 17:26:22 11[IKE] sending cert request for "OU=GlobalSign ECC Root CA - R5, O=GlobalSign, CN=GlobalSign" Jul 6 17:26:22 11[IKE] sending cert request for "C=DE, O=Deutsche Telekom AG, OU=T-TeleSec Trust Center, CN=Deutsche Telekom Root CA 2" Jul 6 17:26:22 11[IKE] sending cert request for "E=pki@sk.ee, C=EE, O=AS Sertifitseerimiskeskus, CN=Juur-SK" Jul 6 17:26:22 11[IKE] sending cert request for "C=SK, L=Bratislava, O=Disig a.s., CN=CA Disig" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN - DATACorp SGC" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2007 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G4" Jul 6 17:26:22 11[IKE] sending cert request for "C=SE, O=AddTrust AB, OU=AddTrust TTP Network, CN=AddTrust Public CA Root" Jul 6 17:26:22 11[IKE] sending cert request for "C=JP, O=Japanese Government, OU=ApplicationCA" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=Let's Encrypt, CN=Let's Encrypt Authority X1" Jul 6 17:26:22 11[IKE] sending cert request for "C=FR, ST=France, L=Paris, O=PM/SGDN, OU=DCSSI, CN=IGC/A, E=igca@sgdn.pm.gouv.fr" Jul 6 17:26:22 11[IKE] sending cert request for "C=ch, O=Swisscom, OU=Digital Certificate Services, CN=Swisscom Root CA 1" Jul 6 17:26:22 11[IKE] sending cert request for "OU=GlobalSign ECC Root CA - R4, O=GlobalSign, CN=GlobalSign" Jul 6 17:26:22 11[IKE] sending cert request for "C=NO, O=Buypass AS-983163327, CN=Buypass Class 2 CA 1" Jul 6 17:26:22 11[IKE] sending cert request for "O=TeliaSonera, CN=TeliaSonera Root CA v1" Jul 6 17:26:22 11[IKE] sending cert request for "C=TW, O=TAIWAN-CA, OU=Root CA, CN=TWCA Global Root CA" Jul 6 17:26:22 11[IKE] sending cert request for "C=NL, O=Staat der Nederlanden, CN=Staat der Nederlanden EV Root CA" Jul 6 17:26:22 11[IKE] sending cert request for "O=Cybertrust, Inc, CN=Cybertrust Global Root" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=Let's Encrypt, CN=Let's Encrypt Authority X3" Jul 6 17:26:22 11[IKE] sending cert request for "C=ES, O=Generalitat Valenciana, OU=PKIGVA, CN=Root CA Generalitat Valenciana" Jul 6 17:26:22 11[IKE] sending cert request for "C=NL, O=Staat der Nederlanden, CN=Staat der Nederlanden Root CA - G2" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=Entrust.net, OU=www.entrust.net/CPS incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Secure Server Certification Authority" Jul 6 17:26:22 11[IKE] sending cert request for "C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root" Jul 6 17:26:22 11[IKE] sending cert request for "C=SE, O=AddTrust AB, OU=AddTrust TTP Network, CN=AddTrust Qualified CA Root" Jul 6 17:26:22 11[IKE] sending cert request for "C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Certification Authority" Jul 6 17:26:22 11[IKE] sending cert request for "CN=ComSign Secured CA, O=ComSign, C=IL" Jul 6 17:26:22 11[IKE] sending cert request for "C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2 G3" Jul 6 17:26:22 11[IKE] sending cert request for "C=US, O=GeoTrust Inc., CN=GeoTrust Universal CA 2" Jul 6 17:26:22 11[IKE] sending cert request for "C=JP, O=SECOM Trust.net, OU=Security Communication RootCA1" Jul 6 17:26:22 11[IKE] sending cert request for "C=DE, O=D-Trust GmbH, CN=D-TRUST Root Class 3 CA 2 EV 2009" Jul 6 17:26:22 11[IKE] sending cert request for "C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO ECC Certification Authority" Jul 6 17:26:22 11[IKE] sending cert request for "C=TR, L=Gebze - Kocaeli, O=T??rkiye Bilimsel ve Teknolojik Ara??t??rma Kurumu - T??B??TAK, OU=Ulusal Elektronik ve Kriptoloji Ara??t??rma Enstit??s?? - UEKAE, OU=Kamu Sertifikasyon Merkezi, CN=T??B??TAK UEKAE K??k Sertifika Hizmet Sa??lay??c??s?? - S??r??m 3" Jul 6 17:26:22 11[IKE] sending cert request for "C=NO, O=Buypass AS-983163327, CN=Buypass Class 2 Root CA" Jul 6 17:26:22 11[IKE] sending cert request for "C=ES, CN=Autoridad de Certificacion Firmaprofesional CIF A62634068" Jul 6 17:26:22 11[IKE] sending cert request for "C=CN, O=WoSign CA Limited, CN=CA ???????????????" Jul 6 17:26:22 11[IKE] sending cert request for "C=NL, O=Staat der Nederlanden, CN=Staat der Nederlanden Root CA - G3" Jul 6 17:26:22 11[IKE] sending cert request for "C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root" Jul 6 17:26:22 11[IKE] sending cert request for "C=FR, O=Certinomis, OU=0002 433998903, CN=Certinomis - Autorit?? Racine" Jul 6 17:26:22 11[IKE] sending cert request for "C=EE, O=AS Sertifitseerimiskeskus, CN=EE Certification Centre Root CA, E=pki@sk.ee" Jul 6 17:26:22 11[IKE] establishing CHILD_SA android Jul 6 17:26:22 11[ENC] generating IKE_AUTH request 1 [ IDi N(INIT_CONTACT) CERTREQ CPRQ(ADDR ADDR6 DNS DNS6) N(ESP_TFC_PAD_N) SA TSi TSr N(MOBIKE_SUP) N(NO_ADD_ADDR) N(MULT_AUTH) N(EAP_ONLY) ] Jul 6 17:26:22 11[ENC] splitting IKE message with length of 3628 bytes into 4 fragments Jul 6 17:26:22 11[ENC] generating IKE_AUTH request 1 [ EF(1/4) ] Jul 6 17:26:22 11[ENC] generating IKE_AUTH request 1 [ EF(2/4) ] Jul 6 17:26:22 11[ENC] generating IKE_AUTH request 1 [ EF(3/4) ] Jul 6 17:26:22 11[ENC] generating IKE_AUTH request 1 [ EF(4/4) ] Jul 6 17:26:22 11[NET] sending packet: from 192.168.0.12[56080] to 2.2.2.2[4500] (1248 bytes) Jul 6 17:26:22 11[NET] sending packet: from 192.168.0.12[56080] to 2.2.2.2[4500] (1248 bytes) Jul 6 17:26:22 11[NET] sending packet: from 192.168.0.12[56080] to 2.2.2.2[4500] (1248 bytes) Jul 6 17:26:22 11[NET] sending packet: from 192.168.0.12[56080] to 2.2.2.2[4500] (80 bytes) Jul 6 17:26:24 14[IKE] retransmit 1 of request with message ID 1 Jul 6 17:26:24 14[NET] sending packet: from 192.168.0.12[56080] to 2.2.2.2[4500] (1248 bytes) Jul 6 17:26:24 14[NET] sending packet: from 192.168.0.12[56080] to 2.2.2.2[4500] (1248 bytes) Jul 6 17:26:24 14[NET] sending packet: from 192.168.0.12[56080] to 2.2.2.2[4500] (1248 bytes) Jul 6 17:26:24 14[NET] sending packet: from 192.168.0.12[56080] to 2.2.2.2[4500] (80 bytes) Jul 6 17:26:27 15[IKE] retransmit 2 of request with message ID 1 Jul 6 17:26:27 15[NET] sending packet: from 192.168.0.12[56080] to 2.2.2.2[4500] (1248 bytes) Jul 6 17:26:27 15[NET] sending packet: from 192.168.0.12[56080] to 2.2.2.2[4500] (1248 bytes) Jul 6 17:26:27 15[NET] sending packet: from 192.168.0.12[56080] to 2.2.2.2[4500] (1248 bytes) Jul 6 17:26:27 15[NET] sending packet: from 192.168.0.12[56080] to 2.2.2.2[4500] (80 bytes) Jul 6 17:26:31 16[IKE] retransmit 3 of request with message ID 1 Jul 6 17:26:31 16[NET] sending packet: from 192.168.0.12[56080] to 2.2.2.2[4500] (1248 bytes) Jul 6 17:26:31 16[NET] sending packet: from 192.168.0.12[56080] to 2.2.2.2[4500] (1248 bytes) Jul 6 17:26:31 16[NET] sending packet: from 192.168.0.12[56080] to 2.2.2.2[4500] (1248 bytes) Jul 6 17:26:31 16[NET] sending packet: from 192.168.0.12[56080] to 2.2.2.2[4500] (80 bytes) Jul 6 17:26:31 07[NET] received packet: from 2.2.2.2[4500] to 192.168.0.12[56080] (544 bytes) Jul 6 17:26:31 07[ENC] parsed IKE_AUTH response 1 [ EF(1/4) ] Jul 6 17:26:31 07[ENC] received fragment #1 of 4, waiting for complete IKE message Jul 6 17:26:31 09[NET] received packet: from 2.2.2.2[4500] to 192.168.0.12[56080] (544 bytes) Jul 6 17:26:31 09[ENC] parsed IKE_AUTH response 1 [ EF(2/4) ] Jul 6 17:26:31 09[ENC] received fragment #2 of 4, waiting for complete IKE message Jul 6 17:26:31 08[NET] received packet: from 2.2.2.2[4500] to 192.168.0.12[56080] (544 bytes) Jul 6 17:26:31 08[ENC] parsed IKE_AUTH response 1 [ EF(3/4) ] Jul 6 17:26:31 08[ENC] received fragment #3 of 4, waiting for complete IKE message Jul 6 17:26:31 06[NET] received packet: from 2.2.2.2[4500] to 192.168.0.12[56080] (208 bytes) Jul 6 17:26:31 06[ENC] parsed IKE_AUTH response 1 [ EF(4/4) ] Jul 6 17:26:31 06[ENC] received fragment #4 of 4, reassembling fragmented IKE message Jul 6 17:26:31 06[ENC] parsed IKE_AUTH response 1 [ IDr CERT AUTH EAP/REQ/ID ] Jul 6 17:26:31 06[IKE] received end entity cert "CN=some.host.domain" Jul 6 17:26:31 06[CFG] using certificate "CN=some.host.domain" Jul 6 17:26:31 06[CFG] using trusted intermediate ca certificate "C=US, O=Let's Encrypt, CN=Let's Encrypt Authority X3" Jul 6 17:26:31 06[CFG] using trusted ca certificate "O=Digital Signature Trust Co., CN=DST Root CA X3" Jul 6 17:26:31 06[CFG] reached self-signed root ca with a path length of 1 Jul 6 17:26:31 06[IKE] authentication of 'some.host.domain' with RSA signature successful Jul 6 17:26:31 06[IKE] server requested EAP_IDENTITY (id 0x00), sending 'laurens2' Jul 6 17:26:31 06[ENC] generating IKE_AUTH request 2 [ EAP/RES/ID ] Jul 6 17:26:31 06[NET] sending packet: from 192.168.0.12[56080] to 2.2.2.2[4500] (92 bytes) Jul 6 17:26:31 11[NET] received packet: from 2.2.2.2[4500] to 192.168.0.12[56080] (92 bytes) Jul 6 17:26:31 11[ENC] parsed IKE_AUTH response 2 [ EAP/REQ/MD5 ] Jul 6 17:26:31 11[IKE] server requested EAP_MD5 authentication (id 0x01) Jul 6 17:26:31 11[ENC] generating IKE_AUTH request 3 [ EAP/RES/MD5 ] Jul 6 17:26:31 11[NET] sending packet: from 192.168.0.12[56080] to 2.2.2.2[4500] (92 bytes) Jul 6 17:26:31 12[NET] received packet: from 2.2.2.2[4500] to 192.168.0.12[56080] (76 bytes) Jul 6 17:26:31 12[ENC] parsed IKE_AUTH response 3 [ EAP/SUCC ] Jul 6 17:26:31 12[IKE] EAP method EAP_MD5 succeeded, no MSK established Jul 6 17:26:31 12[IKE] authentication of 'laurens2' (myself) with EAP Jul 6 17:26:31 12[ENC] generating IKE_AUTH request 4 [ AUTH ] Jul 6 17:26:31 12[NET] sending packet: from 192.168.0.12[56080] to 2.2.2.2[4500] (92 bytes) Jul 6 17:26:32 13[NET] received packet: from 2.2.2.2[4500] to 192.168.0.12[56080] (268 bytes) Jul 6 17:26:32 13[ENC] parsed IKE_AUTH response 4 [ AUTH CPRP(ADDR DNS DNS) SA TSi TSr N(AUTH_LFT) N(MOBIKE_SUP) N(ADD_4_ADDR) N(ADD_4_ADDR) ] Jul 6 17:26:32 13[IKE] authentication of 'some.host.domain' with EAP successful Jul 6 17:26:32 13[IKE] IKE_SA android[5] established between 192.168.0.12[laurens2]...2.2.2.2[some.host.domain] Jul 6 17:26:32 13[IKE] scheduling rekeying in 35479s Jul 6 17:26:32 13[IKE] maximum IKE_SA lifetime 36079s Jul 6 17:26:32 13[IKE] installing new virtual IP 10.1.0.15 Jul 6 17:26:32 13[IKE] CHILD_SA android{5} established with SPIs 00b6d9f2_i cabb26a4_o and TS 10.1.0.15/32 === 0.0.0.0/0 Jul 6 17:26:32 13[DMN] setting up TUN device for CHILD_SA android{5} Jul 6 17:26:32 13[DMN] successfully created TUN device Jul 6 17:26:32 13[IKE] received AUTH_LIFETIME of 10105s, scheduling reauthentication in 9505s Jul 6 17:26:32 13[IKE] peer supports MOBIKE Jul 6 17:26:32 15[IKE] sending address list update using MOBIKE Jul 6 17:26:32 15[ENC] generating INFORMATIONAL request 5 [ N(NO_ADD_ADDR) ] Jul 6 17:26:32 15[NET] sending packet: from 192.168.0.12[56080] to 2.2.2.2[4500] (76 bytes) Jul 6 17:26:32 07[NET] received packet: from 2.2.2.2[4500] to 192.168.0.12[56080] (76 bytes) Jul 6 17:26:32 07[ENC] parsed INFORMATIONAL response 5 [ ] Jul 6 17:26:38 00[IKE] deleting IKE_SA android[5] between 192.168.0.12[laurens2]...2.2.2.2[some.host.domain] Jul 6 17:26:38 00[IKE] sending DELETE for IKE_SA android[5] Jul 6 17:26:38 00[ENC] generating INFORMATIONAL request 6 [ D ] Jul 6 17:26:38 00[NET] sending packet: from 192.168.0.12[56080] to 2.2.2.2[4500] (76 bytes)