[strongSwan-dev] AUTH4 check fails with Blackberry device but works fine with Android, anyone any ideas?

[Alan Evans]

Hello List,

I am using StrongSwan v5.0.1 as a basis for a GAN/UMA Security Gateway
(http://en.wikipedia.org/wiki/Generic_Access_Network)

It works great with the UMA Client on Android devices but fails with
the UMA Client on RIM devices.

The failure I get is right at the very end:

Oct 20 21:12:39 gt1 charon: 02[CFG] sending RADIUS Access-Request to
server '127.0.0.1'
Oct 20 21:12:39 gt1 charon: 02[CFG] received RADIUS Access-Accept from
server '127.0.0.1'
Oct 20 21:12:39 gt1 charon: 02[IKE] RADIUS authentication of
'1310750000005966 at uma.mnc075.mcc310.3gppnetwork.org' successful
Oct 20 21:12:39 gt1 charon: 02[IKE] EAP method EAP_SIM succeeded, MSK
established
Oct 20 21:12:39 gt1 charon: 02[ENC] generating IKE_AUTH response 3 [ EAP/SUCC ]
Oct 20 21:12:39 gt1 charon: 02[NET] sending packet: from
10.234.41.122[4500] to 86.172.174.190[62923]

Oct 20 21:12:39 gt1 charon: 07[NET] received packet => 96 bytes @ 0xb440b940
Oct 20 21:12:39 gt1 charon: 01[ENC] parsed IKE_AUTH request 4 [ AUTH ]
Oct 20 21:12:39 gt1 charon: 01[IKE] verification of AUTH payload with
EAP MSK failed
Oct 20 21:12:39 gt1 charon: 01[ENC] generating IKE_AUTH response 4 [
N(AUTH_FAILED) ]
Oct 20 21:12:39 gt1 charon: 01[NET] sending packet: from
10.234.41.122[4500] to 86.172.174.190[62923]
Oct 20 21:12:39 gt1 charon: 01[IKE] IKE_SA gan[1] state change:
CONNECTING => DESTROYING


Can anyone think of how this can possibly happen, The EAP-SIM
procedure was successful but it seems that there is somehow a mismatch
with the keys.

Bear in mind that the same SIM Card and Security Gateway works fine on Andorid.

If you think you might be able to help me debug this issue, then
please let me know. I am willing to pay for your time if necessary!

Thanks in advance
AlanE.