[strongSwan] strongSwan + Windows 7 + IKEv2 + MSCHAPv2 (Username and password)

[Tobias Brunner]

Hi Martin, Hi Sven,

the response is just a little bit below:

> 08[IKE] authentication of 'C=DE, ST=Bavaria, O=Siemens, OU=andere,
> CN=ikeclient' (myself) with RSA signature successful
> 08[ENC] generating IKE_AUTH response 1 [ IDr AUTH EAP ]
> 08[NET] sending packet: from 192.168.10.90[4500] to 192.168.10.12[4500]

Which indicates that the gateway certificate is not sent, which might cause this
error in Win7.

One other thing, not related to this particular error, but will cause the
authentication to fail later:

> 01[DMN] loaded plugins: aes des sha1 sha2 md5 fips-prf random x509
> pubkey xcbc hmac gmp stroke eap-identity eap-mschapv2

The MD4 plugin is not built/loaded (which is required, if you don't use the
OpenSSL plugin), therefore the NT-Hashes cannot be generated.

Regards,
Tobias

-- 
======================================================================
Tobias Brunner                                   tobias at strongswan.org
strongSwan - The Linux VPN Solution!         http://www.strongswan.org
======================================================================