[strongSwan] Strongswan + Mac OSX

[Claude Tompers]

On 09/05/2012 02:33 PM, Claude Tompers wrote:

Hi Martin,
> Hi Martin,
>> Hi Claude,
>>
>>> Still the same error. One thing that also appears odd, is that I don't
>>> see a config selection line in the log ( ie: selected peer config
>>> "RESTENA" ).
>> The config selection does not happen before the third ID_PROT exchange,
>> but just that message can't be decrypted.
>>
>>> Things start to become very odd. I've created an Apple profile with the
>>> VPN configuration. I imported it into my Macbook and into my iPhone.
>>> The connection works on the iPhone but does not on the Macbook.
>> I really don't know. Mountain Lion works fine here against both 5.0.0
>> and the latest snapshot.
I've tried with two other Macbooks, one also with Mountain Lion
(10.8.1), the other one with Lion (10.7.4).
The other Mountain Lion had the exact same behaviour as mine (also
10.8.1), the one with Lion installed 'only' complained about not being
able to verify the server certificate.
The logs here show that the Mac and the VPN server were at least
interchanging certificates.

Both machines were using the same generated Apple profile.

I also found this topic in an Apple Forum :
https://discussions.apple.com/thread/4158642?start=0&tstart=0
I'm wondering if that problem is related.

kind regards,
Claude
> Hmm, my personal certificate is in the system store and marked as
> "Always trust", the CA certificate is in the login store and marked the
> same way.
> There is nothing more to do there ?
>
> Also, I had installed strongswan on my Macbook to test it. I imagine
> there should be no interactions between both VPN clients ?
>
> kind regards,
> Claude
>> Regards
>> Martin
>>
>
>
>
> _______________________________________________
> Users mailing list
> Users at lists.strongswan.org
> https://lists.strongswan.org/mailman/listinfo/users


-- 
Claude Tompers
Ingénieur réseau et système
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche
6, rue Richard Coudenhove-Kalergi
L-1359 Luxembourg

Tel: +352 424409 1
Fax: +352 422473


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 259 bytes
Desc: OpenPGP digital signature
URL: <http://lists.strongswan.org/pipermail/users/attachments/20120906/2aa69a53/attachment.pgp>