[strongSwan] building CRED_CERTIFICATE - TRUSTED_PUBKEY failed

Martin Willi martin at strongswan.org
Fri Nov 15 09:49:40 CET 2013


Hi,

> 12[CFG] looking for RSA signature peer configs matching
>         10.195.82.145...199.188.195.215[C=CH, O=strongSwan, CN=client]
> 12[IKE] no peer config found

Your client requests plain RSA authentication only.

>       rightauth=rsa
>       rightauth2=xauth-noauth

Your configuration uses RSA+XAuth and therefore does not match. Either
disable XAuth on the server, or enable XAuth on the client.

Regards
Martin





More information about the Users mailing list