[strongSwan] charon says "DH group MODP_1024 inacceptable, requesting MODP_1536"

[Roger Skjetlein]

I found out that this combination works with of the devices out there:
        ike = 3des-sha1-modp1024
esp = aes256-sha1,aes192-sha1,aes128-sha1

windows 7 to 10, os x 10.11, ios 8 and 9, android...

On Wed, Oct 28, 2015 at 2:50 AM, Rayson Zhu <vfreex at gmail.com> wrote:

> I met this issue too. I have to change my cipher suite to
> aes128-sha-1-modp1024 to connect IOS devices.
>
>
> On Tuesday, October 27, 2015, Tobias Brunner <tobias at strongswan.org>
> wrote:
>
>> Hi Harald,
>>
>> > If I got you correctly I would have to move back to DH2, just to make
>> > the iphone users happy.
>>
>> Correct, or you use a configuration profile with DiffieHellmanGroup set
>> to one of the other groups Apple claims to support (I don't know which
>> of them actually work, though): 2 (Default), 5, 14, 15, 16, 17, or 18.
>>
>> > Do you know of any commitments from Apple to fix this?
>>
>> No idea.  I wasn't the one adding that information to the wiki.  But you
>> could report the bug to Apple to get a rough idea when it is fixed.  In
>> this case they will close your bug report and mark it as duplicate and
>> you won't get any direct status updates etc. but you can see whether the
>> original ticket is still open or not.
>>
>> Regards,
>> Tobias
>>
>> _______________________________________________
>> Users mailing list
>> Users at lists.strongswan.org
>> https://lists.strongswan.org/mailman/listinfo/users
>>
>
> _______________________________________________
> Users mailing list
> Users at lists.strongswan.org
> https://lists.strongswan.org/mailman/listinfo/users
>



-- 
"Over vidden flyger renen;
efter den i vind og væde! -
Bedre det, end bryde stenen
op af fattig jord dernede!"
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20151028/d4c04b53/attachment.html>