[strongSwan] StrongSwan generating INFORMATIONAL request 2 [ N(AUTH_FAILED) ] (Linux/Anroid)

Tobias Brunner tobias at strongswan.org
Thu Dec 8 16:42:29 CET 2016


>> Client logs:
> Those logs are useless. You need to read the logs of the remote side. The reason for the error is logged there.

It actually does seem to be a client issue (or more specifically to be
related to the certificates):

> Dec  6 03:59:47 linuxlite-VirtualBox charon-nm: 16[CFG] no issuer certificate found for "C=com, O=myvpn, CN=*.*.*.*"
> Dec  6 03:59:47 linuxlite-VirtualBox charon-nm: 16[CFG]   using trusted certificate "C=com, O=myvpn, CN=*.*.*.*"
> Dec  6 03:59:47 linuxlite-VirtualBox charon-nm: 16[IKE] signature validation failed, looking for another key
> Dec  6 03:59:47 linuxlite-VirtualBox charon-nm: 16[CFG]   using certificate "C=com, O=myvpn, CN=*.*.*.*"
> Dec  6 03:59:47 linuxlite-VirtualBox charon-nm: 16[CFG] no issuer certificate found for "C=com, O=myvpn, CN=*.*.*.*"
> Dec  6 03:59:47 linuxlite-VirtualBox charon-nm: 16[ENC] generating INFORMATIONAL request 2 [ N(AUTH_FAILED) ]

Regards,
Tobias



More information about the Users mailing list