[strongSwan] Tunnel established, but 'no acceptable ENCRYPTION_ALGORITHM found'

Tobias Brunner tobias at strongswan.org
Tue May 1 10:08:34 CEST 2018


Hi,

> I see an error in the strongswan
> logs and I'm not sure what is going on here, and what I should do to
> correct this:

There is nothing to correct as the connection gets successfully
established.  If you have a closer look at the log you see that the
client sends not one, but four ESP proposals.  The first one contains
only AEAD algorithms (AES-GCM etc.), which won't match your configured
proposal, hence, the "no acceptable ENCRYPTION_ALGORITHM found" message.
 Then the second proposal is tried and that matches your configured
proposal and is selected.

Regards,
Tobias


More information about the Users mailing list