Re: Having trouble with IPSEC negotiating BlackBerry 10 OS smartphone with OBSD 6.1 amd64

2017-08-10 Thread Stuart Henderson
On 2017/08/10 11:13, Denis wrote: > Or what phone model (Brand) I can use to have IPSEC working on the road? IKEv1 (either on its own with just isakmpd, or combined with L2TP from npppd) works widely. IKEv2/iked works with iPhones in some setups (though Theodore Wynnychenko ran into a problem tha

Re: Having trouble with IPSEC negotiating BlackBerry 10 OS smartphone with OBSD 6.1 amd64

2017-08-10 Thread Denis
latest #iked -dvv log is below: ikev2_pld_payloads: decrypted payload CERTREQ nextpayload CP critical 0x00 length 5 ikev2_pld_certreq: type X509_CERT signatures length 0 ikev2_pld_payloads: decrypted payload CP nextpayload NOTIFY critical 0x00 length 36 ikev2_pld_cp: type REQUEST length 28 ikev2_p

Having trouble with IPSEC negotiating BlackBerry 10 OS smartphone with OBSD 6.1 amd64

2017-08-10 Thread Denis
Hi, Have fully working setup OpenIKEd + Win7x64 using IKEv2 and MSCHAP-v2 but BlackBerry device stop negotiating and fail while connecting. Exact BlackBerry SW version is: 10.3.2.2836. Cert and 2048bit key in *.P12 form transferred to BlackBerry device. 10.0.20.0/24 is local network 10.0.10.0/2