Hi Paul, yep, I know about the bug but it doesn't happen here.
for whatever reason iOS is using hybrid mode when using cisco ipsec mode with group name and PSK. Maybe the problem is Libreswan not offering XAUTH when in aggressive mode and iOS is falling back to hybrid? Am 28.03.2014 um 16:25:33 Uhr schrieb Paul Wouters <[email protected]>: > On Fri, 28 Mar 2014, Marc-Christian Petersen wrote: > >> Libreswan does not support Hybrid mode: >> >> Mar 28 16:04:51 vpn pluto[28426]: "XAUTH-GROUP"[2] 1.2.3.4 #2: Pluto does >> not support HybridInitRSA authentication. Attribute >> OAKLEY_AUTHENTICATION_METHOD > > The iphone should not be using hybrid mode. Be aware if you switch from > PSK to CERT configurations on your iphone, and you don't wipe the > PSK/ID information, your CERT connection will fail. _______________________________________________ Swan mailing list [email protected] https://lists.libreswan.org/mailman/listinfo/swan
