On Thu, 24 Dec 2015 00:10:10 -0500 (EST)
Paul Wouters <[email protected]> wrote:

> It seems that is correct and Windows, at least in some configurations,
> only proposed modp1024 in IKEv2, which libreswan no longer allows in
> its default proposal. You will need an ike= line that matches the
> windows proposal, possibly: ike=aes128-sha1;modp1024

Sorry, that doesn't work. Windows wants aes256-sha2_256;modp1024.
I have all the details in log so I'll update wiki instructions for
windows ikev2 when I have time to test (next week).

-- 
Tuomo Soini <[email protected]>
Foobar Linux services
+358 40 5240030
Foobar Oy <http://foobar.fi/>
_______________________________________________
Swan mailing list
[email protected]
https://lists.libreswan.org/mailman/listinfo/swan

Reply via email to