Hi,

> 08[LIB] expected hash algorithm HASH_SHA1, but found HASH_SHA256 (OID:
> 30:0d:06:09:60:86:48:01:65:03:04:02:01:05:00)

Your certificate looks bogus. The certificate itself says (in the X.509
encoding) it is signed by the CA using SHA1, but the PKCS#1 signature
contains an OID for SHA256. Because of this inconsistency, the
certificate is rejected.

Regards
Martin


_______________________________________________
Users mailing list
[email protected]
https://lists.strongswan.org/mailman/listinfo/users

Reply via email to