Re: [strongSwan] Small Problems with 5.2

[Dirk Hartmann]

Hi Martin,

--On Friday, July 11, 2014 03:04:27 PM +0200 Martin Willi <mar...@strongswan.org> wrote:

ipsec_starter[3318]: notifying watcher failed: Broken pipe

I got: no trusted RSA public key found for NAME

Btw, I don't think these two issues are directly related. While
asynchronous IPC operation is affected, starter actually doesn't use
that.

Probably something else is wrong with that key: trust chain
validation, certificate exchange, or loading trusted certificates.
Your log might have more details.

If I don't add it I get a connection with 5.1.3 but on 5.2 I get:
[IKE] no trusted RSA public key found for 'C=DE, O=xxxx'
in the log of the server.

Best Regards
Dirk

was there a change in 5.2 about charon asking for the certificate of the peer? I can establish a connection when I add leftsendcert=yes to the configuration of my roadwarrior.

pgpKoigv8o7Ll.pgp
Description: PGP signature

_______________________________________________
Users mailing list
Users@lists.strongswan.org
https://lists.strongswan.org/mailman/listinfo/users