Re: [strongSwan] CURVE_25519 inacceptable

[Anvar Kuchkartaev]

As far as I know android clients are not supported curve25519. Anvar Kuchkartaev  an...@anvartay.com  From: Rafał Sanocki Sent: martes, 7 de noviembre de 2017 05:19 p.m. To: users@lists.strongswan.org Subject: [strongSwan] CURVE_25519 inacceptable Hi, I try connect client : strongSwan 5.6.0, Android 8.0.0 - OPR4.170623.009/2017-10-05, Nexus 5X - google/bullhead/LGE, Linux 3.10.73-ga51b1600b7f8, aarch64 server:  ipsec version Linux strongSwan U5.6.0/K4.13.2 connection type conn vpn-ikev2 keyexchange=ikev2         type=transport         left=13.41.7.54         leftcert=proxu.s.cert         leftid=@proxy.domain.com         right=%any         rightca=@#0b:c3:d4:33:....         authby=rsasig         keyingtries=%forever         leftsubnet=0.0.0.0/0         rightdns=192.168.0.2         rightrsasigkey=%cert conn vpn-ikev2-android <------>also="vpn-ikev2"         rightid="C=PL, ST=Malopolska, O=Test, OU=Sec man, CN=androidcli...@domain.com, E=andr...@domain.com"         auto=add         rightsourceip=192.168.0.100/32 Windows clients can connect well, but when android trying i have error in logs charon: 10[IKE] DH group CURVE_25519 inacceptable, requesting CURVE_25519 what that mean curve_25519 != curve_25519?? Every helpful hint would be highly appreciated. Rafał