On Sat, 22 Jun 2019, Tero Kivinen wrote:
If both implementations work correctly you should NEVER send INVALID_SYNTAX error. That always means there is programming error in one of the implementations.
Correct error code is NO_PROPOSAL_CHOSEN as you use unknown IP to do policy lookup, find empty list of acceptable proposals to match against what other end sent, and of course empty list does not match, so you do not have any proposal that matches, meaning you return NO_PROPOSAL_CHOSEN.
Thanks to the group for the various explanations. I've changed our return code back to NO_PROPOSAL_CHOSEN. Paul _______________________________________________ IPsec mailing list [email protected] https://www.ietf.org/mailman/listinfo/ipsec
