Testing IKEv2 with Android devices

2017-11-26 Thread C. L. Martinez
Hi all, I am testing IKEv2 for Android roadwarriors clients ... I have done a very basic config: ikev2 "roadwarriors" passive esp \ from 0.0.0.0/0 to 172.22.55.0/27 \ peer any \ config name-server 172.22.55.1 \ psk "stargazer" Launching "iked -dvv" returns me:

Re: Testing IKEv2 with Android devices

2017-11-26 Thread C. L. Martinez
On Sun, Nov 26, 2017 at 09:02:46PM +0100, C. L. Martinez wrote: > Hi all, > > I am testing IKEv2 for Android roadwarriors clients ... I have done a very > basic config: > > ikev2 "roadwarriors" passive esp \ > from 0.0.0.0/0 to 172.22.55.0/27 \ > peer any \ > config name

Re: Testing IKEv2 with Android devices

2017-11-29 Thread Stuart Henderson
On 2017-11-26, C. L. Martinez wrote: > > Ok, it is seems the prolem is that iked(8) does not know how to perform > Diffie-Hellman group negotiation: > > https://marc.info/?l=openbsd-tech&m=151136800328145&w=2 > > Am I correct? What is the current status for Tim's fix? patrick@ has been followin

Re: Testing IKEv2 with Android devices

2017-11-29 Thread C. L. Martinez
On Wed, Nov 29, 2017 at 9:33 AM, Stuart Henderson wrote: > On 2017-11-26, C. L. Martinez wrote: >> >> Ok, it is seems the prolem is that iked(8) does not know how to perform >> Diffie-Hellman group negotiation: >> >> https://marc.info/?l=openbsd-tech&m=151136800328145&w=2 >> >> Am I correct? Wh

Re: Testing IKEv2 with Android devices

2017-11-30 Thread Stuart Henderson
On 2017-11-29, C. L. Martinez wrote: > On Wed, Nov 29, 2017 at 9:33 AM, Stuart Henderson > wrote: >> On 2017-11-26, C. L. Martinez wrote: >>> >>> Ok, it is seems the prolem is that iked(8) does not know how to perform >>> Diffie-Hellman group negotiation: >>> >>> https://marc.info/?l=openbsd-t