[strongSwan] What the blankety-blank-blank is Win10 doing? :-)

2017-06-25 Thread Karl Denninger
There are times I hate Windows this is one of them. I had a working certificate-based system on my Win10 laptop. I haven't used it in a while, and now it won't connect. My Android phone does, using the StrongSwan app -- it's fine. StrongSwan (on a FreeBSD host) is getting the connection req

Re: [strongSwan] What the blankety-blank-blank is Win10 doing? :-)

2017-06-26 Thread Tobias Brunner
Hi Karl, > StrongSwan never gets this packet. I assume the problem here is the > length mismatch, but not certain. What is certain is that StrongSwan > never sees it; no matter how far up I turn the logging I never see any > evidence of it being logged. Sounds like an IP fragmentation issue (me

Re: [strongSwan] What the blankety-blank-blank is Win10 doing? :-)

2017-06-30 Thread Karl Denninger
On 6/26/2017 10:46, Tobias Brunner wrote: > Hi Karl, > >> StrongSwan never gets this packet. I assume the problem here is the >> length mismatch, but not certain. What is certain is that StrongSwan >> never sees it; no matter how far up I turn the logging I never see any >> evidence of it being

Re: [strongSwan] What the blankety-blank-blank is Win10 doing? (now Android and ECDSA certs)

2017-07-01 Thread Karl Denninger
On 6/30/2017 12:09, Karl Denninger wrote: > > > > On 6/26/2017 10:46, Tobias Brunner wrote: >> Hi Karl, >> >>> StrongSwan never gets this packet. I assume the problem here is the >>> length mismatch, but not certain. What is certain is that StrongSwan >>> never sees it; no matter how far up I tur

Re: [strongSwan] What the blankety-blank-blank is Win10 doing? (now Android and ECDSA certs)

2017-07-03 Thread Tobias Brunner
Hi Karl, > But now, when that certificate is selected, StrongSwan doesn't seem to > want to *find* the certificate, even though it *does* verify as ok > against the CA that issued it, and it's in the "certs" directory. No need to put it there unless you actually reference it explicitly in you