The server is not involved here but perhaps someone else with Windows 10 operating against StrongSwan has seen it...
Recently my laptop started throwing an error "The parameter is incorrect" when I try to start the VPN connection. Deleting the connection and re-setting it doesn't clear the problem. If I trace on the server side I get the SA packet out and it blows up there. I see this much out of the server: Dec 17 14:40:13 NewFS charon: 05[NET] received packet: from 192.168.1.19[500] to 70.169.168.7[500] (880 bytes) Dec 17 14:40:13 NewFS charon: 05[ENC] parsed IKE_SA_INIT request 0 [ SA KE No N( NATD_S_IP) N(NATD_D_IP) V V V V ] Dec 17 14:40:13 NewFS charon: 05[IKE] received MS NT5 ISAKMPOAKLEY v9 vendor ID Dec 17 14:40:13 NewFS charon: 05[IKE] received MS-Negotiation Discovery Capable vendor ID Dec 17 14:40:13 NewFS charon: 05[IKE] received Vid-Initial-Contact vendor ID Dec 17 14:40:13 NewFS charon: 05[ENC] received unknown vendor ID: 01:52:8b:bb:c0 :06:96:12:18:49:ab:9a:1c:5b:2a:51:00:00:00:02 Dec 17 14:40:13 NewFS charon: 05[IKE] 192.168.1.19 is initiating an IKE_SA Dec 17 14:40:13 NewFS charon: 05[IKE] sending cert request for "C=US, ST=Florida , L=Niceville, O=Cuda Systems LLC, CN=Cuda Systems LLC CA, E=Cuda Systems LLC CA " Dec 17 14:40:13 NewFS charon: 05[ENC] generating IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) CERTREQ N(MULT_AUTH) ] Dec 17 14:40:13 NewFS charon: 05[NET] sending packet: from 70.169.168.7[500] to 192.168.1.19[500] (333 bytes) And that's it; the client throws the error and is starting to say *something* about validating some thing or another (perhaps my local end?) but it never goes further. Setting up a connection from a DIFFERENT Win10 machine works fine, so it's computer-specific. It never gets to the point of checking certificates, so whatever it is that's making it angry is happening on the client side before it gets there. If anyone has run into this and has any ideas on where to look it would be appreciated. I turned on RAS tracing and it tells me nothing; there is no error in the logs that generates, and I can't find an exception in the system event log either. My other clients are working fine; Android and Windows.... -- Karl Denninger k...@denninger.net <mailto:k...@denninger.net> /The Market Ticker/ /[S/MIME encrypted email preferred]/
smime.p7s
Description: S/MIME Cryptographic Signature
_______________________________________________ Users mailing list Users@lists.strongswan.org https://lists.strongswan.org/mailman/listinfo/users