i have builded <br>win98+certificates ---openswan<br>winxp+psk-----openswan<br>success<br>but i can not build win2000+certificates-----openswan<br>when i connected,it shows "you do not have suitale certificates "<br>this time i found the /var/log/secure<br><br>May 8 16:03:23 localhost pluto[2503]: packet from 192.168.0.68:500: ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000002]<br>May 8 16:03:23 localhost pluto[2503]: "testcert2000" #1: responding to Main Mode<br>May 8 16:03:23 localhost pluto[2503]: "testcert2000" #1: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1<br>May 8 16:03:24 localhost pluto[2503]: "testcert2000" #1: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2<br>May 8 16:03:24 localhost pluto[2503]: "testcert2000" #1: next payload type of ISAKMP Hash Payload has an unknown value: 72<br>May 8 16:03:24 localhost pluto[2503]: "testcert2000" #1: malformed payload in packet<br>May 8 16:03:24 localhost pluto[2503]: "testcert2000" #1: sending notification PAYLOAD_MALFORMED to 192.168.0.68:500<br>May 8 16:03:24 localhost pluto[2503]: "testcert2000" #1: failed to build notification for spisize=0 <br>May 8 16:03:24 localhost pluto[2503]: "testcert2000" #1: byte 2 of ISAKMP Hash Payload must be zero, but is not<br>May 8 16:03:24 localhost pluto[2503]: "testcert2000" #1: malformed payload in packet<br><br>my ipsec.conf is like this <br>conn testcert2000<br> left=192.168.0.67<br> right=192.168.0.68<br> authby=rsasig<br> pfs=no<br> leftprotoport=17/1701<br> rightprotoport=17/1701<br> auto=add<br> rightrsasigkey=%cert<br> rightcert=/home/zhengshu/68client.crt<br> leftrsasigkey=%cert<br> leftcert=/home/zhengshu/67client.crt<br>my ipsec.secrets is like this<br>: RSA /home/zhengshu/67.key "123456789"<br><br>who knows what is wrong?<br>who can help me,thanks very very very much~<br><!-- footer --><br><br><br>
<font style="font-size:14.8px">
<!--广告footer 开始-->
<!--广告footer 结束-->
<!--内部footer开始-->
<br>
<br><p style="line-height:250%;">
<a href="http://www.188.com/index.htm?from=footer_other.com" target="_blank">
<font color=blue> 什么邮箱可以注册长度<font color=red>3位</font>用户名，好记又好用？</font>
</a>
<img src="http://mail.126.com/favicon.ico" width=16 height=16 border=0 align=absmiddle>
</p>
<!--内部footer结束-->
</font>