<div dir="ltr"><div><font class="Apple-style-span" face="'courier new', monospace">Hello everyone!</font></div><div><font class="Apple-style-span" face="'courier new', monospace">I have no trouble to configure site2site IPsec tunnel using latest stable Openswan between two Centos 5.5 machines but can't in any way find configuration to create site2site tunnel between Centos 5.5 and the Astaro Security Gateway 8 using RSA authentication. It seems according to logs that Centos using right certs from the NSS db and same certs found on the second machine but there is no way that I can get Astaro to accept Centos' certs.</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"><br></font></div><div><font class="Apple-style-span" face="'courier new', monospace">I'm stuck with this problem about a week and must solve it as soon as possible.</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">Please help.</font></div><div><font class="Apple-style-span" face="'courier new', monospace"></font><span class="Apple-style-span" style="font-family: 'courier new', monospace; ">Or at last describe a theory of configuration with RSA authentication I mean things like were should be public/private keys/certs located and how to check if they are valid/in correct places?</span></div>
<div><span class="Apple-style-span" style="font-family: 'courier new', monospace; ">Can someone tell me what I'm doing wrong?</span></div><div><font class="Apple-style-span" face="'courier new', monospace"><br>
</font></div><div><font class="Apple-style-span" face="'courier new', monospace">Here are configuration files, certificates and logs:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"><br>
</font></div><div><font class="Apple-style-span" face="'courier new', monospace">#######################################################################################</font></div><div><font class="Apple-style-span" face="'courier new', monospace">### ###</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">### Configuration and certificates of the Centos 5.5 (left) machine ###</font></div><div><font class="Apple-style-span" face="'courier new', monospace">### ###</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">#######################################################################################</font></div><div><font class="Apple-style-span" face="'courier new', monospace"><br>
</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Content of the /etc/ipsec.conf</font></div><div><font class="Apple-style-span" face="'courier new', monospace">-------------->>>>>>><<<<<<<--------------</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"># /etc/ipsec.conf - Openswan IPsec configuration file</font></div><div><font class="Apple-style-span" face="'courier new', monospace">#</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"># Manual: ipsec.conf.5</font></div><div><font class="Apple-style-span" face="'courier new', monospace">#</font></div><div><font class="Apple-style-span" face="'courier new', monospace"># Please place your own config files in /etc/ipsec.d/ ending in .conf</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"><br></font></div><div><font class="Apple-style-span" face="'courier new', monospace">version 2.0 # conforms to second version of ipsec.conf specification</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"><br></font></div><div><font class="Apple-style-span" face="'courier new', monospace"># basic configuration</font></div><div><font class="Apple-style-span" face="'courier new', monospace">config setup</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> # Debug-logging controls: "none" for (almost) none, "all" for lots.</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> # klipsdebug=none</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> # plutodebug="control parsing"</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> # For Red Hat Enterprise Linux and Fedora, leave protostack=netkey</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> protostack=netkey</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> nat_traversal=yes</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> virtual_private=10.175.1.131</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> oe=off</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> # Enable this if you see "failed to find any available worker"</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> nhelpers=0</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"><br></font></div><div><font class="Apple-style-span" face="'courier new', monospace">#You may put your configuration (.conf) file in the "/etc/ipsec.d/" and uncomment this.</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">include /etc/ipsec.d/*.conf</font></div><div><font class="Apple-style-span" face="'courier new', monospace">-------------->>>>>>><<<<<<<--------------</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"><br></font></div><div><font class="Apple-style-span" face="'courier new', monospace"><br></font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Content of the /etc/ipsec.secrets</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">-------------->>>>>>><<<<<<<--------------</font></div><div><font class="Apple-style-span" face="'courier new', monospace">include /etc/ipsec.d/*.secrets</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">-------------->>>>>>><<<<<<<--------------</font></div><div><font class="Apple-style-span" face="'courier new', monospace"><br>
</font></div><div><font class="Apple-style-span" face="'courier new', monospace"><br></font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Content of the /etc/ipsec.d/my_vpn.conf</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">-------------->>>>>>><<<<<<<--------------</font></div><div><font class="Apple-style-span" face="'courier new', monospace">conn linux-to-linux</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> left=10.170.2.150</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> leftid="CN=vpnca"</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> leftrsasigkey=%cert</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> leftcert=vpnca</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> right=10.170.2.100</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> rightid=10.170.2.100</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> rightrsasigkey=%cert</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> rightcert=HuiNanNy</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> type="tunnel"</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> auto=start</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">-------------->>>>>>><<<<<<<--------------</font></div><div><font class="Apple-style-span" face="'courier new', monospace"><br>
</font></div><div><font class="Apple-style-span" face="'courier new', monospace"><br></font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Contentt of the /etc/ipsec.d/my_vpn.secrets</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">-------------->>>>>>><<<<<<<--------------</font></div><div><font class="Apple-style-span" face="'courier new', monospace">: RSA vpnca</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">-------------->>>>>>><<<<<<<--------------</font></div><div><font class="Apple-style-span" face="'courier new', monospace"><br>
</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Content of certificate "vpnca" (which is should be a primary CA for both machines)</font></div><div><font class="Apple-style-span" face="'courier new', monospace">-------------->>>>>>><<<<<<<--------------</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">Certificate:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Data:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Version: 3 (0x2)</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> Serial Number:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> 00:93:51:47:31</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> Signature Algorithm: PKCS #1 SHA-1 With RSA Encryption</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Issuer: "CN=vpnca"</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> Validity:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Not Before: Sun Jan 23 21:33:00 2011</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> Not After : Mon Jan 23 21:33:00 2012</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Subject: "CN=vpnca"</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> Subject Public Key Info:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Public Key Algorithm: PKCS #1 RSA Encryption</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> RSA Public Key:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Modulus:</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> c6:69:51:2a:df:91:22:62:ad:3d:ef:c8:95:4c:e2:63:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> 48:05:67:e3:7e:41:b6:1a:76:6b:44:8d:1c:98:af:72:</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> 0a:b3:6e:57:10:77:b8:04:84:de:c0:b7:d4:c9:56:c5:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> 50:a7:8f:00:ad:a8:97:7d:5b:37:49:ac:82:c3:84:c4:</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> 9b:33:76:a6:b8:2d:0e:04:15:26:a3:2c:92:b9:83:71:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> d1:41:ca:c4:96:87:c6:6e:1d:84:59:2a:3a:b3:b0:2e:</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> 24:42:95:98:80:70:63:6e:8a:d5:cd:7f:76:b5:e6:09:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> 71:f7:cb:cd:98:8b:2c:67:ee:bb:84:fd:fc:8a:a6:ed</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> Exponent: 65537 (0x10001)</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Signature Algorithm: PKCS #1 SHA-1 With RSA Encryption</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> Signature:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> 50:6d:2c:fe:63:d4:39:4e:86:97:ae:5f:dc:49:cc:56:</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> d9:d1:63:06:f9:65:94:50:e1:25:4b:45:84:4e:af:4a:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> 6c:ea:24:13:73:87:29:b1:e4:f6:05:68:98:7f:00:4d:</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> 90:23:c3:0a:99:9a:39:d2:10:95:a4:3c:02:b7:0a:4e:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> 6f:ba:c1:25:62:b1:7f:d1:c4:63:64:0b:4d:a9:b2:35:</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> 45:87:67:fa:f0:92:e9:46:e0:ce:19:df:2f:c1:e2:61:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> 11:f2:1d:af:5c:02:03:77:ff:db:c7:c9:cc:05:fe:ec:</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> 1c:be:bd:ca:48:c7:49:c3:50:3e:ae:91:b5:06:cd:61</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Fingerprint (MD5):</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> AD:E2:31:01:8D:35:E5:04:D4:36:B9:94:3E:95:B1:CC</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Fingerprint (SHA1):</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> BD:66:83:85:D5:1F:E8:FD:E6:00:CE:E9:E7:69:C1:20:07:74:E7:04</font></div><div><font class="Apple-style-span" face="'courier new', monospace"><br>
</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Certificate Trust Flags:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> SSL Flags:</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> Valid CA</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Trusted CA</font></div><div>
<font class="Apple-style-span" face="'courier new', monospace"> User</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Trusted Client CA</font></div><div>
<font class="Apple-style-span" face="'courier new', monospace"> Email Flags:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Valid CA</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Trusted CA</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> User</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Object Signing Flags:</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> Valid CA</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Trusted CA</font></div><div>
<font class="Apple-style-span" face="'courier new', monospace"> User</font></div><div><font class="Apple-style-span" face="'courier new', monospace">-------------->>>>>>><<<<<<<--------------</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"><br></font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Content of certificate "HuiNanNy"</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">-------------->>>>>>><<<<<<<--------------</font></div><div><font class="Apple-style-span" face="'courier new', monospace">Certificate:</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> Data:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Version: 3 (0x2)</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Serial Number: 5378 (0x1502)</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> Signature Algorithm: PKCS #1 SHA-1 With RSA Encryption</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Issuer: "CN=vpnca"</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> Validity:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Not Before: Wed Feb 02 11:55:45 2011</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> Not After : Mon Jan 23 21:33:23 2012</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Subject: "O=Vertical Place,L=Tel-Aviv,C=il"</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> Subject Public Key Info:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Public Key Algorithm: PKCS #1 RSA Encryption</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> RSA Public Key:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Modulus:</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> ad:15:00:25:95:0c:2e:1a:b5:82:d4:18:37:3f:a8:1c:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> 27:3b:e6:80:27:d0:ac:be:c0:40:83:d7:8b:5b:02:8a:</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> df:6f:e9:b0:ed:b4:38:ba:f9:74:bf:6a:e0:8a:33:33:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> 08:06:99:7f:68:b1:12:f2:0b:0c:01:f0:b9:61:09:91:</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> a0:08:a3:e4:6e:de:77:0d:fc:c7:c3:77:53:c5:ba:e8:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> 4f:9f:71:8d:fb:7e:a9:ce:e5:9b:a0:2f:a2:b8:f3:79:</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> cc:eb:09:70:97:6f:06:50:a4:0d:30:fa:4d:a5:e9:d8:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> f9:11:eb:0c:85:f9:1a:04:b8:90:3e:ad:f5:65:a2:f5</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> Exponent: 65537 (0x10001)</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Signed Extensions:</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> Name: Certificate Subject Key ID</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Data:</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> 98:eb:2c:43:38:e0:52:9f:be:1f:b8:8a:9b:7f:89:eb:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> fa:9f:cc:29</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"><br></font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Name: Certificate Authority Key Identifier</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> Issuer:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Directory Name: "CN=vpnca"</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> Serial Number:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> 00:93:51:47:31</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"><br></font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Name: Certificate Subject Alt Name</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> IP Address: 10.170.2.150</font></div><div><font class="Apple-style-span" face="'courier new', monospace"><br></font></div><div>
<font class="Apple-style-span" face="'courier new', monospace"> Name: Certificate Basic Constraints</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Data: Is not a CA.</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"><br></font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Name: Certificate Key Usage</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> Usages: Digital Signature</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Non-Repudiation</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> Key Encipherment</font></div><div><font class="Apple-style-span" face="'courier new', monospace"><br></font></div><div>
<font class="Apple-style-span" face="'courier new', monospace"> Signature Algorithm: PKCS #1 SHA-1 With RSA Encryption</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Signature:</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> a1:73:c5:4a:56:d3:fe:39:78:c1:2f:bb:ed:b6:eb:77:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> 02:21:e0:b1:ef:9b:f2:b1:1c:b9:e0:a1:8d:90:50:dd:</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> e0:5c:70:d8:f2:62:73:df:70:3a:76:05:36:ba:ee:17:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> f6:29:27:d7:82:9f:f8:4b:44:dd:50:41:af:c5:f7:a3:</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> 9c:fb:d0:93:44:bf:e7:28:46:a1:94:13:75:6f:bb:59:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> 12:bb:9e:4a:11:a4:78:58:d0:53:87:9a:74:55:03:e2:</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> 6c:2a:61:37:2d:0b:4f:d4:de:ca:e0:32:9c:57:6e:8c:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> b7:fb:be:e8:c3:ba:f7:03:91:94:2b:54:8a:7a:71:8d</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> Fingerprint (MD5):</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> 4B:77:BE:B4:A2:67:72:66:24:E5:EE:9C:FE:F7:8F:D6</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> Fingerprint (SHA1):</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> DA:02:98:D5:AB:EE:BC:54:A5:C0:F0:B4:0D:7A:E5:99:2C:62:05:4B</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"><br></font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Certificate Trust Flags:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> SSL Flags:</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> User</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Email Flags:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> User</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> Object Signing Flags:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> User</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">-------------->>>>>>><<<<<<<--------------</font></div><div><font class="Apple-style-span" face="'courier new', monospace"><br>
</font></div><div><font class="Apple-style-span" face="'courier new', monospace">#######################################################################################</font></div><div><font class="Apple-style-span" face="'courier new', monospace">### ###</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">### Configuration and certificates of the Astaro Security Gateway 8 (right) machine ###</font></div><div><font class="Apple-style-span" face="'courier new', monospace">### ###</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">#######################################################################################</font></div><div><font class="Apple-style-span" face="'courier new', monospace"><br>
</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Content of the /etc/ipsec.conf</font></div><div><font class="Apple-style-span" face="'courier new', monospace">-------------->>>>>>><<<<<<<--------------</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">#/etc/ipsec.conf - strongSwan IPsec configuration file</font></div><div><font class="Apple-style-span" face="'courier new', monospace"><br>
</font></div><div><font class="Apple-style-span" face="'courier new', monospace">config setup</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> charonstart="no"</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> plutodebug="none"</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> uniqueids="no"</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> nocrsend="yes"</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> nat_traversal="yes"</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> keep_alive="60"</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> crlcheckinterval="0"</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> strictcrlpolicy="no"</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> probe_psk="no"</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"><br></font></div><div><font class="Apple-style-span" face="'courier new', monospace">conn %default</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> rekeyfuzz="100%"</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> keyingtries="0"</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> leftsendcert="always"</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> dpddelay="30"</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> dpdtimeout="120"</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> dpdaction="restart"</font></div><div><font class="Apple-style-span" face="'courier new', monospace"><br></font></div><div>
<font class="Apple-style-span" face="'courier new', monospace"># Centos-VPN</font></div><div><font class="Apple-style-span" face="'courier new', monospace">conn S_REF_eSpQByGRud_0</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> authby="rsasig"</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> auto="start"</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> compress="no"</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> esp="aes256-md5"</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> ike="aes256-md5-modp1536"</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> ikelifetime="7800"</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> keyexchange="ike"</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> keylife="3600"</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> left="10.170.2.100"</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> leftcert="/etc/ipsec.d/certs/REF_WcWZBkCkUA.pem"</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> leftid="10.170.2.150"</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> leftrsasigkey="%cert"</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> leftsourceip="10.170.2.100"</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> leftsubnet="<a href="http://10.170.2.100/32">10.170.2.100/32</a>"</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> leftupdown="/usr/libexec/ipsec/updown strict"</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> pfs="no"</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> rekeymargin="540"</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> right="10.170.2.150"</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> rightcert="/etc/ipsec.d/certs/REF_eGfDyXnwdH_2392a33d.pem"</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> rightid="CN=vpnca"</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> rightrsasigkey="%cert"</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> rightsubnet="<a href="http://10.170.2.0/24">10.170.2.0/24</a>"</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> type="tunnel"</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"><br></font></div><div><font class="Apple-style-span" face="'courier new', monospace">conn X_REF_eSpQByGRud_0</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> authby="never"</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> auto="route"</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> left="10.170.2.100"</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> leftsubnet="<a href="http://10.170.2.100/32">10.170.2.100/32</a>"</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> leftupdown="/bin/sh -c true"</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> right="255.255.255.255"</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> rightsubnet="<a href="http://10.170.2.100/32">10.170.2.100/32</a>"</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> type="passthrough"</font></div><div><font class="Apple-style-span" face="'courier new', monospace"><br></font></div><div>
<font class="Apple-style-span" face="'courier new', monospace">-------------->>>>>>><<<<<<<--------------</font></div><div><font class="Apple-style-span" face="'courier new', monospace"><br>
</font></div><div><font class="Apple-style-span" face="'courier new', monospace"><br></font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Content of the /etc/ipsec.secrets</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">-------------->>>>>>><<<<<<<--------------</font></div><div><font class="Apple-style-span" face="'courier new', monospace"># /etc/ipsec.secrets - strongSwan IPsec secrets file</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"><br></font></div><div><font class="Apple-style-span" face="'courier new', monospace">: RSA REF_WcWZBkCkUA.pem</font></div><div><font class="Apple-style-span" face="'courier new', monospace">-------------->>>>>>><<<<<<<--------------</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"><br></font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Content of the /etc/ipsec.d/certs/REF_WcWZBkCkUA.pem</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">-------------->>>>>>><<<<<<<--------------</font></div><div><font class="Apple-style-span" face="'courier new', monospace">Certificate:</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> Data:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Version: 3 (0x2)</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Serial Number: 5378 (0x1502)</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> Signature Algorithm: sha1WithRSAEncryption</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Issuer: CN=vpnca</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> Validity</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Not Before: Feb 2 11:55:45 2011 GMT</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> Not After : Jan 23 21:33:23 2012 GMT</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Subject: C=il, L=Tel-Aviv, O=Vertical Place</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> Subject Public Key Info:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Public Key Algorithm: rsaEncryption</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> RSA Public Key: (1024 bit)</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Modulus (1024 bit):</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> 00:ad:15:00:25:95:0c:2e:1a:b5:82:d4:18:37:3f:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> a8:1c:27:3b:e6:80:27:d0:ac:be:c0:40:83:d7:8b:</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> 5b:02:8a:df:6f:e9:b0:ed:b4:38:ba:f9:74:bf:6a:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> e0:8a:33:33:08:06:99:7f:68:b1:12:f2:0b:0c:01:</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> f0:b9:61:09:91:a0:08:a3:e4:6e:de:77:0d:fc:c7:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> c3:77:53:c5:ba:e8:4f:9f:71:8d:fb:7e:a9:ce:e5:</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> 9b:a0:2f:a2:b8:f3:79:cc:eb:09:70:97:6f:06:50:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> a4:0d:30:fa:4d:a5:e9:d8:f9:11:eb:0c:85:f9:1a:</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> 04:b8:90:3e:ad:f5:65:a2:f5</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Exponent: 65537 (0x10001)</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> X509v3 extensions:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> X509v3 Subject Key Identifier:</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> 98:EB:2C:43:38:E0:52:9F:BE:1F:B8:8A:9B:7F:89:EB:FA:9F:CC:29</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> X509v3 Authority Key Identifier:</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> DirName:/CN=vpnca</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> serial:93:51:47:31</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"><br></font></div><div><font class="Apple-style-span" face="'courier new', monospace"> X509v3 Subject Alternative Name:</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> IP Address:10.170.2.150</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> X509v3 Basic Constraints:</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> CA:FALSE</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> X509v3 Key Usage:</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> Digital Signature, Non Repudiation, Key Encipherment</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Signature Algorithm: sha1WithRSAEncryption</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> a1:73:c5:4a:56:d3:fe:39:78:c1:2f:bb:ed:b6:eb:77:02:21:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> e0:b1:ef:9b:f2:b1:1c:b9:e0:a1:8d:90:50:dd:e0:5c:70:d8:</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> f2:62:73:df:70:3a:76:05:36:ba:ee:17:f6:29:27:d7:82:9f:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> f8:4b:44:dd:50:41:af:c5:f7:a3:9c:fb:d0:93:44:bf:e7:28:</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> 46:a1:94:13:75:6f:bb:59:12:bb:9e:4a:11:a4:78:58:d0:53:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> 87:9a:74:55:03:e2:6c:2a:61:37:2d:0b:4f:d4:de:ca:e0:32:</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace"> 9c:57:6e:8c:b7:fb:be:e8:c3:ba:f7:03:91:94:2b:54:8a:7a:</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> 71:8d</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">-----BEGIN CERTIFICATE-----</font></div><div><font class="Apple-style-span" face="'courier new', monospace">MIICMjCCAZugAwIBAgICFQIwDQYJKoZIhvcNAQEFBQAwEDEOMAwGA1UEAxMFdnBu</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">Y2EwHhcNMTEwMjAyMTE1NTQ1WhcNMTIwMTIzMjEzMzIzWjA5MQswCQYDVQQGEwJp</font></div><div><font class="Apple-style-span" face="'courier new', monospace">bDERMA8GA1UEBxMIVGVsLUF2aXYxFzAVBgNVBAoTDlZlcnRpY2FsIFBsYWNlMIGf</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">MA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtFQAllQwuGrWC1Bg3P6gcJzvmgCfQ</font></div><div><font class="Apple-style-span" face="'courier new', monospace">rL7AQIPXi1sCit9v6bDttDi6+XS/auCKMzMIBpl/aLES8gsMAfC5YQmRoAij5G7e</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">dw38x8N3U8W66E+fcY37fqnO5ZugL6K483nM6wlwl28GUKQNMPpNpenY+RHrDIX5</font></div><div><font class="Apple-style-span" face="'courier new', monospace">GgS4kD6t9WWi9QIDAQABo3IwcDAdBgNVHQ4EFgQUmOssQzjgUp++H7iKm3+J6/qf</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">zCkwJgYDVR0jBB8wHaEUpBIwEDEOMAwGA1UEAxMFdnBuY2GCBQCTUUcxMA8GA1Ud</font></div><div><font class="Apple-style-span" face="'courier new', monospace">EQQIMAaHBAqqApYwCQYDVR0TBAIwADALBgNVHQ8EBAMCBeAwDQYJKoZIhvcNAQEF</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">BQADgYEAoXPFSlbT/jl4wS+77bbrdwIh4LHvm/KxHLngoY2QUN3gXHDY8mJz33A6</font></div><div><font class="Apple-style-span" face="'courier new', monospace">dgU2uu4X9ikn14Kf+EtE3VBBr8X3o5z70JNEv+coRqGUE3Vvu1kSu55KEaR4WNBT</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">h5p0VQPibCphNy0LT9TeyuAynFdujLf7vujDuvcDkZQrVIp6cY0=</font></div><div><font class="Apple-style-span" face="'courier new', monospace">-----END CERTIFICATE-----</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">-------------->>>>>>><<<<<<<--------------</font></div><div><font class="Apple-style-span" face="'courier new', monospace"><br>
</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> Content of the /etc/ipsec.d/certs/REF_eGfDyXnwdH_2392a33d.pem</font></div><div><font class="Apple-style-span" face="'courier new', monospace">-------------->>>>>>><<<<<<<--------------</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">Bag Attributes</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> friendlyName: vpnca</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> localKeyID: BD 66 83 85 D5 1F E8 FD E6 00 CE E9 E7 69 C1 20 07 74 E7 04</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">subject=/CN=vpnca</font></div><div><font class="Apple-style-span" face="'courier new', monospace">issuer=/CN=vpnca</font></div><div><font class="Apple-style-span" face="'courier new', monospace">-----BEGIN CERTIFICATE-----</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">MIIBmDCCAQGgAwIBAgIFAJNRRzEwDQYJKoZIhvcNAQEFBQAwEDEOMAwGA1UEAxMF</font></div><div><font class="Apple-style-span" face="'courier new', monospace">dnBuY2EwHhcNMTEwMTIzMjEzMzAwWhcNMTIwMTIzMjEzMzAwWjAQMQ4wDAYDVQQD</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">EwV2cG5jYTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAxmlRKt+RImKtPe/I</font></div><div><font class="Apple-style-span" face="'courier new', monospace">lUziY0gFZ+N+QbYadmtEjRyYr3IKs25XEHe4BITewLfUyVbFUKePAK2ol31bN0ms</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">gsOExJszdqa4LQ4EFSajLJK5g3HRQcrElofGbh2EWSo6s7AuJEKVmIBwY26K1c1/</font></div><div><font class="Apple-style-span" face="'courier new', monospace">drXmCXH3y82Yiyxn7ruE/fyKpu0CAwEAATANBgkqhkiG9w0BAQUFAAOBgQBQbSz+</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">Y9Q5ToaXrl/cScxW2dFjBvlllFDhJUtFhE6vSmzqJBNzhymx5PYFaJh/AE2QI8MK</font></div><div><font class="Apple-style-span" face="'courier new', monospace">mZo50hCVpDwCtwpOb7rBJWKxf9HEY2QLTamyNUWHZ/rwkulG4M4Z3y/B4mER8h2v</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">XAIDd//bx8nMBf7sHL69ykjHScNQPq6RtQbNYQ==</font></div><div><font class="Apple-style-span" face="'courier new', monospace">-----END CERTIFICATE-----</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">-------------->>>>>>><<<<<<<--------------</font></div><div><font class="Apple-style-span" face="'courier new', monospace"><br>
</font></div><div><font class="Apple-style-span" face="'courier new', monospace">#######################################################################################</font></div><div><font class="Apple-style-span" face="'courier new', monospace">### ###</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">### Logs during connection from both machines ###</font></div><div><font class="Apple-style-span" face="'courier new', monospace">### ###</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">#######################################################################################</font></div><div><font class="Apple-style-span" face="'courier new', monospace"><br>
</font></div><div><font class="Apple-style-span" face="'courier new', monospace"> IPsec Log on the Centos (left) side</font></div><div><font class="Apple-style-span" face="'courier new', monospace">-------------->>>>>>><<<<<<<--------------</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">Feb 2 22:08:37 SERVER-ONE ipsec_setup: Stopping Openswan IPsec...</font></div><div><font class="Apple-style-span" face="'courier new', monospace">Feb 2 22:08:38 SERVER-ONE ipsec_setup: ...Openswan IPsec stopped</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">Feb 2 22:08:44 SERVER-ONE ipsec_setup: Starting Openswan IPsec U2.6.21/K2.6.18-194.32.1.el5...</font></div><div><font class="Apple-style-span" face="'courier new', monospace">Feb 2 22:08:44 SERVER-ONE ipsec_setup: Using NETKEY(XFRM) stack</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">Feb 2 22:08:44 SERVER-ONE ipsec_setup: Command line is not complete. Try option "help"</font></div><div><font class="Apple-style-span" face="'courier new', monospace">Feb 2 22:08:44 SERVER-ONE ipsec_setup: ...Openswan IPsec started</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">Feb 2 22:08:44 SERVER-ONE pluto: adjusting ipsec.d to /etc/ipsec.d</font></div><div><font class="Apple-style-span" face="'courier new', monospace">Feb 2 22:08:44 SERVER-ONE ipsec__plutorun: adjusting ipsec.d to /etc/ipsec.d</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">Feb 2 22:08:44 SERVER-ONE ipsec__plutorun: 002 loading certificate from vpnca</font></div><div><font class="Apple-style-span" face="'courier new', monospace">Feb 2 22:08:44 SERVER-ONE ipsec__plutorun: 002 loading certificate from HuiNanNy</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">Feb 2 22:08:44 SERVER-ONE ipsec__plutorun: 002 added connection description "linux-to-linux"</font></div><div><font class="Apple-style-span" face="'courier new', monospace">Feb 2 22:08:44 SERVER-ONE ipsec__plutorun: 104 "linux-to-linux" #1: STATE_MAIN_I1: initiate</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">-------------->>>>>>><<<<<<<--------------</font></div><div><font class="Apple-style-span" face="'courier new', monospace"><br>
</font></div><div><font class="Apple-style-span" face="'courier new', monospace"><br></font></div><div><font class="Apple-style-span" face="'courier new', monospace"> IPsec Log on the Astaro (right) side</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">-------------->>>>>>><<<<<<<--------------</font></div><div><font class="Apple-style-span" face="'courier new', monospace">2011:02:02-16:06:20 astaro pluto[28743]: loaded private key from 'HuiNanNy.pem'</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">2011:02:02-16:06:20 astaro pluto[28743]: loaded host certificate from '/etc/ipsec.d/certs/HuiNanNy.pem'</font></div><div><font class="Apple-style-span" face="'courier new', monospace">2011:02:02-16:06:20 astaro pluto[28743]: loaded host certificate from '/etc/ipsec.d/certs/REF_eGfDyXnwdH.pem'</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">2011:02:02-16:06:20 astaro pluto[28743]: added connection description "S_Centos-VPN"</font></div><div><font class="Apple-style-span" face="'courier new', monospace">2011:02:02-16:06:20 astaro pluto[28743]: "S_Centos-VPN" #1: initiating Main Mode</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">2011:02:02-16:06:20 astaro pluto[28743]: added connection description "X_Centos-VPN"</font></div><div><font class="Apple-style-span" face="'courier new', monospace">2011:02:02-16:06:20 astaro pluto[28743]: "S_Centos-VPN" #1: ignoring Vendor ID payload [4f457e717f6b5a4e727d576b]</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">2011:02:02-16:06:20 astaro pluto[28743]: "S_Centos-VPN" #1: received Vendor ID payload [Dead Peer Detection]</font></div><div><font class="Apple-style-span" face="'courier new', monospace">2011:02:02-16:06:20 astaro pluto[28743]: "S_Centos-VPN" #1: received Vendor ID payload [RFC 3947]</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">2011:02:02-16:06:20 astaro pluto[28743]: "S_Centos-VPN" #1: enabling possible NAT-traversal with method 3</font></div><div><font class="Apple-style-span" face="'courier new', monospace">2011:02:02-16:06:20 astaro pluto[28743]: "S_Centos-VPN" #1: NAT-Traversal: Result using RFC 3947: no NAT detected</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">2011:02:02-16:06:20 astaro pluto[28743]: "S_Centos-VPN" #1: we have a cert and are sending it</font></div><div><font class="Apple-style-span" face="'courier new', monospace">2011:02:02-16:06:20 astaro pluto[28743]: "S_Centos-VPN" #1: next payload type of ISAKMP Hash Payload has an unknown value: 24</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">2011:02:02-16:06:20 astaro pluto[28743]: "S_Centos-VPN" #1: malformed payload in packet</font></div><div><font class="Apple-style-span" face="'courier new', monospace">2011:02:02-16:06:30 astaro pluto[28743]: "S_Centos-VPN" #1: discarding duplicate packet; already STATE_MAIN_I3</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">2011:02:02-16:06:30 astaro pluto[28743]: "S_Centos-VPN" #1: next payload type of ISAKMP Hash Payload has an unknown value: 53</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">2011:02:02-16:06:30 astaro pluto[28743]: "S_Centos-VPN" #1: malformed payload in packet</font></div><div><font class="Apple-style-span" face="'courier new', monospace">2011:02:02-16:06:43 astaro pluto[28743]: packet from <a href="http://10.170.2.150:500">10.170.2.150:500</a>: ignoring Vendor ID payload [4f457e717f6b5a4e727d576b]</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">2011:02:02-16:06:43 astaro pluto[28743]: packet from <a href="http://10.170.2.150:500">10.170.2.150:500</a>: received Vendor ID payload [Dead Peer Detection]</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">2011:02:02-16:06:43 astaro pluto[28743]: packet from <a href="http://10.170.2.150:500">10.170.2.150:500</a>: received Vendor ID payload [RFC 3947]</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">2011:02:02-16:06:43 astaro pluto[28743]: packet from <a href="http://10.170.2.150:500">10.170.2.150:500</a>: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03]</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">2011:02:02-16:06:43 astaro pluto[28743]: packet from <a href="http://10.170.2.150:500">10.170.2.150:500</a>: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n]</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">2011:02:02-16:06:43 astaro pluto[28743]: packet from <a href="http://10.170.2.150:500">10.170.2.150:500</a>: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02]</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">2011:02:02-16:06:43 astaro pluto[28743]: packet from <a href="http://10.170.2.150:500">10.170.2.150:500</a>: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-00]</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">2011:02:02-16:06:43 astaro pluto[28743]: "S_Centos-VPN" #2: responding to Main Mode</font></div><div><font class="Apple-style-span" face="'courier new', monospace">2011:02:02-16:06:43 astaro pluto[28743]: "S_Centos-VPN" #2: NAT-Traversal: Result using RFC 3947: no NAT detected</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">2011:02:02-16:06:43 astaro pluto[28743]: "S_Centos-VPN" #2: Peer ID is ID_DER_ASN1_DN: 'CN=vpnca'</font></div><div><font class="Apple-style-span" face="'courier new', monospace">2011:02:02-16:06:43 astaro pluto[28743]: "S_Centos-VPN" #2: crl not found</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">2011:02:02-16:06:43 astaro pluto[28743]: "S_Centos-VPN" #2: certificate status unknown</font></div><div><font class="Apple-style-span" face="'courier new', monospace">2011:02:02-16:06:43 astaro pluto[28743]: "S_Centos-VPN" #2: signature check for 'CN=vpnca' failed: wrong key?; tried 1</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">2011:02:02-16:06:43 astaro pluto[28743]: "S_Centos-VPN" #2: sending encrypted notification INVALID_KEY_INFORMATION to <a href="http://10.170.2.150:500">10.170.2.150:500</a></font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">2011:02:02-16:06:43 astaro pluto[28743]: "S_Centos-VPN" #2: Informational Exchange message must be encrypted</font></div><div><font class="Apple-style-span" face="'courier new', monospace">2011:02:02-16:06:50 astaro pluto[28743]: "S_Centos-VPN" #1: discarding duplicate packet; already STATE_MAIN_I3</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">2011:02:02-16:06:50 astaro pluto[28743]: "S_Centos-VPN" #1: next payload type of ISAKMP Hash Payload has an unknown value: 142</font></div>
<div><font class="Apple-style-span" face="'courier new', monospace">2011:02:02-16:06:50 astaro pluto[28743]: "S_Centos-VPN" #1: malformed payload in packet</font></div><div><font class="Apple-style-span" face="'courier new', monospace">-------------->>>>>>><<<<<<<--------------</font></div>
</div>