[Openswan Users] Re: [Users] connection between isampd and ipsec on linux and this error: "ignoring informational payload, type NO_PROPOSAL_CHOSEN"

Paul Wouters paul at xtdnet.nl
Wed Jan 21 18:18:36 CET 2004


On Wed, 21 Jan 2004, foren titze wrote:

> Jan 21 16:45:41 vpn-gate pluto[7467]: "testing-sub" #1: ignoring informational 
> payload, type NO_PROPOSAL_CHOSEN

This means both parties have no proposal in common. Usually this means one side
only wants to do X.509 certificates and the other side only wants to do raw RSA
keys, or it means they cannot agree on a certain algorith/cipher. Common is
offering only 1DES to a FreeS/WAN machine, which refuses to talk 1DES because 
it is trivial to brute-force.

You'll have to fix your configurations.

Paul



More information about the Users mailing list