[Openswan Users] Problems between Openswan 2.1.2 and VPN Tracker

[Paul Wouters]

On Wed, 2 Jun 2004, Brian Daniels wrote:

> and we have added the RSA key info to ipsec.secrets.
> 
> When we try to bring the connection up, the VPN Tracker client fails with 
> the following error:
> 2004-06-02 16:49:28: ERROR: oakley.c:1258:oakley_validate_auth(): no peer's 
> CERT payload found

add leftsendcr=always
 
> This setup used to work with Freeswan.  We have tried creating a new 
> connection from the ground up, a different client machine, the leftsendcert 
> directive and upgrading Openswan from 2.1.0 to 2.1.2 without success.  Any 
> suggestions appreciated!

If that really doesn't help, check/post the output of ipsec barf and ipsec
auto --listall.

Andperhaps check the time and certificate validities too.

Paul