[Openswan Users] config question

Paul Wouters paul at xelerance.com
Wed Jun 8 16:23:20 CEST 2005


On Wed, 8 Jun 2005, david p wrote:

> [root at dhcp203 private]# ipsec auto --up testvpnda
> 104 "testvpnda" #1: STATE_MAIN_I1: initiate
> 106 "testvpnda" #1: STATE_MAIN_I2: sent MI2, expecting MR2
> 108 "testvpnda" #1: STATE_MAIN_I3: sent MI3, expecting MR3
> 010 "testvpnda" #1: STATE_MAIN_I3: retransmission; will wait 20s for response
> 003 "testvpnda" #1: we require peer to have ID '195.212.109.202', but
> peer declares 'C=fr, ST=ile-de-france, L=paris, O=toto,
> CN=user01desuri, E=ngc1976.m42 at caramail.com'
> 218 "testvpnda" #1: STATE_MAIN_I3: INVALID_ID_INFORMATION
>
> Why I have to specify the "rightid" to make the VPN up ?
> why  specify a certificat by "rightcert" does not work ?

Did all certificates load properly? What does ispec auto --listall say on
both ends?

Paul


More information about the Users mailing list