[Openswan Users] Linux (debian lenny) client to Checkpoint Firewall NGx R65 using certificates - secureclient ok, openswan ko - PAYLOAD_MALFORMED

[Ondrej Valousek]

Hi Luca,

As I said, it has nothing to do with the kernel so at least the IKE 
stage should work on your debian, too - no need to install CentOS.
Please do:
1) plutodebug="control parsing controlmore" ,restart ipsec and send me 
the whole logs from the daemon start
2) Launch Dashboard monitor and check for any messages here (the attempt 
for the IKE connection from your Debian should be listed). If not, 
enable logging for this connection.
3) consider installing the latest HFA for your Checkpoint firewall, mine 
is running HFA 4.

Cheers,
Ondrej

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/users/attachments/20100513/c4a204cb/attachment.html