[Swan] Problem with iPhone/iPad and XAUTH Group ID

Paul Wouters paul at nohats.ca
Fri Mar 28 17:25:33 EET 2014


On Fri, 28 Mar 2014, Marc-Christian Petersen wrote:

> Libreswan does not support Hybrid mode:
>
> Mar 28 16:04:51 vpn pluto[28426]: "XAUTH-GROUP"[2] 1.2.3.4 #2: Pluto does not support HybridInitRSA authentication.  Attribute OAKLEY_AUTHENTICATION_METHOD

The iphone should not be using hybrid mode. Be aware if you switch from
PSK to CERT configurations on your iphone, and you don't wipe the
PSK/ID information, your CERT connection will fail.

Paul


More information about the Swan mailing list