[Swan] No PARENT proposal selected

Tuomo Soini tis at foobar.fi
Thu Dec 24 09:59:51 UTC 2015


On Thu, 24 Dec 2015 00:10:10 -0500 (EST)
Paul Wouters <paul at nohats.ca> wrote:

> It seems that is correct and Windows, at least in some configurations,
> only proposed modp1024 in IKEv2, which libreswan no longer allows in
> its default proposal. You will need an ike= line that matches the
> windows proposal, possibly: ike=aes128-sha1;modp1024

Sorry, that doesn't work. Windows wants aes256-sha2_256;modp1024.
I have all the details in log so I'll update wiki instructions for
windows ikev2 when I have time to test (next week).

-- 
Tuomo Soini <tis at foobar.fi>
Foobar Linux services
+358 40 5240030
Foobar Oy <http://foobar.fi/>


More information about the Swan mailing list