[Swan] 3.15 OE problem - Can not opportunistically initiate... DNS query problem

[Paul Wouters]

On Thu, 7 Jun 2018, Matthew Johnson wrote:

> I'm trying to use opportunistic encryption with 3.15 (available in CentOS 6 repos), but running in to the following error (at least I
> think this is my error):

Please pick a newer release to use Opportunistic IPsec. You can find
newer builds for CentOS6 on our libreswan repository at
https://download,libreswan.org/binaries/

>         narrowing=yes

You should not need narrowing unless you need to support it through NAT.

> As far as I know, my configuration should eliminate the need to query DNS for a key.

Yeah it should. Please pick 3.23 (or a 3.24rc candidate)

Paul