[Swan] Azure + LibreSwan

[Madden, Joe]

Thanks paul - I'll give it a try!

Cheers

Joe.

-----Original Message-----
From: Paul Wouters <paul at nohats.ca> 
Sent: 26 September 2018 14:45
To: Madden, Joe <Joe.Madden at mottmac.com>
Cc: swan at lists.libreswan.org
Subject: Re: [Swan] Azure + LibreSwan

On Wed, 26 Sep 2018, Madden, Joe wrote:

> Sep 26 10:33:24 gw pluto[788]: packet from #####:500: initial parent 
> SA message received on 87.85.199.82:500 but no connection has been 
> authorized with policy RSASIG+IKEV2_ALLOW
>
> The above line I suspect is the issue (Because we are not using RSK to authenticate.

That error can be a bit misleading as it could be other things that are not matching. You can try running with plutodebug=all which should log all the proposals at the time and hopefully that will show something.

I thought later versions of libreswan also logged the proposals in non-debug mode, so perhaps you are running an older version.

Paul