[Swan] OSX Good, Win10 Good, now Win7

Mr. Jan Walter hopping_hol at yahoo.com
Thu Jan 31 23:16:10 UTC 2019


 That's in the config already. Other ideas?
    On Thursday, January 31, 2019, 6:13:21 PM EST, Paul Wouters <paul at nohats.ca> wrote:  
 
 On Thu, 31 Jan 2019, Mr. Jan Walter wrote:

> A couple of differences with the machine certificate installation and how the system actually picks them up, userid at zzz.net
> makes extra double sure the machine can find the right client cert.
> 
> Set the registry DWORD for 2048 DH sets and now I get a policy error and NO_PROPOSAL_CHOSEN on re-key.

That is a known windows bug, try ms-dh-downgrade=yes

Paul
  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.libreswan.org/pipermail/swan/attachments/20190131/6bec89c0/attachment.html>


More information about the Swan mailing list