[Swan] what problem do I have here?

Marc Marc at f1-outsourcing.eu
Wed Feb 7 22:23:33 EET 2024


> 
> >> This is a win10 client. What problem do I have here?
> 
> >> Feb  6 21:47:42 test2 pluto[1]: "vpn-ikev2-crt"[32] x.x.x.x #320:
> >> 1:ESP=AES_GCM_C_128+AES_GCM_C_256-NONE-MODP2048-ENABLED+DISABLED
> 
> so we received a proposal like: esp=aes_gcm128,aes_gcm256 with DH14
> 
> but your esp= line does not seem to allow this. It means you have
> a non-default esp= line that doesn't include what windows wants.

I don't have an esp= configured and I am using Libreswan 4.12 on alpine

Is it possible to configure esp with something like 

esp={defaults}+aes_gcm256




More information about the Swan mailing list