<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Dear Elison,<br>
<br>
Would you mind copy the original program/pluto/ikev1_aggr.c to a
safe place ? So that I am fully aware whehter this does make the
difference for you with your Netscreen peer, can you change<br>
<b><br>
from</b>, referring to the original code below:<br>
<br>
aggr_id_and_auth(md, <b>TRUE</b><br>
, aggr_inR1_outI2_continue,
kc);<br>
<b>to:</b><br>
<br>
aggr_id_and_auth(md, <b>FALSE</b><br>
, aggr_inR1_outI2_continue,
kc);<br>
<br>
???<br>
With TRUE, Libreswan is supposed to be the initiator of the VPN
connection. With FALSE, it is supposed to be the responder. Please !
Tell us whether this single change does make a difference.<br>
Best if accompanied with Libreswan traces. If it makes no
difference, reset this source file to the original.<br>
<br>
<b>Original code:</b><br>
static stf_status<br>
aggr_inR1_outI2_tail(struct msg_digest *md<br>
, struct key_continuation *kc)<br>
{<br>
struct state *const st = md->st;<br>
struct connection *c = st->st_connection;<br>
int auth_payload;<br>
<br>
/* HASH_R or SIG_R in */<br>
{<br>
stf_status r = aggr_id_and_auth(md, TRUE<br>
, aggr_inR1_outI2_continue,
kc);<br>
<br>
if (r != STF_OK)<br>
return r;<br>
}<br>
<br>
<pre class="moz-signature" cols="72">--
Philippe Vouters (Fontainebleau/France)
URL: <a class="moz-txt-link-freetext" href="http://vouters.dyndns.org/">http://vouters.dyndns.org/</a>
SIP: <a class="moz-txt-link-abbreviated" href="mailto:sip:Vouters@sip.linphone.org">sip:Vouters@sip.linphone.org</a></pre>
</body>
</html>