<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Dear Marc-Christian,<br>
<br>
If you succeed to make racoon in your iPhone work in <b>Mutual
RSA</b> mode, then the document you pointed out should apply to
the iPhone/Libreswan pair and SSL certificates.<br>
<br>
Yours truly,<br>
<pre class="moz-signature" cols="72">Philippe Vouters (Fontainebleau/France)
URL: <a class="moz-txt-link-freetext" href="http://vouters.dyndns.org/">http://vouters.dyndns.org/</a>
SIP: <a class="moz-txt-link-abbreviated" href="mailto:sip:Vouters@sip.linphone.org">sip:Vouters@sip.linphone.org</a></pre>
On 03/28/2014 04:06 PM, Marc-Christian Petersen wrote:<br>
</div>
<blockquote cite="mid:53358FF4.3050005@gmx.de" type="cite">
<pre wrap="">Hi Philippe,
Libreswan does not support Hybrid mode:
Mar 28 16:04:51 vpn pluto[28426]: "XAUTH-GROUP"[2] 1.2.3.4 #2: Pluto does not support HybridInitRSA authentication. Attribute OAKLEY_AUTHENTICATION_METHOD
so the iPhone lies.
Am 28.03.2014 um 15:45:55 Uhr schrieb Philippe Vouters <a class="moz-txt-link-rfc2396E" href="mailto:philippe.vouters@laposte.net"><philippe.vouters@laposte.net></a>:
</pre>
<blockquote type="cite">
<pre wrap="">The document you draw the attention onto on my Web site describes
Shrew/Libreswan running in Mutual PSK/RSA + XAuth + DHCP + PAM
Your trace left by racoon on your iPhone says:
racoon[16654]: [16654] ERROR: No SIG was passed, hybrid auth is enabled, but peer is no Xauth compliant
So I would set Shrew in hybrid mode and check whether this mode is indeed implemented in today's Libreswan V3.8.
A long time ago when I tested Shrew's hybrid mode, Libreswan was saying in my Fedora /var/log/secure:
#
# Hybrid RSA. Leads to
# Oct 11 16:53:00 victor pluto[12408]: "Philippe"[6] 192.168.1.3 #3: Pluto does not support HybridInitRSA authentication. Attribute OAKLEY_AUTHENTICATION_METHOD
# Oct 11 16:53:00 victor pluto[12408]: "Philippe"[6] 192.168.1.3 #3: no acceptable Oakley Transform
# Oct 11 16:53:00 victor pluto[12408]: | complete state transition with (null)
#
</pre>
</blockquote>
<pre wrap="">
</pre>
</blockquote>
<br>
</body>
</html>