<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p>Ok that's noted thx.</p>
<p>BTW do you have an idea what the STATE_MAIN_I3 state i'm stuck
is? I guess it's the state where you send your PSK key and are
waiting for the other part to authenticate it, but I could not
find any doc on this. The IKEv2 RFC does not mention that neither,
nor the libreswan doc
(<a class="moz-txt-link-freetext" href="https://libreswan.org/wiki/Pluto_internals">https://libreswan.org/wiki/Pluto_internals</a>). Would be great to
have somewhere the mapping between internal libreswan states/state
machine and the IKE PDUs spec or something. This would may be give
a clue of what's happening. Even better in my case would
potentially be a more explicit message...don't know....<br>
</p>
<div class="moz-cite-prefix">On 4/17/19 11:37 AM, Tuomo Soini wrote:<br>
</div>
<blockquote type="cite"
cite="mid:20190417123716.579f038d@tuomo.foobar.fi">
<pre class="moz-quote-pre" wrap="">On Wed, 17 Apr 2019 11:21:42 +0200
Mathieu Rossignol <a class="moz-txt-link-rfc2396E" href="mailto:mathieu.rossignol@hurence.com"><mathieu.rossignol@hurence.com></a> wrote:
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">Hi Tuomo,
Thank you very much for your answer.
My last setence was malformed (I meant 'like if the key was invalid')
and in fact I also realized in between that when you change the PSK
file, you must restart the dameon in order to have it taken into
account. With that test (removing the key file), I saw a different
behaviour as expected (no suitable key found). I have also requested
a contact for the other part (VPN other side) to tell me what's wrong
in their logs. Still waiting for an answer. Will follow up if any
news. Many thanks.
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">
You can force rereading psk with command 'ipsec auto --rereadsecrets'
without need for restart.
</pre>
</blockquote>
<div class="moz-signature">-- <br>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<title></title>
<meta name="generator" content="LibreOffice 5.1.6.2 (Linux)">
<meta name="created" content="2019-02-15T12:11:50.812771604">
<meta name="changed" content="2019-02-15T12:13:29.858868340">
<p style="margin-bottom: 0in"><font face="FreeSans"><font
style="font-size: 10pt" size="2">
<b>Mathieu Rossignol</b><br>
<b>Architecte/Développeur Big Data</b><br>
<br>
<a href="mailto:mathieu.rossignol@hurence.com">mathieu.rossignol@hurence.com</a>
| +33 (0)6 63646410
<br>
<b>Hurence
SAS</b><br>
400 Chemin des Longs Prés<br>
38660 LUMBIN, France
<br>
<a href="http://www.hurence.com/">http://www.hurence.com</a>
</font></font></p>
<p style="margin-bottom: 0in"><img
src="cid:part3.BF267856.88E11216@hurence.com" name="Image1"
height="49" border="0" align="bottom" width="46">
</p>
</div>
</body>
</html>