<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hi, Tuomo,</p>
<p>Unfortunately, even with Windows 10 22H2 release, there is no
progress on ms-dh-downgrade problem.</p>
<p>The sessions die after a couple of runs of the Ookla speedtest.</p>
<p>Here are the session logs without and with ms-dh-downgrade:</p>
<p>
<a class="moz-txt-link-freetext" href="https://domac.alu.hr/~mtodorov/tmp/ikev2-20221103-no-dh-downgrade-01.log">https://domac.alu.hr/~mtodorov/tmp/ikev2-20221103-no-dh-downgrade-01.log</a></p>
<p>
<a class="moz-txt-link-freetext" href="https://domac.alu.hr/~mtodorov/tmp/ikev2-20221103-with-dh-downgrade-04.log">https://domac.alu.hr/~mtodorov/tmp/ikev2-20221103-with-dh-downgrade-04.log</a></p>
<p>Probably it is better to install Strongswan windows client than
to expect native client to be fixed?<br>
(Maybe there is some additional tweak in registry needed?)</p>
<p>Thank you.<br>
</p>
<div class="moz-cite-prefix">On 11/3/2022 5:04 PM, Mirsad Goran
Todorovac wrote:<br>
</div>
<blockquote type="cite"
cite="mid:8d4269bb-4dde-4333-2e5b-fe2d8a3c344c@alu.unizg.hr">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<p>On 20.10.2022. 12:54, Tuomo Soini wrote:<br>
</p>
<blockquote type="cite"
cite="mid:20221020135420.40988871@tuomo.foobar.fi">
ms-dh-downgrade=yes
<pre class="moz-quote-pre" wrap="">This is not needed any more, Windows 10+ have been fixed to allow dh14
or dh19 without downgrade on rekey.</pre>
</blockquote>
<p>Unfortunately, my version of Windows 10 still breaks IPv4 VPN
connection under stress load (Ookla speedtest<br>
repeated a couple of times).</p>
<p><img src="cid:part1.PYj671E8.PgS0b89L@alu.unizg.hr" alt=""
class=""></p>
<p>Cheers.<br>
</p>
<pre class="moz-signature" cols="72">--
Mirsad Todorovac
System engineer
Faculty of Graphic Arts | Academy of Fine Arts
University of Zagreb
Republic of Croatia, the European Union
--
Sistem inženjer
Grafički fakultet | Akademija likovnih umjetnosti
Sveučilište u Zagrebu</pre>
</blockquote>
<pre class="moz-signature" cols="72">--
Mirsad Todorovac
Sistem inženjer
Grafički fakultet | Akademija likovnih umjetnosti
Sveučilište u Zagrebu
--
System engineer
Faculty of Graphic Arts | Academy of Fine Arts
University of Zagreb, Republic of Croatia
tel. +385 (0)1 3711 451
mob. +385 91 57 88 355</pre>
</body>
</html>