linux-ipsec: Re: INTEROP: Pluto w/SSH Main mode works, Quick mode fails

| To: linux-ipsec@clinet.fi
| Date: 	Fri, 6 Mar 1998 13:45:36 -0500
| From: Hugh Daniel 
| 
|   The subject line says it all.  Go for it folks.

If you scan the log, you will see where things went wrong:

| unsupported payload type 4 ISAKMP_NEXT_KE received in Quick Mode from 172.26.216.2, port 1500

Pluto doesn't support PFS in quick mode (the Key Exchange Payload during Quick Mode is for PFS). A known limitation.

>From then on, Pluto and SSH are talking past each other.

I tried SSH's ISAKMP/Oakley test page before I shipped you this Pluto snapshot. Pluto worked as a responder, at least for the cases I tested.

I couldn't get SSH's to work as a responder (it crashed: "Abnormal program termination, something wrong here"). I have emailed them about this (several days ago), but I bet they were on vacation somewhere in North Carolina :-)

Among other things, this shows that it would have been useful for me to be in better (more immediate) contact when these snags come up.

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related lists.freeswan.org Links 1998-fall 1998-spring 1998-summer 1998-winter 1999-winter announce briefs bugs design freeswan-list hipsec ietf-sectest users users-admin Request more information about Pantek

Hugh Redelmeier
hugh@mimosa.com voice: +1 416 482-8253 Received on Fri Mar 6 17:42:14 1998