[Users] Getting there but still a little stuck

From: philt <philt(at)aiserve.net>
Date: Mon May 05 2003 - 10:45:18 EDT

Thank you all for the help. And sorry about comming to the list with syntax errors. Have to admit it was the leftcert= statement that took me further and I did not see that in any of my sample configs.  

My current problem is this  

104 "dowagiac-to-redoak" #1: STATE_MAIN_I1: initiate 
106 "dowagiac-to-redoak" #1: STATE_MAIN_I2: sent MI2, expecting MR2 
108 "dowagiac-to-redoak" #1: STATE_MAIN_I3: sent MI3, expecting MR3 
003 "dowagiac-to-redoak" #1: ignoring informational payload, type 

INVALID_KEY_INFORMATION   here is some barf from the host gateway  

May 6 07:32:34 redroute1 pluto[23713]: "vpn"[2] 12.47.77.160 #1: Peer ID is ID_FQDN: '@redroute1.redoakhealthcare.com' May 6 07:32:34 redroute1 pluto[23713]: "vpn"[2] 12.47.77.160 #1: Issuer CRL not found
May 6 07:32:34 redroute1 pluto[23713]: "vpn"[2] 12.47.77.160 #1: Issuer CRL not found
May 6 07:32:34 redroute1 pluto[23713]: "vpn"[2] 12.47.77.160 #1: Signature check (on @redroute1.redoakhealthcare.com) failed (wrong key?); tried *AwEAAdtW8
May 6 07:32:34 redroute1 pluto[23713]: "vpn"[2] 12.47.77.160 #1: sending notification INVALID_KEY_INFORMATION to 12.47.77.160:500

+ _________________________ date 
 
 
 

My connection information from the roadwarrior  

conn dowagiac-to-redoak

	left=%defaultroute 
	leftid=@redroute1.redoakhealthcare.com 
	authby=rsasig 
	keyexchange=ike 
	keyingtries=0 
	ikelifetime=240m 
	keylife=1080m 
	right=12.47.77.50 
	rightid=@redroute10.redoakhealthcare.com 
	leftrsasigkey=%cert 
	rightrsasigkey=%cert 
	auto=add 
 

Thanks again for your help.

-- 
Absolute Internet Services (
http://www.aiserve.net) 
_______________________________________________
Users mailing list
Users@lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users

Received on Tue May 6 00:29:58 2003