Nov 30 22:36:12 ip-172-31-25-2 charon: 00[DMN] Starting IKE charon daemon (strongSwan 5.1.2, Linux 3.13.0-36-generic, x86_64)
Nov 30 22:36:12 ip-172-31-25-2 charon: 00[CFG] loading ca certificates from '/etc/ipsec.d/cacerts'
Nov 30 22:36:12 ip-172-31-25-2 charon: 00[CFG]   loaded ca certificate "C=AU, ST=Some-State, O=Internet Widgits Pty Ltd" from '/etc/ipsec.d/cacerts/ca.crt'
Nov 30 22:36:12 ip-172-31-25-2 charon: 00[CFG] loading aa certificates from '/etc/ipsec.d/aacerts'
Nov 30 22:36:12 ip-172-31-25-2 charon: 00[CFG] loading ocsp signer certificates from '/etc/ipsec.d/ocspcerts'
Nov 30 22:36:12 ip-172-31-25-2 charon: 00[CFG] loading attribute certificates from '/etc/ipsec.d/acerts'
Nov 30 22:36:12 ip-172-31-25-2 charon: 00[CFG] loading crls from '/etc/ipsec.d/crls'
Nov 30 22:36:12 ip-172-31-25-2 charon: 00[CFG] loading secrets from '/etc/ipsec.secrets'
Nov 30 22:36:12 ip-172-31-25-2 charon: 00[CFG]   loaded IKE secret for 76.126.165.62 %any
Nov 30 22:36:12 ip-172-31-25-2 charon: 00[CFG]   loaded IKE secret for app
Nov 30 22:36:12 ip-172-31-25-2 charon: 00[CFG]   loaded EAP secret for app
Nov 30 22:36:12 ip-172-31-25-2 charon: 00[CFG]   loaded IKE secret for %any
Nov 30 22:36:12 ip-172-31-25-2 charon: 00[LIB] loaded plugins: charon test-vectors aes rc2 sha1 sha2 md4 md5 rdrand random nonce x509 revocation constraints pkcs1 pkcs7 pkcs8 pkcs12 pem openssl xcbc cmac hmac ctr ccm gcm attr kernel-netlink resolve socket-default stroke updown eap-identity eap-mschapv2 addrblock
Nov 30 22:36:12 ip-172-31-25-2 charon: 00[LIB] unable to load 5 plugin features (5 due to unmet dependencies)
Nov 30 22:36:12 ip-172-31-25-2 charon: 00[LIB] dropped capabilities, running as uid 0, gid 0
Nov 30 22:36:12 ip-172-31-25-2 charon: 00[JOB] spawning 16 worker threads
Nov 30 22:36:12 ip-172-31-25-2 charon: 11[CFG] received stroke: add connection 'vpn'
Nov 30 22:36:12 ip-172-31-25-2 charon: 11[CFG] left nor right host is our side, assuming left=local
Nov 30 22:36:12 ip-172-31-25-2 charon: 11[CFG] added configuration 'vpn'
Nov 30 22:37:08 ip-172-31-25-2 charon: 13[NET] received packet: from 76.126.165.62[53499] to 172.31.25.2[500] (996 bytes)
Nov 30 22:37:08 ip-172-31-25-2 charon: 13[ENC] parsed IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N((16430)) ]
Nov 30 22:37:08 ip-172-31-25-2 charon: 13[IKE] 76.126.165.62 is initiating an IKE_SA
Nov 30 22:37:08 ip-172-31-25-2 charon: 13[IKE] local host is behind NAT, sending keep alives
Nov 30 22:37:08 ip-172-31-25-2 charon: 13[IKE] remote host is behind NAT
Nov 30 22:37:08 ip-172-31-25-2 charon: 13[ENC] generating IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(MULT_AUTH) ]
Nov 30 22:37:08 ip-172-31-25-2 charon: 13[NET] sending packet: from 172.31.25.2[500] to 76.126.165.62[53499] (440 bytes)
Nov 30 22:37:09 ip-172-31-25-2 charon: 14[NET] received packet: from 76.126.165.62[55460] to 172.31.25.2[4500] (3516 bytes)
Nov 30 22:37:09 ip-172-31-25-2 charon: 14[ENC] parsed IKE_AUTH request 1 [ IDi N(INIT_CONTACT) CERTREQ CPRQ(ADDR ADDR6 DNS DNS6) N(ESP_TFC_PAD_N) SA TSi TSr N(MOBIKE_SUP) N(ADD_6_ADDR) N(ADD_6_ADDR) N(MULT_AUTH) N(EAP_ONLY) ]
Nov 30 22:37:09 ip-172-31-25-2 charon: 14[IKE] received cert request for "C=AU, ST=Some-State, O=Internet Widgits Pty Ltd"
Nov 30 22:37:09 ip-172-31-25-2 charon: 14[IKE] received 148 cert requests for an unknown ca
Nov 30 22:37:09 ip-172-31-25-2 charon: 14[CFG] looking for peer configs matching 172.31.25.2[%any]...76.126.165.62[app]
Nov 30 22:37:09 ip-172-31-25-2 charon: 14[CFG] selected peer config 'vpn'
Nov 30 22:37:09 ip-172-31-25-2 charon: 14[IKE] peer requested EAP, config inacceptable
Nov 30 22:37:09 ip-172-31-25-2 charon: 14[CFG] no alternative config found
Nov 30 22:37:09 ip-172-31-25-2 charon: 14[IKE] received ESP_TFC_PADDING_NOT_SUPPORTED, not using ESPv3 TFC padding
Nov 30 22:37:09 ip-172-31-25-2 charon: 14[IKE] peer supports MOBIKE
Nov 30 22:37:09 ip-172-31-25-2 charon: 14[ENC] generating IKE_AUTH response 1 [ N(AUTH_FAILED) ]
Nov 30 22:37:09 ip-172-31-25-2 charon: 14[NET] sending packet: from 172.31.25.2[4500] to 76.126.165.62[55460] (76 bytes)