SHOW:
|
|
- or go back to the newest paste.
| 1 | - | ty Ltd" from '/etc/ipsec.d/cacerts/ca.crt' |
| 1 | + | Nov 30 22:36:12 ip-172-31-25-2 charon: 00[DMN] Starting IKE charon daemon (strongSwan 5.1.2, Linux 3.13.0-36-generic, x86_64) |
| 2 | Nov 30 22:36:12 ip-172-31-25-2 charon: 00[CFG] loading ca certificates from '/etc/ipsec.d/cacerts' | |
| 3 | Nov 30 22:36:12 ip-172-31-25-2 charon: 00[CFG] loaded ca certificate "C=AU, ST=Some-State, O=Internet Widgits Pty Ltd" from '/etc/ipsec.d/cacerts/ca.crt' | |
| 4 | Nov 30 22:36:12 ip-172-31-25-2 charon: 00[CFG] loading aa certificates from '/etc/ipsec.d/aacerts' | |
| 5 | Nov 30 22:36:12 ip-172-31-25-2 charon: 00[CFG] loading ocsp signer certificates from '/etc/ipsec.d/ocspcerts' | |
| 6 | Nov 30 22:36:12 ip-172-31-25-2 charon: 00[CFG] loading attribute certificates from '/etc/ipsec.d/acerts' | |
| 7 | Nov 30 22:36:12 ip-172-31-25-2 charon: 00[CFG] loading crls from '/etc/ipsec.d/crls' | |
| 8 | Nov 30 22:36:12 ip-172-31-25-2 charon: 00[CFG] loading secrets from '/etc/ipsec.secrets' | |
| 9 | Nov 30 22:36:12 ip-172-31-25-2 charon: 00[CFG] loaded IKE secret for 76.126.165.62 %any | |
| 10 | Nov 30 22:36:12 ip-172-31-25-2 charon: 00[CFG] loaded IKE secret for app | |
| 11 | Nov 30 22:36:12 ip-172-31-25-2 charon: 00[CFG] loaded EAP secret for app | |
| 12 | Nov 30 22:36:12 ip-172-31-25-2 charon: 00[CFG] loaded IKE secret for %any | |
| 13 | Nov 30 22:36:12 ip-172-31-25-2 charon: 00[LIB] loaded plugins: charon test-vectors aes rc2 sha1 sha2 md4 md5 rdrand random nonce x509 revocation constraints pkcs1 pkcs7 pkcs8 pkcs12 pem openssl xcbc cmac hmac ctr ccm gcm attr kernel-netlink resolve socket-default stroke updown eap-identity eap-mschapv2 addrblock | |
| 14 | Nov 30 22:36:12 ip-172-31-25-2 charon: 00[LIB] unable to load 5 plugin features (5 due to unmet dependencies) | |
| 15 | Nov 30 22:36:12 ip-172-31-25-2 charon: 00[LIB] dropped capabilities, running as uid 0, gid 0 | |
| 16 | Nov 30 22:36:12 ip-172-31-25-2 charon: 00[JOB] spawning 16 worker threads | |
| 17 | Nov 30 22:36:12 ip-172-31-25-2 charon: 11[CFG] received stroke: add connection 'vpn' | |
| 18 | Nov 30 22:36:12 ip-172-31-25-2 charon: 11[CFG] left nor right host is our side, assuming left=local | |
| 19 | Nov 30 22:36:12 ip-172-31-25-2 charon: 11[CFG] added configuration 'vpn' | |
| 20 | Nov 30 22:37:08 ip-172-31-25-2 charon: 13[NET] received packet: from 76.126.165.62[53499] to 172.31.25.2[500] (996 bytes) | |
| 21 | Nov 30 22:37:08 ip-172-31-25-2 charon: 13[ENC] parsed IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N((16430)) ] | |
| 22 | Nov 30 22:37:08 ip-172-31-25-2 charon: 13[IKE] 76.126.165.62 is initiating an IKE_SA | |
| 23 | Nov 30 22:37:08 ip-172-31-25-2 charon: 13[IKE] local host is behind NAT, sending keep alives | |
| 24 | Nov 30 22:37:08 ip-172-31-25-2 charon: 13[IKE] remote host is behind NAT | |
| 25 | Nov 30 22:37:08 ip-172-31-25-2 charon: 13[ENC] generating IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(MULT_AUTH) ] | |
| 26 | Nov 30 22:37:08 ip-172-31-25-2 charon: 13[NET] sending packet: from 172.31.25.2[500] to 76.126.165.62[53499] (440 bytes) | |
| 27 | Nov 30 22:37:09 ip-172-31-25-2 charon: 14[NET] received packet: from 76.126.165.62[55460] to 172.31.25.2[4500] (3516 bytes) | |
| 28 | Nov 30 22:37:09 ip-172-31-25-2 charon: 14[ENC] parsed IKE_AUTH request 1 [ IDi N(INIT_CONTACT) CERTREQ CPRQ(ADDR ADDR6 DNS DNS6) N(ESP_TFC_PAD_N) SA TSi TSr N(MOBIKE_SUP) N(ADD_6_ADDR) N(ADD_6_ADDR) N(MULT_AUTH) N(EAP_ONLY) ] | |
| 29 | Nov 30 22:37:09 ip-172-31-25-2 charon: 14[IKE] received cert request for "C=AU, ST=Some-State, O=Internet Widgits Pty Ltd" | |
| 30 | Nov 30 22:37:09 ip-172-31-25-2 charon: 14[IKE] received 148 cert requests for an unknown ca | |
| 31 | Nov 30 22:37:09 ip-172-31-25-2 charon: 14[CFG] looking for peer configs matching 172.31.25.2[%any]...76.126.165.62[app] | |
| 32 | Nov 30 22:37:09 ip-172-31-25-2 charon: 14[CFG] selected peer config 'vpn' | |
| 33 | Nov 30 22:37:09 ip-172-31-25-2 charon: 14[IKE] peer requested EAP, config inacceptable | |
| 34 | Nov 30 22:37:09 ip-172-31-25-2 charon: 14[CFG] no alternative config found | |
| 35 | Nov 30 22:37:09 ip-172-31-25-2 charon: 14[IKE] received ESP_TFC_PADDING_NOT_SUPPORTED, not using ESPv3 TFC padding | |
| 36 | Nov 30 22:37:09 ip-172-31-25-2 charon: 14[IKE] peer supports MOBIKE | |
| 37 | Nov 30 22:37:09 ip-172-31-25-2 charon: 14[ENC] generating IKE_AUTH response 1 [ N(AUTH_FAILED) ] | |
| 38 | Nov 30 22:37:09 ip-172-31-25-2 charon: 14[NET] sending packet: from 172.31.25.2[4500] to 76.126.165.62[55460] (76 bytes) |
