Thursday, November 30, 2017

Re: Testing IKEv2 with Android devices

On 2017-11-29, C. L. Martinez <carlopmart@gmail.com> wrote:
> On Wed, Nov 29, 2017 at 9:33 AM, Stuart Henderson <stu@spacehopper.org> wrote:
>> On 2017-11-26, C. L. Martinez <carlopmart@gmail.com> wrote:
>>>
>>> Ok, it is seems the prolem is that iked(8) does not know how to perform Diffie-Hellman group negotiation:
>>>
>>> https://marc.info/?l=openbsd-tech&m=151136800328145&w=2
>>>
>>> Am I correct? What is the current status for Tim's fix?
>>
>> patrick@ has been following this rabbit hole, try his latest diff.
>>
>
> Thanks Stuart. Are you referring to this one:
> https://marc.info/?l=openbsd-tech&m=151187345915827&w=2?

I think you'll need the "don't include DH transform in IKE_AUTH msgs"
one as well. But basically just look for all of his recent tech@ mails
about iked.

No comments:

Post a Comment