Re: isakmpd question

["Peter Galbavy" <peter.galbavy@knowtion.net>]

Waldemar Brodkorb wrote:
> I do not know why this happens, but I yesterday encountered the same
> problem with OpenBSD 3.5 as Client. Server is OpenS/WAN 2.2 which
> accepts 3DES and AES in Phase1 and Phase2.
> 3DES works fine, but AES fails with the same problem.
> Other Clients like racoon are working fine with AES, so I think
> its a configuration mistake or bug in isakmpd.

Talking out of my posterior maybe, but I think I recall there was some issue 
a long time ago with the wrong value being used in the negotiation for AES. 
OpenBSD fixed it, but perhaps others didn't. This is searching time against 
source-changes...

Peter