Re: [Users] Not Receiving MR3 response.

From: Andreas Steffen (andreas.steffen_at_strongsec.net)
Date: Tue Sep 17 2002 - 17:37:50 CEST


  I found the following error in your oakley.log:

  9-17: 10:58:00:24c Error in CertStrToName -2146885597
  9-17: 10:58:00:24c Failed to get issuer DN
  9-17: 10:58:00:24c Blew DN convertion

Does your issuer Distinguished Name which is the subject DN of
the CA certifacte contain some special characters? Windows 2000
and XP are known to have this problem.

Regards

Andreas

Ihsan Turkmen wrote:
> Andreas..
> I have been tracing the following mail-thread between you and Gordon
> Haydon, because I was experiencing the same problem.
> Here is the result of a configuration dependent on opnssl.cnf file suggested
> by you (1024 bit, and some other special changes). This time, fragmentation
> problem seems to be fixed, but same MR3 responce trouble is keeping on.
> Problem seems to be on the windows side, but I don't know who will fix it..
>
> If you like , you can have a look at the attached log file. And this is the
> event-log message

======================================================================
Andreas Steffen e-mail: andreas.steffen_at_strongsec.com
strongSec GmbH phone: +41 76 340 25 56
Alter Zürichweg 20 home: http://www.strongsec.com
CH-8952 Schlieren (Switzerland)
==========================================[strong internet security]==

_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users



This archive was generated by hypermail 2.1.4 : Wed Sep 18 2002 - 05:20:11 CEST