--- west.console.txt 2019-08-24 18:12:56.230675441 +0000 +++ OUTPUT/west.console.txt 2019-08-26 13:14:09.030101549 +0000 @@ -23,10 +23,8 @@ 1v2 "san" #1: initiate 1v2 "san" #1: STATE_PARENT_I1: sent v2I1, expected v2R1 1v2 "san" #2: STATE_PARENT_I2: sent v2I2, expected v2R2 {auth=IKEv2 cipher=AES_GCM_16_256 integ=n/a prf=HMAC_SHA2_512 group=MODP2048} -002 "san" #2: certificate verified OK: E=user-east@testing.libreswan.org,CN=east.testing.libreswan.org,OU=Test Department,O=Libreswan,L=Toronto,ST=Ontario,C=CA -003 "san" #2: ID_DER_ASN1_DN 'E=user-east@testing.libreswan.org,CN=east.testing.libreswan.org,OU=Test Department,O=Libreswan,L=Toronto,ST=Ontario,C=CA' does not match expected 'C=CA, ST=Ontario, L=Toronto, O=Libreswan, OU=Test Department, CN=NOTeast.testing.libreswan.org, E=user-NOTeast@testing.libreswan.org' -002 "san" #2: Peer public key SubjectAltName does not match peer ID for this connection -002 "san" #2: X509: CERT payload does not match connection ID +002 "san" #2: IKE SA authentication request rejected by peer: AUTHENTICATION_FAILED +000 "san" #2: scheduling retry attempt 1 of an unlimited number, but releasing whack west # echo "done" done @@ -36,7 +34,6 @@ grep "ID type" /tmp/pluto.log | ID type: ID_DER_ASN1_DN (0x9) | ID type: ID_DER_ASN1_DN (0x9) -| ID type: ID_DER_ASN1_DN (0x9) west # grep "RSA authentication failed" /tmp/pluto.log west #