- État Fermée
- Pourcentage achevé
- Type Anomalie
- Catégorie Services locaux → Serveur VPN
- Assignée à Personne
- Système d'exploitation Freebox Server V6 (Révolution)
- Sévérité Moyenne
- Priorité Haute
- Basée sur la version A PRECISER
- Due pour la version Non décidée
-
Échéance
Non décidée
- Votes
- Privée
Concerne le projet: Freebox Server (Ultra V9/ Pop V8/ Delta V7 / Revolution V6 / Mini 4K)
Ouverte par GE - 27/02/2024
Dernière modification par mmakassikis - 14/03/2024
Ouverte par GE - 27/02/2024
Dernière modification par mmakassikis - 14/03/2024
FS#39087 - Freebox Server 4.7.9 VPN Authentication Failed
Bonjour,
Je viens de redémarrer 2 fois ma freebox suite à mise à jour vers 4.7.9 afin de corriger le pb de connection IKE au server VPN mais j’ai toujours l’erreur “ERROR_AUTHENTICATION_FAILURE” dans les logs de connection avec StrongSwan.
Dans les logs de Strongswan, je vois bien un “certificate status is good” pour le certificat “Internet Security Resarch Group - ISRG Root X1” mais qui se termine par un “Authenciation Failure” juste aprés un “EAP_-MS-CHAPv2 failed with error”.
Chargement...
Activer les raccourcis clavier
- Alt + ⇧ Shift + l Se connecter/Se déconnecter
- Alt + ⇧ Shift + a Ouvrir une tâche
- Alt + ⇧ Shift + m Mes recherches
- Alt + ⇧ Shift + t Rechercher par ID de tâche
Liste des tâches
- o Ouvrir la tâche sélectionnée
- j Déplacer le curseur vers le bas
- k Déplacer le curseur vers le haut
Détails de la tâche
- n Tâche suivante
- p Tâche précédente
- Alt + ⇧ Shift + e ↵ Enter Modifier cette tâche
- Alt + ⇧ Shift + w Surveiller
- Alt + ⇧ Shift + y Fermer cette tâche
Édition de la tâche
- Alt + ⇧ Shift + s Enregistrer la tâche
Bonjour,
Je joins les logs de Strongswan si ca peut aider.
Feb 27 11:13:12 00[DMN] +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
Feb 27 11:13:12 00[DMN] Starting IKE service (strongSwan 5.9.13, Android 14 - UP1A.231005.007.S901BXXS7DXAC/2024-02-01, SM-S901B - samsung/r0sxeea/samsung, Linux 5.10.177-android12-9-27763393-abS901BXXS7DXAC, aarch64, org.strongswan.android)
Feb 27 11:13:12 00[LIB] providers loaded by OpenSSL: legacy default
Feb 27 11:13:12 00[LIB] loaded plugins: androidbridge charon android-log socket-default openssl nonce pkcs1 pem x509 xcbc kdf revocation eap-identity eap-mschapv2 eap-md5 eap-gtc eap-tls
Feb 27 11:13:12 00[JOB] spawning 16 worker threads
Feb 27 11:13:12 07[IKE] initiating IKE_SA android[1] to xx.xx.xx.xx
Feb 27 11:13:12 07[ENC] generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) N(HASH_ALG) N(REDIR_SUP) ]
Feb 27 11:13:12 07[NET] sending packet: from xx.xx.xx.xx[56635] to xx.xx.xx.xx[500] (948 bytes)
Feb 27 11:13:12 10[NET] received packet: from xx.xx.xx.xx[500] to xx.xx.xx.xx[56635] (280 bytes)
Feb 27 11:13:12 10[ENC] parsed IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) N(HASH_ALG) N(CHDLESS_SUP) N(MULT_AUTH) ]
Feb 27 11:13:12 10[CFG] selected proposal: IKE:AES_CBC_128/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/ECP_256
Feb 27 11:13:12 10[IKE] local host is behind NAT, sending keep alives
Feb 27 11:13:12 10[IKE] remote host is behind NAT
Feb 27 11:13:12 10[CFG] loaded crl issued by 'C=US, O=Internet Security Research Group, CN=ISRG Root X1'
Feb 27 11:13:12 10[IKE] sending cert request for "C=HU, L=Budapest, O=Microsec Ltd., CN=Microsec e-Szigno Root CA 2009, E=info@e-szigno.hu"
Feb 27 11:13:12 10[IKE] sending cert request for "C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2"
Feb 27 11:13:12 10[IKE] sending cert request for "C=TW, O=TAIWAN-CA, OU=Root CA, CN=TWCA Root Certification Authority"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, O=DigiCert, Inc., CN=DigiCert TLS RSA4096 Root G5"
Feb 27 11:13:12 10[IKE] sending cert request for "C=TN, O=Agence Nationale de Certification Electronique, CN=TunTrust Root CA"
Feb 27 11:13:12 10[IKE] sending cert request for "C=BE, O=GlobalSign nv-sa, CN=GlobalSign Root R46"
Feb 27 11:13:12 10[IKE] sending cert request for "C=JP, O=SECOM Trust.net, OU=Security Communication RootCA1"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, ST=Texas, L=Houston, O=SSL Corporation, CN=SSL.com Root Certification Authority ECC"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, O=Certainly, CN=Certainly Root R1"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, ST=Illinois, L=Chicago, O=Trustwave Holdings, Inc., CN=Trustwave Global ECC P384 Certification Authority"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, O=Internet Security Research Group, CN=ISRG Root X1"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, O=Google Trust Services LLC, CN=GTS Root R2"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, OU=www.xrampsecurity.com, O=XRamp Security Services Inc, CN=XRamp Global Certification Authority"
Feb 27 11:13:12 10[IKE] sending cert request for "C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 3 G3"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root G3"
Feb 27 11:13:12 10[IKE] sending cert request for "C=FR, O=Dhimyotis, OU=0002 48146308100036, CN=Certigna Root CA"
Feb 27 11:13:12 10[IKE] sending cert request for "C=CH, O=SwissSign AG, CN=SwissSign Silver CA - G2"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, O=Microsoft Corporation, CN=Microsoft ECC Root Certificate Authority 2017"
Feb 27 11:13:12 10[IKE] sending cert request for "C=CN, O=China Financial Certification Authority, CN=CFCA EV ROOT"
Feb 27 11:13:12 10[IKE] sending cert request for "C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication RootCA2"
Feb 27 11:13:12 10[IKE] sending cert request for "OU=GlobalSign Root CA - R6, O=GlobalSign, CN=GlobalSign"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=© 2015 Entrust, Inc. - for authorized use only, CN=Entrust Root Certification Authority - G4"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, O=AffirmTrust, CN=AffirmTrust Premium ECC"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Trusted Root G4"
Feb 27 11:13:12 10[IKE] sending cert request for "C=PL, O=Krajowa Izba Rozliczeniowa S.A., CN=SZAFIR ROOT CA2"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, O=Google Trust Services LLC, CN=GTS Root R1"
Feb 27 11:13:12 10[IKE] sending cert request for "C=IT, L=Milan, O=Actalis S.p.A./03358520967, CN=Actalis Authentication Root CA"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G3"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, ST=Texas, L=Houston, O=SSL Corporation, CN=SSL.com Root Certification Authority RSA"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, O=SecureTrust Corporation, CN=Secure Global CA"
Feb 27 11:13:12 10[IKE] sending cert request for "C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Trusted Network CA 2"
Feb 27 11:13:12 10[IKE] sending cert request for "C=DE, O=D-Trust GmbH, CN=D-TRUST EV Root CA 1 2020"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=© 2012 Entrust, Inc. - for authorized use only, CN=Entrust Root Certification Authority - EC1"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, OU=emSign PKI, O=eMudhra Inc, CN=emSign Root CA - C1"
Feb 27 11:13:12 10[IKE] sending cert request for "C=CN, O=iTrusChina Co.,Ltd., CN=vTrus Root CA"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, ST=Illinois, L=Chicago, O=Trustwave Holdings, Inc., CN=Trustwave Global Certification Authority"
Feb 27 11:13:12 10[IKE] sending cert request for "C=AT, O=e-commerce monitoring GmbH, CN=GLOBALTRUST 2020"
Feb 27 11:13:12 10[IKE] sending cert request for "C=RO, O=CERTSIGN SA, OU=certSIGN ROOT CA G2"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, O=IdenTrust, CN=IdenTrust Commercial Root CA 1"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, O=DigiCert, Inc., CN=DigiCert TLS ECC P384 Root G5"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., CN=Go Daddy Root Certificate Authority - G2"
Feb 27 11:13:12 10[IKE] sending cert request for "C=SK, L=Bratislava, O=Disig a.s., CN=CA Disig Root R2"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, O=AffirmTrust, CN=AffirmTrust Premium"
Feb 27 11:13:12 10[IKE] sending cert request for "C=GR, O=Hellenic Academic and Research Institutions CA, CN=HARICA TLS RSA Root CA 2021"
Feb 27 11:13:12 10[IKE] sending cert request for "C=CN, O=GUANG DONG CERTIFICATE AUTHORITY CO.,LTD., CN=GDCA TrustAUTH R5 ROOT"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, O=Amazon, CN=Amazon Root CA 2"
Feb 27 11:13:12 10[IKE] sending cert request for "C=ES, O=FNMT-RCM, OU=Ceres, 55:04:61=VATES-Q2826004J, CN=AC RAIZ FNMT-RCM SERVIDORES SEGUROS"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, O=SecureTrust Corporation, CN=SecureTrust CA"
Feb 27 11:13:12 10[IKE] sending cert request for "OU=GlobalSign ECC Root CA - R4, O=GlobalSign, CN=GlobalSign"
Feb 27 11:13:12 10[IKE] sending cert request for "C=NO, O=Buypass AS-983163327, CN=Buypass Class 2 Root CA"
Feb 27 11:13:12 10[IKE] sending cert request for "C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 1 G3"
Feb 27 11:13:12 10[IKE] sending cert request for "O=TeliaSonera, CN=TeliaSonera Root CA v1"
Feb 27 11:13:12 10[IKE] sending cert request for "C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA"
Feb 27 11:13:12 10[IKE] sending cert request for "C=JP, O=SECOM Trust Systems CO.,LTD., CN=Security Communication ECC RootCA1"
Feb 27 11:13:12 10[IKE] sending cert request for "C=IN, OU=emSign PKI, O=eMudhra Technologies Limited, CN=emSign Root CA - G1"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, O=Google Trust Services LLC, CN=GTS Root R3"
Feb 27 11:13:12 10[IKE] sending cert request for "C=CH, O=SwissSign AG, CN=SwissSign Gold CA - G2"
Feb 27 11:13:12 10[IKE] sending cert request for "C=BE, O=GlobalSign nv-sa, CN=GlobalSign Root E46"
Feb 27 11:13:12 10[IKE] sending cert request for "C=CH, O=WISeKey, OU=OISTE Foundation Endorsed, CN=OISTE WISeKey Global Root GC CA"
Feb 27 11:13:12 10[IKE] sending cert request for "C=TW, O=Chunghwa Telecom Co., Ltd., OU=ePKI Root Certification Authority"
Feb 27 11:13:12 10[IKE] sending cert request for "C=PL, O=Asseco Data Systems S.A., OU=Certum Certification Authority, CN=Certum Trusted Root CA"
Feb 27 11:13:12 10[IKE] sending cert request for "C=KR, O=NAVER BUSINESS PLATFORM Corp., CN=NAVER Global Root Certification Authority"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, O=Amazon, CN=Amazon Root CA 1"
Feb 27 11:13:12 10[IKE] sending cert request for "OU=GlobalSign ECC Root CA - R5, O=GlobalSign, CN=GlobalSign"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, O=AffirmTrust, CN=AffirmTrust Networking"
Feb 27 11:13:12 10[IKE] sending cert request for "C=CN, O=UniTrust, CN=UCA Global G2 Root"
Feb 27 11:13:12 10[IKE] sending cert request for "C=HK, O=Hongkong Post, CN=Hongkong Post Root CA 1"
Feb 27 11:13:12 10[IKE] sending cert request for "O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=© 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048)"
Feb 27 11:13:12 10[IKE] sending cert request for "C=FR, O=Dhimyotis, CN=Certigna"
Feb 27 11:13:12 10[IKE] sending cert request for "C=IN, OU=emSign PKI, O=eMudhra Technologies Limited, CN=emSign ECC Root CA - G3"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, O=Amazon, CN=Amazon Root CA 3"
Feb 27 11:13:12 10[IKE] sending cert request for "C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Trusted Network CA"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, O=Starfield Technologies, Inc., OU=Starfield Class 2 Certification Authority"
Feb 27 11:13:12 10[IKE] sending cert request for "CN=Atos TrustedRoot 2011, O=Atos, C=DE"
Feb 27 11:13:12 10[IKE] sending cert request for "OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign"
Feb 27 11:13:12 10[IKE] sending cert request for "C=DE, O=T-Systems Enterprise Services GmbH, OU=T-Systems Trust Center, CN=T-TeleSec GlobalRoot Class 2"
Feb 27 11:13:12 10[IKE] sending cert request for "C=TR, L=Gebze - Kocaeli, O=Turkiye Bilimsel ve Teknolojik Arastirma Kurumu - TUBITAK, OU=Kamu Sertifikasyon Merkezi - Kamu SM, CN=TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1"
Feb 27 11:13:12 10[IKE] sending cert request for "C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, O=Google Trust Services LLC, CN=GTS Root R4"
Feb 27 11:13:12 10[IKE] sending cert request for "C=ES, CN=Autoridad de Certificacion Firmaprofesional CIF A62634068"
Feb 27 11:13:12 10[IKE] sending cert request for "C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Certification Authority"
Feb 27 11:13:12 10[IKE] sending cert request for "C=ES, CN=Autoridad de Certificacion Firmaprofesional CIF A62634068"
Feb 27 11:13:12 10[IKE] sending cert request for "C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2 G3"
Feb 27 11:13:12 10[IKE] sending cert request for "C=CH, O=WISeKey, OU=OISTE Foundation Endorsed, CN=OISTE WISeKey Global Root GB CA"
Feb 27 11:13:12 10[IKE] sending cert request for "C=PL, O=Asseco Data Systems S.A., OU=Certum Certification Authority, CN=Certum EC-384 CA"
Feb 27 11:13:12 10[IKE] sending cert request for "C=TW, O=Chunghwa Telecom Co., Ltd., CN=HiPKI Root CA - G1"
Feb 27 11:13:12 10[IKE] sending cert request for "CN=ACCVRAIZ1, OU=PKIACCV, O=ACCV, C=ES"
Feb 27 11:13:12 10[IKE] sending cert request for "C=JP, O=SECOM Trust Systems CO.,LTD., CN=Security Communication RootCA3"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, O=Internet Security Research Group, CN=ISRG Root X2"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust ECC Certification Authority"
Feb 27 11:13:12 10[IKE] sending cert request for "C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO ECC Certification Authority"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, O=Amazon, CN=Amazon Root CA 4"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, O=IdenTrust, CN=IdenTrust Public Sector Root CA 1"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, O=Entrust, Inc., OU=www.entrust.net/CPS is incorporated by reference, OU=© 2006 Entrust, Inc., CN=Entrust Root Certification Authority"
Feb 27 11:13:12 10[IKE] sending cert request for "C=FI, O=Telia Finland Oyj, CN=Telia Root CA v2"
Feb 27 11:13:12 10[IKE] sending cert request for "C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, ST=Texas, L=Houston, O=SSL Corporation, CN=SSL.com EV Root Certification Authority ECC"
Feb 27 11:13:12 10[IKE] sending cert request for "C=DE, O=T-Systems Enterprise Services GmbH, OU=T-Systems Trust Center, CN=T-TeleSec GlobalRoot Class 3"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, ST=Texas, L=Houston, O=SSL Corporation, CN=SSL.com EV Root Certification Authority RSA R2"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2"
Feb 27 11:13:12 10[IKE] sending cert request for "C=CN, O=UniTrust, CN=UCA Extended Validation Root"
Feb 27 11:13:12 10[IKE] sending cert request for "C=DE, O=D-Trust GmbH, CN=D-TRUST Root Class 3 CA 2 EV 2009"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, O=Certainly, CN=Certainly Root E1"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, OU=emSign PKI, O=eMudhra Inc, CN=emSign ECC Root CA - C3"
Feb 27 11:13:12 10[IKE] sending cert request for "C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 3"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, O=Microsoft Corporation, CN=Microsoft RSA Root Certificate Authority 2017"
Feb 27 11:13:12 10[IKE] sending cert request for "serialNumber=G63287510, C=ES, O=ANF Autoridad de Certificacion, OU=ANF CA Raiz, CN=ANF Secure Server Root CA"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, O=The Go Daddy Group, Inc., OU=Go Daddy Class 2 Certification Authority"
Feb 27 11:13:12 10[IKE] sending cert request for "C=ES, O=IZENPE S.A., CN=Izenpe.com"
Feb 27 11:13:12 10[IKE] sending cert request for "C=GR, O=Hellenic Academic and Research Institutions CA, CN=HARICA TLS ECC Root CA 2021"
Feb 27 11:13:12 10[IKE] sending cert request for "C=HU, L=Budapest, O=Microsec Ltd., 55:04:61=VATHU-23584497, CN=e-Szigno Root CA 2017"
Feb 27 11:13:12 10[IKE] sending cert request for "C=HU, L=Budapest, O=NetLock Kft., OU=Tan??s??tv??nykiad??k (Certification Services), CN=NetLock Arany (Class Gold) F??tan??s??tv??ny"
Feb 27 11:13:12 10[IKE] sending cert request for "C=NO, O=Buypass AS-983163327, CN=Buypass Class 3 Root CA"
Feb 27 11:13:12 10[IKE] sending cert request for "C=CN, O=iTrusChina Co.,Ltd., CN=vTrus ECC Root CA"
Feb 27 11:13:12 10[IKE] sending cert request for "C=ES, O=FNMT-RCM, OU=AC RAIZ FNMT-RCM"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root G2"
Feb 27 11:13:12 10[IKE] sending cert request for "C=GR, L=Athens, O=Hellenic Academic and Research Institutions Cert. Authority, CN=Hellenic Academic and Research Institutions ECC RootCA 2015"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, ST=Illinois, L=Chicago, O=Trustwave Holdings, Inc., CN=Trustwave Global ECC P256 Certification Authority"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=© 2009 Entrust, Inc. - for authorized use only, CN=Entrust Root Certification Authority - G2"
Feb 27 11:13:12 10[IKE] sending cert request for "C=RO, O=certSIGN, OU=certSIGN ROOT CA"
Feb 27 11:13:12 10[IKE] sending cert request for "C=DE, O=D-Trust GmbH, CN=D-TRUST BR Root CA 1 2020"
Feb 27 11:13:12 10[IKE] sending cert request for "C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Root Certificate Authority - G2"
Feb 27 11:13:12 10[IKE] sending cert request for "C=TW, O=TAIWAN-CA, OU=Root CA, CN=TWCA Global Root CA"
Feb 27 11:13:12 10[IKE] sending cert request for "C=DE, O=D-Trust GmbH, CN=D-TRUST Root Class 3 CA 2 2009"
Feb 27 11:13:12 10[IKE] sending cert request for "C=HK, ST=Hong Kong, L=Hong Kong, O=Hongkong Post, CN=Hongkong Post Root CA 3"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, O=AffirmTrust, CN=AffirmTrust Commercial"
Feb 27 11:13:12 10[IKE] sending cert request for "C=JP, O=Japan Certification Services, Inc., CN=SecureSign RootCA11"
Feb 27 11:13:12 10[IKE] sending cert request for "C=GR, L=Athens, O=Hellenic Academic and Research Institutions Cert. Authority, CN=Hellenic Academic and Research Institutions RootCA 2015"
Feb 27 11:13:12 10[IKE] sending cert request for "C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2"
Feb 27 11:13:12 10[IKE] establishing CHILD_SA android{1}
Feb 27 11:13:12 10[ENC] generating IKE_AUTH request 1 [ IDi N(INIT_CONTACT) CERTREQ CPRQ(ADDR ADDR6 DNS DNS6) SA TSi TSr N(MOBIKE_SUP) N(NO_ADD_ADDR) N(MULT_AUTH) N(EAP_ONLY) N(MSG_ID_SYN_SUP) ]
Feb 27 11:13:12 10[ENC] splitting IKE message (3104 bytes) into 3 fragments
Feb 27 11:13:12 10[ENC] generating IKE_AUTH request 1 [ EF(1/3) ]
Feb 27 11:13:12 10[ENC] generating IKE_AUTH request 1 [ EF(2/3) ]
Feb 27 11:13:12 10[ENC] generating IKE_AUTH request 1 [ EF(3/3) ]
Feb 27 11:13:12 10[NET] sending packet: from xx.xx.xx.xx[37337] to xx.xx.xx.xx[4500] (1364 bytes)
Feb 27 11:13:12 10[NET] sending packet: from xx.xx.xx.xx[37337] to xx.xx.xx.xx[4500] (1364 bytes)
Feb 27 11:13:12 10[NET] sending packet: from xx.xx.xx.xx[37337] to xx.xx.xx.xx[4500] (532 bytes)
Feb 27 11:13:13 11[NET] received packet: from xx.xx.xx.xx[4500] to xx.xx.xx.xx[37337] (1236 bytes)
Feb 27 11:13:13 11[ENC] parsed IKE_AUTH response 1 [ EF(1/3) ]
Feb 27 11:13:13 11[ENC] received fragment #1 of 3, waiting for complete IKE message
Feb 27 11:13:13 12[NET] received packet: from xx.xx.xx.xx[4500] to xx.xx.xx.xx[37337] (1236 bytes)
Feb 27 11:13:13 12[ENC] parsed IKE_AUTH response 1 [ EF(2/3) ]
Feb 27 11:13:13 12[ENC] received fragment #2 of 3, waiting for complete IKE message
Feb 27 11:13:13 13[NET] received packet: from xx.xx.xx.xx[4500] to xx.xx.xx.xx[37337] (644 bytes)
Feb 27 11:13:13 13[ENC] parsed IKE_AUTH response 1 [ EF(3/3) ]
Feb 27 11:13:13 13[ENC] received fragment #3 of 3, reassembled fragmented IKE message (2976 bytes)
Feb 27 11:13:13 13[ENC] parsed IKE_AUTH response 1 [ IDr CERT CERT AUTH EAP/REQ/ID ]
Feb 27 11:13:13 13[IKE] received end entity cert "CN=amxband.freeboxos.fr"
Feb 27 11:13:13 13[IKE] received issuer cert "C=US, O=Let's Encrypt, CN=R3"
Feb 27 11:13:13 13[CFG] using certificate "CN=amxband.freeboxos.fr"
Feb 27 11:13:13 13[CFG] using untrusted intermediate certificate "C=US, O=Let's Encrypt, CN=R3"
Feb 27 11:13:13 13[CFG] using trusted ca certificate "C=US, O=Internet Security Research Group, CN=ISRG Root X1"
Feb 27 11:13:13 13[CFG] reached self-signed root ca with a path length of 1
Feb 27 11:13:13 13[CFG] checking certificate status of "CN=amxband.freeboxos.fr"
Feb 27 11:13:13 13[CFG] requesting ocsp status from 'http://r3.o.lencr.org' … Feb 27 11:13:13 13[CFG] ocsp response correctly signed by "C=US, O=Let's Encrypt, CN=R3"
Feb 27 11:13:13 13[CFG] ocsp response is valid: until Mar 05 10:07:58 2024
Feb 27 11:13:13 13[CFG] certificate status is good
Feb 27 11:13:13 13[CFG] checking certificate status of "C=US, O=Let's Encrypt, CN=R3"
Feb 27 11:13:13 13[CFG] using trusted certificate "C=US, O=Internet Security Research Group, CN=ISRG Root X1"
Feb 27 11:13:13 13[CFG] crl correctly signed by "C=US, O=Internet Security Research Group, CN=ISRG Root X1"
Feb 27 11:13:13 13[CFG] crl is valid: until Jan 05 00:59:59 2025
Feb 27 11:13:13 13[CFG] using cached crl
Feb 27 11:13:13 13[CFG] certificate status is good
Feb 27 11:13:13 13[IKE] authentication of 'amxband.freeboxos.fr' with RSA_EMSA_PKCS1_SHA2_256 successful
Feb 27 11:13:13 13[IKE] server requested EAP_IDENTITY (id 0x00), sending 'GE'
Feb 27 11:13:13 13[ENC] generating IKE_AUTH request 2 [ EAP/RES/ID ]
Feb 27 11:13:13 13[NET] sending packet: from xx.xx.xx.xx[37337] to xx.xx.xx.xx[4500] (80 bytes)
Feb 27 11:13:13 14[NET] received packet: from xx.xx.xx.xx[4500] to xx.xx.xx.xx[37337] (112 bytes)
Feb 27 11:13:13 14[ENC] parsed IKE_AUTH response 2 [ EAP/REQ/MSCHAPV2 ]
Feb 27 11:13:13 14[IKE] server requested EAP_MSCHAPV2 authentication (id 0xEB)
Feb 27 11:13:13 14[ENC] generating IKE_AUTH request 3 [ EAP/RES/MSCHAPV2 ]
Feb 27 11:13:13 14[NET] sending packet: from xx.xx.xx.xx[37337] to xx.xx.xx.xx[4500] (144 bytes)
Feb 27 11:13:15 09[IKE] retransmit 1 of request with message ID 3
Feb 27 11:13:15 09[NET] sending packet: from xx.xx.xx.xx[37337] to xx.xx.xx.xx[4500] (144 bytes)
Feb 27 11:13:15 08[NET] received packet: from xx.xx.xx.xx[4500] to xx.xx.xx.xx[37337] (128 bytes)
Feb 27 11:13:15 08[ENC] parsed IKE_AUTH response 3 [ EAP/REQ/MSCHAPV2 ]
Feb 27 11:13:15 08[IKE] EAP-MS-CHAPv2 failed with error ERROR_AUTHENTICATION_FAILURE: '(null)'
Feb 27 11:13:15 08[IKE] EAP_MSCHAPV2 method failed
Feb 27 11:13:15 08[ENC] generating INFORMATIONAL request 4 [ N(AUTH_FAILED) ]
Feb 27 11:13:15 08[NET] sending packet: from xx.xx.xx.xx[37337] to xx.xx.xx.xx[4500] (80 bytes)
Feb 27 11:13:25 00[DMN] +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
Feb 27 11:13:25 00[DMN] Starting IKE service (strongSwan 5.9.13, Android 14 - UP1A.231005.007.S901BXXS7DXAC/2024-02-01, SM-S901B - samsung/r0sxeea/samsung, Linux 5.10.177-android12-9-27763393-abS901BXXS7DXAC, aarch64, org.strongswan.android)
Feb 27 11:13:25 00[LIB] providers loaded by OpenSSL: default legacy
Feb 27 11:13:25 00[LIB] loaded plugins: androidbridge charon android-log socket-default openssl nonce pkcs1 pem x509 xcbc kdf revocation eap-identity eap-mschapv2 eap-md5 eap-gtc eap-tls
Feb 27 11:13:25 00[JOB] spawning 16 worker threads
Feb 27 11:13:25 07[IKE] initiating IKE_SA android[2] to xx.xx.xx.xx
Feb 27 11:13:25 07[ENC] generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) N(HASH_ALG) N(REDIR_SUP) ]
Feb 27 11:13:25 07[NET] sending packet: from xx.xx.xx.xx[59539] to xx.xx.xx.xx[500] (948 bytes)
Feb 27 11:13:26 14[NET] received packet: from xx.xx.xx.xx[500] to xx.xx.xx.xx[59539] (280 bytes)
Feb 27 11:13:26 14[ENC] parsed IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) N(HASH_ALG) N(CHDLESS_SUP) N(MULT_AUTH) ]
Feb 27 11:13:26 14[CFG] selected proposal: IKE:AES_CBC_128/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/ECP_256
Feb 27 11:13:26 14[IKE] local host is behind NAT, sending keep alives
Feb 27 11:13:26 14[IKE] remote host is behind NAT
Feb 27 11:13:26 14[CFG] loaded crl issued by 'C=US, O=Internet Security Research Group, CN=ISRG Root X1'
Feb 27 11:13:26 14[IKE] sending cert request for "C=HU, L=Budapest, O=Microsec Ltd., CN=Microsec e-Szigno Root CA 2009, E=info@e-szigno.hu"
Feb 27 11:13:26 14[IKE] sending cert request for "C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2"
Feb 27 11:13:26 14[IKE] sending cert request for "C=TW, O=TAIWAN-CA, OU=Root CA, CN=TWCA Root Certification Authority"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, O=DigiCert, Inc., CN=DigiCert TLS RSA4096 Root G5"
Feb 27 11:13:26 14[IKE] sending cert request for "C=TN, O=Agence Nationale de Certification Electronique, CN=TunTrust Root CA"
Feb 27 11:13:26 14[IKE] sending cert request for "C=BE, O=GlobalSign nv-sa, CN=GlobalSign Root R46"
Feb 27 11:13:26 14[IKE] sending cert request for "C=JP, O=SECOM Trust.net, OU=Security Communication RootCA1"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, ST=Texas, L=Houston, O=SSL Corporation, CN=SSL.com Root Certification Authority ECC"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, O=Certainly, CN=Certainly Root R1"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, ST=Illinois, L=Chicago, O=Trustwave Holdings, Inc., CN=Trustwave Global ECC P384 Certification Authority"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, O=Internet Security Research Group, CN=ISRG Root X1"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, O=Google Trust Services LLC, CN=GTS Root R2"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, OU=www.xrampsecurity.com, O=XRamp Security Services Inc, CN=XRamp Global Certification Authority"
Feb 27 11:13:26 14[IKE] sending cert request for "C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 3 G3"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root G3"
Feb 27 11:13:26 14[IKE] sending cert request for "C=FR, O=Dhimyotis, OU=0002 48146308100036, CN=Certigna Root CA"
Feb 27 11:13:26 14[IKE] sending cert request for "C=CH, O=SwissSign AG, CN=SwissSign Silver CA - G2"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, O=Microsoft Corporation, CN=Microsoft ECC Root Certificate Authority 2017"
Feb 27 11:13:26 14[IKE] sending cert request for "C=CN, O=China Financial Certification Authority, CN=CFCA EV ROOT"
Feb 27 11:13:26 14[IKE] sending cert request for "C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication RootCA2"
Feb 27 11:13:26 14[IKE] sending cert request for "OU=GlobalSign Root CA - R6, O=GlobalSign, CN=GlobalSign"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=© 2015 Entrust, Inc. - for authorized use only, CN=Entrust Root Certification Authority - G4"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, O=AffirmTrust, CN=AffirmTrust Premium ECC"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Trusted Root G4"
Feb 27 11:13:26 14[IKE] sending cert request for "C=PL, O=Krajowa Izba Rozliczeniowa S.A., CN=SZAFIR ROOT CA2"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, O=Google Trust Services LLC, CN=GTS Root R1"
Feb 27 11:13:26 14[IKE] sending cert request for "C=IT, L=Milan, O=Actalis S.p.A./03358520967, CN=Actalis Authentication Root CA"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G3"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, ST=Texas, L=Houston, O=SSL Corporation, CN=SSL.com Root Certification Authority RSA"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, O=SecureTrust Corporation, CN=Secure Global CA"
Feb 27 11:13:26 14[IKE] sending cert request for "C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Trusted Network CA 2"
Feb 27 11:13:26 14[IKE] sending cert request for "C=DE, O=D-Trust GmbH, CN=D-TRUST EV Root CA 1 2020"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=© 2012 Entrust, Inc. - for authorized use only, CN=Entrust Root Certification Authority - EC1"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, OU=emSign PKI, O=eMudhra Inc, CN=emSign Root CA - C1"
Feb 27 11:13:26 14[IKE] sending cert request for "C=CN, O=iTrusChina Co.,Ltd., CN=vTrus Root CA"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, ST=Illinois, L=Chicago, O=Trustwave Holdings, Inc., CN=Trustwave Global Certification Authority"
Feb 27 11:13:26 14[IKE] sending cert request for "C=AT, O=e-commerce monitoring GmbH, CN=GLOBALTRUST 2020"
Feb 27 11:13:26 14[IKE] sending cert request for "C=RO, O=CERTSIGN SA, OU=certSIGN ROOT CA G2"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, O=IdenTrust, CN=IdenTrust Commercial Root CA 1"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, O=DigiCert, Inc., CN=DigiCert TLS ECC P384 Root G5"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., CN=Go Daddy Root Certificate Authority - G2"
Feb 27 11:13:26 14[IKE] sending cert request for "C=SK, L=Bratislava, O=Disig a.s., CN=CA Disig Root R2"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, O=AffirmTrust, CN=AffirmTrust Premium"
Feb 27 11:13:26 14[IKE] sending cert request for "C=GR, O=Hellenic Academic and Research Institutions CA, CN=HARICA TLS RSA Root CA 2021"
Feb 27 11:13:26 14[IKE] sending cert request for "C=CN, O=GUANG DONG CERTIFICATE AUTHORITY CO.,LTD., CN=GDCA TrustAUTH R5 ROOT"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, O=Amazon, CN=Amazon Root CA 2"
Feb 27 11:13:26 14[IKE] sending cert request for "C=ES, O=FNMT-RCM, OU=Ceres, 55:04:61=VATES-Q2826004J, CN=AC RAIZ FNMT-RCM SERVIDORES SEGUROS"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, O=SecureTrust Corporation, CN=SecureTrust CA"
Feb 27 11:13:26 14[IKE] sending cert request for "OU=GlobalSign ECC Root CA - R4, O=GlobalSign, CN=GlobalSign"
Feb 27 11:13:26 14[IKE] sending cert request for "C=NO, O=Buypass AS-983163327, CN=Buypass Class 2 Root CA"
Feb 27 11:13:26 14[IKE] sending cert request for "C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 1 G3"
Feb 27 11:13:26 14[IKE] sending cert request for "O=TeliaSonera, CN=TeliaSonera Root CA v1"
Feb 27 11:13:26 14[IKE] sending cert request for "C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA"
Feb 27 11:13:26 14[IKE] sending cert request for "C=JP, O=SECOM Trust Systems CO.,LTD., CN=Security Communication ECC RootCA1"
Feb 27 11:13:26 14[IKE] sending cert request for "C=IN, OU=emSign PKI, O=eMudhra Technologies Limited, CN=emSign Root CA - G1"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, O=Google Trust Services LLC, CN=GTS Root R3"
Feb 27 11:13:26 14[IKE] sending cert request for "C=CH, O=SwissSign AG, CN=SwissSign Gold CA - G2"
Feb 27 11:13:26 14[IKE] sending cert request for "C=BE, O=GlobalSign nv-sa, CN=GlobalSign Root E46"
Feb 27 11:13:26 14[IKE] sending cert request for "C=CH, O=WISeKey, OU=OISTE Foundation Endorsed, CN=OISTE WISeKey Global Root GC CA"
Feb 27 11:13:26 14[IKE] sending cert request for "C=TW, O=Chunghwa Telecom Co., Ltd., OU=ePKI Root Certification Authority"
Feb 27 11:13:26 14[IKE] sending cert request for "C=PL, O=Asseco Data Systems S.A., OU=Certum Certification Authority, CN=Certum Trusted Root CA"
Feb 27 11:13:26 14[IKE] sending cert request for "C=KR, O=NAVER BUSINESS PLATFORM Corp., CN=NAVER Global Root Certification Authority"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, O=Amazon, CN=Amazon Root CA 1"
Feb 27 11:13:26 14[IKE] sending cert request for "OU=GlobalSign ECC Root CA - R5, O=GlobalSign, CN=GlobalSign"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, O=AffirmTrust, CN=AffirmTrust Networking"
Feb 27 11:13:26 14[IKE] sending cert request for "C=CN, O=UniTrust, CN=UCA Global G2 Root"
Feb 27 11:13:26 14[IKE] sending cert request for "C=HK, O=Hongkong Post, CN=Hongkong Post Root CA 1"
Feb 27 11:13:26 14[IKE] sending cert request for "O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=© 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048)"
Feb 27 11:13:26 14[IKE] sending cert request for "C=FR, O=Dhimyotis, CN=Certigna"
Feb 27 11:13:26 14[IKE] sending cert request for "C=IN, OU=emSign PKI, O=eMudhra Technologies Limited, CN=emSign ECC Root CA - G3"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, O=Amazon, CN=Amazon Root CA 3"
Feb 27 11:13:26 14[IKE] sending cert request for "C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Trusted Network CA"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, O=Starfield Technologies, Inc., OU=Starfield Class 2 Certification Authority"
Feb 27 11:13:26 14[IKE] sending cert request for "CN=Atos TrustedRoot 2011, O=Atos, C=DE"
Feb 27 11:13:26 14[IKE] sending cert request for "OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign"
Feb 27 11:13:26 14[IKE] sending cert request for "C=DE, O=T-Systems Enterprise Services GmbH, OU=T-Systems Trust Center, CN=T-TeleSec GlobalRoot Class 2"
Feb 27 11:13:26 14[IKE] sending cert request for "C=TR, L=Gebze - Kocaeli, O=Turkiye Bilimsel ve Teknolojik Arastirma Kurumu - TUBITAK, OU=Kamu Sertifikasyon Merkezi - Kamu SM, CN=TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1"
Feb 27 11:13:26 14[IKE] sending cert request for "C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, O=Google Trust Services LLC, CN=GTS Root R4"
Feb 27 11:13:26 14[IKE] sending cert request for "C=ES, CN=Autoridad de Certificacion Firmaprofesional CIF A62634068"
Feb 27 11:13:26 14[IKE] sending cert request for "C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Certification Authority"
Feb 27 11:13:26 14[IKE] sending cert request for "C=ES, CN=Autoridad de Certificacion Firmaprofesional CIF A62634068"
Feb 27 11:13:26 14[IKE] sending cert request for "C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2 G3"
Feb 27 11:13:26 14[IKE] sending cert request for "C=CH, O=WISeKey, OU=OISTE Foundation Endorsed, CN=OISTE WISeKey Global Root GB CA"
Feb 27 11:13:26 14[IKE] sending cert request for "C=PL, O=Asseco Data Systems S.A., OU=Certum Certification Authority, CN=Certum EC-384 CA"
Feb 27 11:13:26 14[IKE] sending cert request for "C=TW, O=Chunghwa Telecom Co., Ltd., CN=HiPKI Root CA - G1"
Feb 27 11:13:26 14[IKE] sending cert request for "CN=ACCVRAIZ1, OU=PKIACCV, O=ACCV, C=ES"
Feb 27 11:13:26 14[IKE] sending cert request for "C=JP, O=SECOM Trust Systems CO.,LTD., CN=Security Communication RootCA3"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, O=Internet Security Research Group, CN=ISRG Root X2"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust ECC Certification Authority"
Feb 27 11:13:26 14[IKE] sending cert request for "C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO ECC Certification Authority"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, O=Amazon, CN=Amazon Root CA 4"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, O=IdenTrust, CN=IdenTrust Public Sector Root CA 1"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, O=Entrust, Inc., OU=www.entrust.net/CPS is incorporated by reference, OU=© 2006 Entrust, Inc., CN=Entrust Root Certification Authority"
Feb 27 11:13:26 14[IKE] sending cert request for "C=FI, O=Telia Finland Oyj, CN=Telia Root CA v2"
Feb 27 11:13:26 14[IKE] sending cert request for "C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, ST=Texas, L=Houston, O=SSL Corporation, CN=SSL.com EV Root Certification Authority ECC"
Feb 27 11:13:26 14[IKE] sending cert request for "C=DE, O=T-Systems Enterprise Services GmbH, OU=T-Systems Trust Center, CN=T-TeleSec GlobalRoot Class 3"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, ST=Texas, L=Houston, O=SSL Corporation, CN=SSL.com EV Root Certification Authority RSA R2"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2"
Feb 27 11:13:26 14[IKE] sending cert request for "C=CN, O=UniTrust, CN=UCA Extended Validation Root"
Feb 27 11:13:26 14[IKE] sending cert request for "C=DE, O=D-Trust GmbH, CN=D-TRUST Root Class 3 CA 2 EV 2009"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, O=Certainly, CN=Certainly Root E1"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, OU=emSign PKI, O=eMudhra Inc, CN=emSign ECC Root CA - C3"
Feb 27 11:13:26 14[IKE] sending cert request for "C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 3"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, O=Microsoft Corporation, CN=Microsoft RSA Root Certificate Authority 2017"
Feb 27 11:13:26 14[IKE] sending cert request for "serialNumber=G63287510, C=ES, O=ANF Autoridad de Certificacion, OU=ANF CA Raiz, CN=ANF Secure Server Root CA"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, O=The Go Daddy Group, Inc., OU=Go Daddy Class 2 Certification Authority"
Feb 27 11:13:26 14[IKE] sending cert request for "C=ES, O=IZENPE S.A., CN=Izenpe.com"
Feb 27 11:13:26 14[IKE] sending cert request for "C=GR, O=Hellenic Academic and Research Institutions CA, CN=HARICA TLS ECC Root CA 2021"
Feb 27 11:13:26 14[IKE] sending cert request for "C=HU, L=Budapest, O=Microsec Ltd., 55:04:61=VATHU-23584497, CN=e-Szigno Root CA 2017"
Feb 27 11:13:26 14[IKE] sending cert request for "C=HU, L=Budapest, O=NetLock Kft., OU=Tan??s??tv??nykiad??k (Certification Services), CN=NetLock Arany (Class Gold) F??tan??s??tv??ny"
Feb 27 11:13:26 14[IKE] sending cert request for "C=NO, O=Buypass AS-983163327, CN=Buypass Class 3 Root CA"
Feb 27 11:13:26 14[IKE] sending cert request for "C=CN, O=iTrusChina Co.,Ltd., CN=vTrus ECC Root CA"
Feb 27 11:13:26 14[IKE] sending cert request for "C=ES, O=FNMT-RCM, OU=AC RAIZ FNMT-RCM"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root G2"
Feb 27 11:13:26 14[IKE] sending cert request for "C=GR, L=Athens, O=Hellenic Academic and Research Institutions Cert. Authority, CN=Hellenic Academic and Research Institutions ECC RootCA 2015"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, ST=Illinois, L=Chicago, O=Trustwave Holdings, Inc., CN=Trustwave Global ECC P256 Certification Authority"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=© 2009 Entrust, Inc. - for authorized use only, CN=Entrust Root Certification Authority - G2"
Feb 27 11:13:26 14[IKE] sending cert request for "C=RO, O=certSIGN, OU=certSIGN ROOT CA"
Feb 27 11:13:26 14[IKE] sending cert request for "C=DE, O=D-Trust GmbH, CN=D-TRUST BR Root CA 1 2020"
Feb 27 11:13:26 14[IKE] sending cert request for "C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Root Certificate Authority - G2"
Feb 27 11:13:26 14[IKE] sending cert request for "C=TW, O=TAIWAN-CA, OU=Root CA, CN=TWCA Global Root CA"
Feb 27 11:13:26 14[IKE] sending cert request for "C=DE, O=D-Trust GmbH, CN=D-TRUST Root Class 3 CA 2 2009"
Feb 27 11:13:26 14[IKE] sending cert request for "C=HK, ST=Hong Kong, L=Hong Kong, O=Hongkong Post, CN=Hongkong Post Root CA 3"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, O=AffirmTrust, CN=AffirmTrust Commercial"
Feb 27 11:13:26 14[IKE] sending cert request for "C=JP, O=Japan Certification Services, Inc., CN=SecureSign RootCA11"
Feb 27 11:13:26 14[IKE] sending cert request for "C=GR, L=Athens, O=Hellenic Academic and Research Institutions Cert. Authority, CN=Hellenic Academic and Research Institutions RootCA 2015"
Feb 27 11:13:26 14[IKE] sending cert request for "C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2"
Feb 27 11:13:26 14[IKE] establishing CHILD_SA android{2}
Feb 27 11:13:26 14[ENC] generating IKE_AUTH request 1 [ IDi N(INIT_CONTACT) CERTREQ CPRQ(ADDR ADDR6 DNS DNS6) SA TSi TSr N(MOBIKE_SUP) N(NO_ADD_ADDR) N(MULT_AUTH) N(EAP_ONLY) N(MSG_ID_SYN_SUP) ]
Feb 27 11:13:26 14[ENC] splitting IKE message (3104 bytes) into 3 fragments
Feb 27 11:13:26 14[ENC] generating IKE_AUTH request 1 [ EF(1/3) ]
Feb 27 11:13:26 14[ENC] generating IKE_AUTH request 1 [ EF(2/3) ]
Feb 27 11:13:26 14[ENC] generating IKE_AUTH request 1 [ EF(3/3) ]
Feb 27 11:13:26 14[NET] sending packet: from xx.xx.xx.xx[58543] to xx.xx.xx.xx[4500] (1364 bytes)
Feb 27 11:13:26 14[NET] sending packet: from xx.xx.xx.xx[58543] to xx.xx.xx.xx[4500] (1364 bytes)
Feb 27 11:13:26 14[NET] sending packet: from xx.xx.xx.xx[58543] to xx.xx.xx.xx[4500] (532 bytes)
Feb 27 11:13:26 15[NET] received packet: from xx.xx.xx.xx[4500] to xx.xx.xx.xx[58543] (1236 bytes)
Feb 27 11:13:26 15[ENC] parsed IKE_AUTH response 1 [ EF(1/3) ]
Feb 27 11:13:26 15[ENC] received fragment #1 of 3, waiting for complete IKE message
Feb 27 11:13:26 16[NET] received packet: from xx.xx.xx.xx[4500] to xx.xx.xx.xx[58543] (1236 bytes)
Feb 27 11:13:26 16[ENC] parsed IKE_AUTH response 1 [ EF(2/3) ]
Feb 27 11:13:26 16[ENC] received fragment #2 of 3, waiting for complete IKE message
Feb 27 11:13:26 16[NET] received packet: from xx.xx.xx.xx[4500] to xx.xx.xx.xx[58543] (644 bytes)
Feb 27 11:13:26 16[ENC] parsed IKE_AUTH response 1 [ EF(3/3) ]
Feb 27 11:13:26 16[ENC] received fragment #3 of 3, reassembled fragmented IKE message (2976 bytes)
Feb 27 11:13:26 16[ENC] parsed IKE_AUTH response 1 [ IDr CERT CERT AUTH EAP/REQ/ID ]
Feb 27 11:13:26 16[IKE] received end entity cert "CN=amxband.freeboxos.fr"
Feb 27 11:13:26 16[IKE] received issuer cert "C=US, O=Let's Encrypt, CN=R3"
Feb 27 11:13:26 16[CFG] using certificate "CN=amxband.freeboxos.fr"
Feb 27 11:13:26 16[CFG] using untrusted intermediate certificate "C=US, O=Let's Encrypt, CN=R3"
Feb 27 11:13:26 16[CFG] using trusted ca certificate "C=US, O=Internet Security Research Group, CN=ISRG Root X1"
Feb 27 11:13:26 16[CFG] reached self-signed root ca with a path length of 1
Feb 27 11:13:26 16[CFG] checking certificate status of "CN=amxband.freeboxos.fr"
Feb 27 11:13:26 16[CFG] requesting ocsp status from 'http://r3.o.lencr.org' … Feb 27 11:13:27 16[CFG] ocsp response correctly signed by "C=US, O=Let's Encrypt, CN=R3"
Feb 27 11:13:27 16[CFG] ocsp response is valid: until Mar 04 06:15:58 2024
Feb 27 11:13:27 16[CFG] certificate status is good
Feb 27 11:13:27 16[CFG] checking certificate status of "C=US, O=Let's Encrypt, CN=R3"
Feb 27 11:13:27 16[CFG] using trusted certificate "C=US, O=Internet Security Research Group, CN=ISRG Root X1"
Feb 27 11:13:27 16[CFG] crl correctly signed by "C=US, O=Internet Security Research Group, CN=ISRG Root X1"
Feb 27 11:13:27 16[CFG] crl is valid: until Jan 05 00:59:59 2025
Feb 27 11:13:27 16[CFG] using cached crl
Feb 27 11:13:27 16[CFG] certificate status is good
Feb 27 11:13:27 16[IKE] authentication of 'amxband.freeboxos.fr' with RSA_EMSA_PKCS1_SHA2_256 successful
Feb 27 11:13:27 16[IKE] server requested EAP_IDENTITY (id 0x00), sending 'GE'
Feb 27 11:13:27 16[ENC] generating IKE_AUTH request 2 [ EAP/RES/ID ]
Feb 27 11:13:27 16[NET] sending packet: from xx.xx.xx.xx[58543] to xx.xx.xx.xx[4500] (80 bytes)
Feb 27 11:13:27 09[NET] received packet: from xx.xx.xx.xx[4500] to xx.xx.xx.xx[58543] (112 bytes)
Feb 27 11:13:27 09[ENC] parsed IKE_AUTH response 2 [ EAP/REQ/MSCHAPV2 ]
Feb 27 11:13:27 09[IKE] server requested EAP_MSCHAPV2 authentication (id 0x24)
Feb 27 11:13:27 09[ENC] generating IKE_AUTH request 3 [ EAP/RES/MSCHAPV2 ]
Feb 27 11:13:27 09[NET] sending packet: from xx.xx.xx.xx[58543] to xx.xx.xx.xx[4500] (144 bytes)
Feb 27 11:13:29 13[IKE] retransmit 1 of request with message ID 3
Feb 27 11:13:29 13[NET] sending packet: from xx.xx.xx.xx[58543] to xx.xx.xx.xx[4500] (144 bytes)
Feb 27 11:13:29 12[NET] received packet: from xx.xx.xx.xx[4500] to xx.xx.xx.xx[58543] (128 bytes)
Feb 27 11:13:29 12[ENC] parsed IKE_AUTH response 3 [ EAP/REQ/MSCHAPV2 ]
Feb 27 11:13:29 12[IKE] EAP-MS-CHAPv2 failed with error ERROR_AUTHENTICATION_FAILURE: '(null)'
Feb 27 11:13:29 12[IKE] EAP_MSCHAPV2 method failed
Feb 27 11:13:29 12[ENC] generating INFORMATIONAL request 4 [ N(AUTH_FAILED) ]
Feb 27 11:13:29 12[NET] sending packet: from xx.xx.xx.xx[58543] to xx.xx.xx.xx[4500] (80 bytes)
Feb 27 11:13:49 00[DMN] +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
Feb 27 11:13:49 00[DMN] Starting IKE service (strongSwan 5.9.13, Android 14 - UP1A.231005.007.S901BXXS7DXAC/2024-02-01, SM-S901B - samsung/r0sxeea/samsung, Linux 5.10.177-android12-9-27763393-abS901BXXS7DXAC, aarch64, org.strongswan.android)
Feb 27 11:13:49 00[LIB] providers loaded by OpenSSL: default legacy
Feb 27 11:13:49 00[LIB] loaded plugins: androidbridge charon android-log socket-default openssl nonce pkcs1 pem x509 xcbc kdf revocation eap-identity eap-mschapv2 eap-md5 eap-gtc eap-tls
Feb 27 11:13:49 00[JOB] spawning 16 worker threads
Feb 27 11:13:49 09[IKE] initiating IKE_SA android[3] to xx.xx.xx.xx
Feb 27 11:13:49 09[ENC] generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) N(HASH_ALG) N(REDIR_SUP) ]
Feb 27 11:13:49 09[NET] sending packet: from xx.xx.xx.xx[39869] to xx.xx.xx.xx[500] (948 bytes)
Feb 27 11:13:49 06[NET] received packet: from xx.xx.xx.xx[500] to xx.xx.xx.xx[39869] (280 bytes)
Feb 27 11:13:49 06[ENC] parsed IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) N(HASH_ALG) N(CHDLESS_SUP) N(MULT_AUTH) ]
Feb 27 11:13:49 06[CFG] selected proposal: IKE:AES_CBC_128/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/ECP_256
Feb 27 11:13:49 06[IKE] local host is behind NAT, sending keep alives
Feb 27 11:13:49 06[IKE] remote host is behind NAT
Feb 27 11:13:49 06[CFG] loaded crl issued by 'C=US, O=Internet Security Research Group, CN=ISRG Root X1'
Feb 27 11:13:49 06[IKE] sending cert request for "C=HU, L=Budapest, O=Microsec Ltd., CN=Microsec e-Szigno Root CA 2009, E=info@e-szigno.hu"
Feb 27 11:13:49 06[IKE] sending cert request for "C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2"
Feb 27 11:13:49 06[IKE] sending cert request for "C=TW, O=TAIWAN-CA, OU=Root CA, CN=TWCA Root Certification Authority"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, O=DigiCert, Inc., CN=DigiCert TLS RSA4096 Root G5"
Feb 27 11:13:49 06[IKE] sending cert request for "C=TN, O=Agence Nationale de Certification Electronique, CN=TunTrust Root CA"
Feb 27 11:13:49 06[IKE] sending cert request for "C=BE, O=GlobalSign nv-sa, CN=GlobalSign Root R46"
Feb 27 11:13:49 06[IKE] sending cert request for "C=JP, O=SECOM Trust.net, OU=Security Communication RootCA1"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, ST=Texas, L=Houston, O=SSL Corporation, CN=SSL.com Root Certification Authority ECC"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, O=Certainly, CN=Certainly Root R1"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, ST=Illinois, L=Chicago, O=Trustwave Holdings, Inc., CN=Trustwave Global ECC P384 Certification Authority"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, O=Internet Security Research Group, CN=ISRG Root X1"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, O=Google Trust Services LLC, CN=GTS Root R2"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, OU=www.xrampsecurity.com, O=XRamp Security Services Inc, CN=XRamp Global Certification Authority"
Feb 27 11:13:49 06[IKE] sending cert request for "C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 3 G3"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root G3"
Feb 27 11:13:49 06[IKE] sending cert request for "C=FR, O=Dhimyotis, OU=0002 48146308100036, CN=Certigna Root CA"
Feb 27 11:13:49 06[IKE] sending cert request for "C=CH, O=SwissSign AG, CN=SwissSign Silver CA - G2"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, O=Microsoft Corporation, CN=Microsoft ECC Root Certificate Authority 2017"
Feb 27 11:13:49 06[IKE] sending cert request for "C=CN, O=China Financial Certification Authority, CN=CFCA EV ROOT"
Feb 27 11:13:49 06[IKE] sending cert request for "C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication RootCA2"
Feb 27 11:13:49 06[IKE] sending cert request for "OU=GlobalSign Root CA - R6, O=GlobalSign, CN=GlobalSign"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=© 2015 Entrust, Inc. - for authorized use only, CN=Entrust Root Certification Authority - G4"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, O=AffirmTrust, CN=AffirmTrust Premium ECC"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Trusted Root G4"
Feb 27 11:13:49 06[IKE] sending cert request for "C=PL, O=Krajowa Izba Rozliczeniowa S.A., CN=SZAFIR ROOT CA2"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, O=Google Trust Services LLC, CN=GTS Root R1"
Feb 27 11:13:49 06[IKE] sending cert request for "C=IT, L=Milan, O=Actalis S.p.A./03358520967, CN=Actalis Authentication Root CA"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G3"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, ST=Texas, L=Houston, O=SSL Corporation, CN=SSL.com Root Certification Authority RSA"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, O=SecureTrust Corporation, CN=Secure Global CA"
Feb 27 11:13:49 06[IKE] sending cert request for "C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Trusted Network CA 2"
Feb 27 11:13:49 06[IKE] sending cert request for "C=DE, O=D-Trust GmbH, CN=D-TRUST EV Root CA 1 2020"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=© 2012 Entrust, Inc. - for authorized use only, CN=Entrust Root Certification Authority - EC1"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, OU=emSign PKI, O=eMudhra Inc, CN=emSign Root CA - C1"
Feb 27 11:13:49 06[IKE] sending cert request for "C=CN, O=iTrusChina Co.,Ltd., CN=vTrus Root CA"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, ST=Illinois, L=Chicago, O=Trustwave Holdings, Inc., CN=Trustwave Global Certification Authority"
Feb 27 11:13:49 06[IKE] sending cert request for "C=AT, O=e-commerce monitoring GmbH, CN=GLOBALTRUST 2020"
Feb 27 11:13:49 06[IKE] sending cert request for "C=RO, O=CERTSIGN SA, OU=certSIGN ROOT CA G2"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, O=IdenTrust, CN=IdenTrust Commercial Root CA 1"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, O=DigiCert, Inc., CN=DigiCert TLS ECC P384 Root G5"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., CN=Go Daddy Root Certificate Authority - G2"
Feb 27 11:13:49 06[IKE] sending cert request for "C=SK, L=Bratislava, O=Disig a.s., CN=CA Disig Root R2"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, O=AffirmTrust, CN=AffirmTrust Premium"
Feb 27 11:13:49 06[IKE] sending cert request for "C=GR, O=Hellenic Academic and Research Institutions CA, CN=HARICA TLS RSA Root CA 2021"
Feb 27 11:13:49 06[IKE] sending cert request for "C=CN, O=GUANG DONG CERTIFICATE AUTHORITY CO.,LTD., CN=GDCA TrustAUTH R5 ROOT"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, O=Amazon, CN=Amazon Root CA 2"
Feb 27 11:13:49 06[IKE] sending cert request for "C=ES, O=FNMT-RCM, OU=Ceres, 55:04:61=VATES-Q2826004J, CN=AC RAIZ FNMT-RCM SERVIDORES SEGUROS"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, O=SecureTrust Corporation, CN=SecureTrust CA"
Feb 27 11:13:49 06[IKE] sending cert request for "OU=GlobalSign ECC Root CA - R4, O=GlobalSign, CN=GlobalSign"
Feb 27 11:13:49 06[IKE] sending cert request for "C=NO, O=Buypass AS-983163327, CN=Buypass Class 2 Root CA"
Feb 27 11:13:49 06[IKE] sending cert request for "C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 1 G3"
Feb 27 11:13:49 06[IKE] sending cert request for "O=TeliaSonera, CN=TeliaSonera Root CA v1"
Feb 27 11:13:49 06[IKE] sending cert request for "C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA"
Feb 27 11:13:49 06[IKE] sending cert request for "C=JP, O=SECOM Trust Systems CO.,LTD., CN=Security Communication ECC RootCA1"
Feb 27 11:13:49 06[IKE] sending cert request for "C=IN, OU=emSign PKI, O=eMudhra Technologies Limited, CN=emSign Root CA - G1"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, O=Google Trust Services LLC, CN=GTS Root R3"
Feb 27 11:13:49 06[IKE] sending cert request for "C=CH, O=SwissSign AG, CN=SwissSign Gold CA - G2"
Feb 27 11:13:49 06[IKE] sending cert request for "C=BE, O=GlobalSign nv-sa, CN=GlobalSign Root E46"
Feb 27 11:13:49 06[IKE] sending cert request for "C=CH, O=WISeKey, OU=OISTE Foundation Endorsed, CN=OISTE WISeKey Global Root GC CA"
Feb 27 11:13:49 06[IKE] sending cert request for "C=TW, O=Chunghwa Telecom Co., Ltd., OU=ePKI Root Certification Authority"
Feb 27 11:13:49 06[IKE] sending cert request for "C=PL, O=Asseco Data Systems S.A., OU=Certum Certification Authority, CN=Certum Trusted Root CA"
Feb 27 11:13:49 06[IKE] sending cert request for "C=KR, O=NAVER BUSINESS PLATFORM Corp., CN=NAVER Global Root Certification Authority"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, O=Amazon, CN=Amazon Root CA 1"
Feb 27 11:13:49 06[IKE] sending cert request for "OU=GlobalSign ECC Root CA - R5, O=GlobalSign, CN=GlobalSign"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, O=AffirmTrust, CN=AffirmTrust Networking"
Feb 27 11:13:49 06[IKE] sending cert request for "C=CN, O=UniTrust, CN=UCA Global G2 Root"
Feb 27 11:13:49 06[IKE] sending cert request for "C=HK, O=Hongkong Post, CN=Hongkong Post Root CA 1"
Feb 27 11:13:49 06[IKE] sending cert request for "O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=© 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048)"
Feb 27 11:13:49 06[IKE] sending cert request for "C=FR, O=Dhimyotis, CN=Certigna"
Feb 27 11:13:49 06[IKE] sending cert request for "C=IN, OU=emSign PKI, O=eMudhra Technologies Limited, CN=emSign ECC Root CA - G3"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, O=Amazon, CN=Amazon Root CA 3"
Feb 27 11:13:49 06[IKE] sending cert request for "C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Trusted Network CA"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, O=Starfield Technologies, Inc., OU=Starfield Class 2 Certification Authority"
Feb 27 11:13:49 06[IKE] sending cert request for "CN=Atos TrustedRoot 2011, O=Atos, C=DE"
Feb 27 11:13:49 06[IKE] sending cert request for "OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign"
Feb 27 11:13:49 06[IKE] sending cert request for "C=DE, O=T-Systems Enterprise Services GmbH, OU=T-Systems Trust Center, CN=T-TeleSec GlobalRoot Class 2"
Feb 27 11:13:49 06[IKE] sending cert request for "C=TR, L=Gebze - Kocaeli, O=Turkiye Bilimsel ve Teknolojik Arastirma Kurumu - TUBITAK, OU=Kamu Sertifikasyon Merkezi - Kamu SM, CN=TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1"
Feb 27 11:13:49 06[IKE] sending cert request for "C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, O=Google Trust Services LLC, CN=GTS Root R4"
Feb 27 11:13:49 06[IKE] sending cert request for "C=ES, CN=Autoridad de Certificacion Firmaprofesional CIF A62634068"
Feb 27 11:13:49 06[IKE] sending cert request for "C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Certification Authority"
Feb 27 11:13:49 06[IKE] sending cert request for "C=ES, CN=Autoridad de Certificacion Firmaprofesional CIF A62634068"
Feb 27 11:13:49 06[IKE] sending cert request for "C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2 G3"
Feb 27 11:13:49 06[IKE] sending cert request for "C=CH, O=WISeKey, OU=OISTE Foundation Endorsed, CN=OISTE WISeKey Global Root GB CA"
Feb 27 11:13:49 06[IKE] sending cert request for "C=PL, O=Asseco Data Systems S.A., OU=Certum Certification Authority, CN=Certum EC-384 CA"
Feb 27 11:13:49 06[IKE] sending cert request for "C=TW, O=Chunghwa Telecom Co., Ltd., CN=HiPKI Root CA - G1"
Feb 27 11:13:49 06[IKE] sending cert request for "CN=ACCVRAIZ1, OU=PKIACCV, O=ACCV, C=ES"
Feb 27 11:13:49 06[IKE] sending cert request for "C=JP, O=SECOM Trust Systems CO.,LTD., CN=Security Communication RootCA3"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, O=Internet Security Research Group, CN=ISRG Root X2"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust ECC Certification Authority"
Feb 27 11:13:49 06[IKE] sending cert request for "C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO ECC Certification Authority"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, O=Amazon, CN=Amazon Root CA 4"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, O=IdenTrust, CN=IdenTrust Public Sector Root CA 1"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, O=Entrust, Inc., OU=www.entrust.net/CPS is incorporated by reference, OU=© 2006 Entrust, Inc., CN=Entrust Root Certification Authority"
Feb 27 11:13:49 06[IKE] sending cert request for "C=FI, O=Telia Finland Oyj, CN=Telia Root CA v2"
Feb 27 11:13:49 06[IKE] sending cert request for "C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, ST=Texas, L=Houston, O=SSL Corporation, CN=SSL.com EV Root Certification Authority ECC"
Feb 27 11:13:49 06[IKE] sending cert request for "C=DE, O=T-Systems Enterprise Services GmbH, OU=T-Systems Trust Center, CN=T-TeleSec GlobalRoot Class 3"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, ST=Texas, L=Houston, O=SSL Corporation, CN=SSL.com EV Root Certification Authority RSA R2"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2"
Feb 27 11:13:49 06[IKE] sending cert request for "C=CN, O=UniTrust, CN=UCA Extended Validation Root"
Feb 27 11:13:49 06[IKE] sending cert request for "C=DE, O=D-Trust GmbH, CN=D-TRUST Root Class 3 CA 2 EV 2009"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, O=Certainly, CN=Certainly Root E1"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, OU=emSign PKI, O=eMudhra Inc, CN=emSign ECC Root CA - C3"
Feb 27 11:13:49 06[IKE] sending cert request for "C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 3"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, O=Microsoft Corporation, CN=Microsoft RSA Root Certificate Authority 2017"
Feb 27 11:13:49 06[IKE] sending cert request for "serialNumber=G63287510, C=ES, O=ANF Autoridad de Certificacion, OU=ANF CA Raiz, CN=ANF Secure Server Root CA"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, O=The Go Daddy Group, Inc., OU=Go Daddy Class 2 Certification Authority"
Feb 27 11:13:49 06[IKE] sending cert request for "C=ES, O=IZENPE S.A., CN=Izenpe.com"
Feb 27 11:13:49 06[IKE] sending cert request for "C=GR, O=Hellenic Academic and Research Institutions CA, CN=HARICA TLS ECC Root CA 2021"
Feb 27 11:13:49 06[IKE] sending cert request for "C=HU, L=Budapest, O=Microsec Ltd., 55:04:61=VATHU-23584497, CN=e-Szigno Root CA 2017"
Feb 27 11:13:49 06[IKE] sending cert request for "C=HU, L=Budapest, O=NetLock Kft., OU=Tan??s??tv??nykiad??k (Certification Services), CN=NetLock Arany (Class Gold) F??tan??s??tv??ny"
Feb 27 11:13:49 06[IKE] sending cert request for "C=NO, O=Buypass AS-983163327, CN=Buypass Class 3 Root CA"
Feb 27 11:13:49 06[IKE] sending cert request for "C=CN, O=iTrusChina Co.,Ltd., CN=vTrus ECC Root CA"
Feb 27 11:13:49 06[IKE] sending cert request for "C=ES, O=FNMT-RCM, OU=AC RAIZ FNMT-RCM"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root G2"
Feb 27 11:13:49 06[IKE] sending cert request for "C=GR, L=Athens, O=Hellenic Academic and Research Institutions Cert. Authority, CN=Hellenic Academic and Research Institutions ECC RootCA 2015"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, ST=Illinois, L=Chicago, O=Trustwave Holdings, Inc., CN=Trustwave Global ECC P256 Certification Authority"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=© 2009 Entrust, Inc. - for authorized use only, CN=Entrust Root Certification Authority - G2"
Feb 27 11:13:49 06[IKE] sending cert request for "C=RO, O=certSIGN, OU=certSIGN ROOT CA"
Feb 27 11:13:49 06[IKE] sending cert request for "C=DE, O=D-Trust GmbH, CN=D-TRUST BR Root CA 1 2020"
Feb 27 11:13:49 06[IKE] sending cert request for "C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Root Certificate Authority - G2"
Feb 27 11:13:49 06[IKE] sending cert request for "C=TW, O=TAIWAN-CA, OU=Root CA, CN=TWCA Global Root CA"
Feb 27 11:13:49 06[IKE] sending cert request for "C=DE, O=D-Trust GmbH, CN=D-TRUST Root Class 3 CA 2 2009"
Feb 27 11:13:49 06[IKE] sending cert request for "C=HK, ST=Hong Kong, L=Hong Kong, O=Hongkong Post, CN=Hongkong Post Root CA 3"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, O=AffirmTrust, CN=AffirmTrust Commercial"
Feb 27 11:13:49 06[IKE] sending cert request for "C=JP, O=Japan Certification Services, Inc., CN=SecureSign RootCA11"
Feb 27 11:13:49 06[IKE] sending cert request for "C=GR, L=Athens, O=Hellenic Academic and Research Institutions Cert. Authority, CN=Hellenic Academic and Research Institutions RootCA 2015"
Feb 27 11:13:49 06[IKE] sending cert request for "C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2"
Feb 27 11:13:49 06[IKE] establishing CHILD_SA android{3}
Feb 27 11:13:49 06[ENC] generating IKE_AUTH request 1 [ IDi N(INIT_CONTACT) CERTREQ CPRQ(ADDR ADDR6 DNS DNS6) SA TSi TSr N(MOBIKE_SUP) N(NO_ADD_ADDR) N(MULT_AUTH) N(EAP_ONLY) N(MSG_ID_SYN_SUP) ]
Feb 27 11:13:49 06[ENC] splitting IKE message (3104 bytes) into 3 fragments
Feb 27 11:13:49 06[ENC] generating IKE_AUTH request 1 [ EF(1/3) ]
Feb 27 11:13:49 06[ENC] generating IKE_AUTH request 1 [ EF(2/3) ]
Feb 27 11:13:49 06[ENC] generating IKE_AUTH request 1 [ EF(3/3) ]
Feb 27 11:13:49 06[NET] sending packet: from xx.xx.xx.xx[54708] to xx.xx.xx.xx[4500] (1364 bytes)
Feb 27 11:13:49 06[NET] sending packet: from xx.xx.xx.xx[54708] to xx.xx.xx.xx[4500] (1364 bytes)
Feb 27 11:13:49 06[NET] sending packet: from xx.xx.xx.xx[54708] to xx.xx.xx.xx[4500] (532 bytes)
Feb 27 11:13:50 07[NET] received packet: from xx.xx.xx.xx[4500] to xx.xx.xx.xx[54708] (1236 bytes)
Feb 27 11:13:50 07[ENC] parsed IKE_AUTH response 1 [ EF(1/3) ]
Feb 27 11:13:50 07[ENC] received fragment #1 of 3, waiting for complete IKE message
Feb 27 11:13:50 08[NET] received packet: from xx.xx.xx.xx[4500] to xx.xx.xx.xx[54708] (1236 bytes)
Feb 27 11:13:50 08[ENC] parsed IKE_AUTH response 1 [ EF(2/3) ]
Feb 27 11:13:50 08[ENC] received fragment #2 of 3, waiting for complete IKE message
Feb 27 11:13:50 10[NET] received packet: from xx.xx.xx.xx[4500] to xx.xx.xx.xx[54708] (644 bytes)
Feb 27 11:13:50 10[ENC] parsed IKE_AUTH response 1 [ EF(3/3) ]
Feb 27 11:13:50 10[ENC] received fragment #3 of 3, reassembled fragmented IKE message (2976 bytes)
Feb 27 11:13:50 10[ENC] parsed IKE_AUTH response 1 [ IDr CERT CERT AUTH EAP/REQ/ID ]
Feb 27 11:13:50 10[IKE] received end entity cert "CN=amxband.freeboxos.fr"
Feb 27 11:13:50 10[IKE] received issuer cert "C=US, O=Let's Encrypt, CN=R3"
Feb 27 11:13:50 10[CFG] using certificate "CN=amxband.freeboxos.fr"
Feb 27 11:13:50 10[CFG] using untrusted intermediate certificate "C=US, O=Let's Encrypt, CN=R3"
Feb 27 11:13:50 10[CFG] using trusted ca certificate "C=US, O=Internet Security Research Group, CN=ISRG Root X1"
Feb 27 11:13:50 10[CFG] reached self-signed root ca with a path length of 1
Feb 27 11:13:50 10[CFG] checking certificate status of "CN=amxband.freeboxos.fr"
Feb 27 11:13:50 10[CFG] requesting ocsp status from 'http://r3.o.lencr.org' … Feb 27 11:13:50 10[CFG] ocsp response correctly signed by "C=US, O=Let's Encrypt, CN=R3"
Feb 27 11:13:50 10[CFG] ocsp response is valid: until Mar 04 06:15:58 2024
Feb 27 11:13:50 10[CFG] certificate status is good
Feb 27 11:13:50 10[CFG] checking certificate status of "C=US, O=Let's Encrypt, CN=R3"
Feb 27 11:13:50 10[CFG] using trusted certificate "C=US, O=Internet Security Research Group, CN=ISRG Root X1"
Feb 27 11:13:50 10[CFG] crl correctly signed by "C=US, O=Internet Security Research Group, CN=ISRG Root X1"
Feb 27 11:13:50 10[CFG] crl is valid: until Jan 05 00:59:59 2025
Feb 27 11:13:50 10[CFG] using cached crl
Feb 27 11:13:50 10[CFG] certificate status is good
Feb 27 11:13:50 10[IKE] authentication of 'amxband.freeboxos.fr' with RSA_EMSA_PKCS1_SHA2_256 successful
Feb 27 11:13:50 10[IKE] server requested EAP_IDENTITY (id 0x00), sending 'GE'
Feb 27 11:13:50 10[ENC] generating IKE_AUTH request 2 [ EAP/RES/ID ]
Feb 27 11:13:50 10[NET] sending packet: from xx.xx.xx.xx[54708] to xx.xx.xx.xx[4500] (80 bytes)
Feb 27 11:13:50 11[NET] received packet: from xx.xx.xx.xx[4500] to xx.xx.xx.xx[54708] (112 bytes)
Feb 27 11:13:50 11[ENC] parsed IKE_AUTH response 2 [ EAP/REQ/MSCHAPV2 ]
Feb 27 11:13:50 11[IKE] server requested EAP_MSCHAPV2 authentication (id 0x8C)
Feb 27 11:13:50 11[ENC] generating IKE_AUTH request 3 [ EAP/RES/MSCHAPV2 ]
Feb 27 11:13:50 11[NET] sending packet: from xx.xx.xx.xx[54708] to xx.xx.xx.xx[4500] (144 bytes)
Feb 27 11:13:52 05[IKE] retransmit 1 of request with message ID 3
Feb 27 11:13:52 05[NET] sending packet: from xx.xx.xx.xx[54708] to xx.xx.xx.xx[4500] (144 bytes)
Feb 27 11:13:52 04[NET] received packet: from xx.xx.xx.xx[4500] to xx.xx.xx.xx[54708] (128 bytes)
Feb 27 11:13:52 04[ENC] parsed IKE_AUTH response 3 [ EAP/REQ/MSCHAPV2 ]
Feb 27 11:13:52 04[IKE] EAP-MS-CHAPv2 failed with error ERROR_AUTHENTICATION_FAILURE: '(null)'
Feb 27 11:13:52 04[IKE] EAP_MSCHAPV2 method failed
Feb 27 11:13:52 04[ENC] generating INFORMATIONAL request 4 [ N(AUTH_FAILED) ]
Feb 27 11:13:52 04[NET] sending packet: from xx.xx.xx.xx[54708] to xx.xx.xx.xx[4500] (80 bytes)
Feb 27 11:14:33 00[DMN] +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
Feb 27 11:14:33 00[DMN] Starting IKE service (strongSwan 5.9.13, Android 14 - UP1A.231005.007.S901BXXS7DXAC/2024-02-01, SM-S901B - samsung/r0sxeea/samsung, Linux 5.10.177-android12-9-27763393-abS901BXXS7DXAC, aarch64, org.strongswan.android)
Feb 27 11:14:33 00[LIB] providers loaded by OpenSSL: default legacy
Feb 27 11:14:33 00[LIB] loaded plugins: androidbridge charon android-log socket-default openssl nonce pkcs1 pem x509 xcbc kdf revocation eap-identity eap-mschapv2 eap-md5 eap-gtc eap-tls
Feb 27 11:14:33 00[JOB] spawning 16 worker threads
Feb 27 11:14:33 04[IKE] initiating IKE_SA android[4] to xx.xx.xx.xx
Feb 27 11:14:33 04[ENC] generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) N(HASH_ALG) N(REDIR_SUP) ]
Feb 27 11:14:33 04[NET] sending packet: from xx.xx.xx.xx[38189] to xx.xx.xx.xx[500] (948 bytes)
Feb 27 11:14:33 02[NET] received packet: from xx.xx.xx.xx[500] to xx.xx.xx.xx[38189] (280 bytes)
Feb 27 11:14:33 02[ENC] parsed IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) N(HASH_ALG) N(CHDLESS_SUP) N(MULT_AUTH) ]
Feb 27 11:14:33 02[CFG] selected proposal: IKE:AES_CBC_128/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/ECP_256
Feb 27 11:14:33 02[IKE] local host is behind NAT, sending keep alives
Feb 27 11:14:33 02[IKE] remote host is behind NAT
Feb 27 11:14:33 02[CFG] loaded crl issued by 'C=US, O=Internet Security Research Group, CN=ISRG Root X1'
Feb 27 11:14:33 02[IKE] sending cert request for "C=HU, L=Budapest, O=Microsec Ltd., CN=Microsec e-Szigno Root CA 2009, E=info@e-szigno.hu"
Feb 27 11:14:33 02[IKE] sending cert request for "C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2"
Feb 27 11:14:33 02[IKE] sending cert request for "C=TW, O=TAIWAN-CA, OU=Root CA, CN=TWCA Root Certification Authority"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, O=DigiCert, Inc., CN=DigiCert TLS RSA4096 Root G5"
Feb 27 11:14:33 02[IKE] sending cert request for "C=TN, O=Agence Nationale de Certification Electronique, CN=TunTrust Root CA"
Feb 27 11:14:33 02[IKE] sending cert request for "C=BE, O=GlobalSign nv-sa, CN=GlobalSign Root R46"
Feb 27 11:14:33 02[IKE] sending cert request for "C=JP, O=SECOM Trust.net, OU=Security Communication RootCA1"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, ST=Texas, L=Houston, O=SSL Corporation, CN=SSL.com Root Certification Authority ECC"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, O=Certainly, CN=Certainly Root R1"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, ST=Illinois, L=Chicago, O=Trustwave Holdings, Inc., CN=Trustwave Global ECC P384 Certification Authority"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, O=Internet Security Research Group, CN=ISRG Root X1"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, O=Google Trust Services LLC, CN=GTS Root R2"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, OU=www.xrampsecurity.com, O=XRamp Security Services Inc, CN=XRamp Global Certification Authority"
Feb 27 11:14:33 02[IKE] sending cert request for "C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 3 G3"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root G3"
Feb 27 11:14:33 02[IKE] sending cert request for "C=FR, O=Dhimyotis, OU=0002 48146308100036, CN=Certigna Root CA"
Feb 27 11:14:33 02[IKE] sending cert request for "C=CH, O=SwissSign AG, CN=SwissSign Silver CA - G2"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, O=Microsoft Corporation, CN=Microsoft ECC Root Certificate Authority 2017"
Feb 27 11:14:33 02[IKE] sending cert request for "C=CN, O=China Financial Certification Authority, CN=CFCA EV ROOT"
Feb 27 11:14:33 02[IKE] sending cert request for "C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication RootCA2"
Feb 27 11:14:33 02[IKE] sending cert request for "OU=GlobalSign Root CA - R6, O=GlobalSign, CN=GlobalSign"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=© 2015 Entrust, Inc. - for authorized use only, CN=Entrust Root Certification Authority - G4"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, O=AffirmTrust, CN=AffirmTrust Premium ECC"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Trusted Root G4"
Feb 27 11:14:33 02[IKE] sending cert request for "C=PL, O=Krajowa Izba Rozliczeniowa S.A., CN=SZAFIR ROOT CA2"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, O=Google Trust Services LLC, CN=GTS Root R1"
Feb 27 11:14:33 02[IKE] sending cert request for "C=IT, L=Milan, O=Actalis S.p.A./03358520967, CN=Actalis Authentication Root CA"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G3"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, ST=Texas, L=Houston, O=SSL Corporation, CN=SSL.com Root Certification Authority RSA"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, O=SecureTrust Corporation, CN=Secure Global CA"
Feb 27 11:14:33 02[IKE] sending cert request for "C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Trusted Network CA 2"
Feb 27 11:14:33 02[IKE] sending cert request for "C=DE, O=D-Trust GmbH, CN=D-TRUST EV Root CA 1 2020"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=© 2012 Entrust, Inc. - for authorized use only, CN=Entrust Root Certification Authority - EC1"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, OU=emSign PKI, O=eMudhra Inc, CN=emSign Root CA - C1"
Feb 27 11:14:33 02[IKE] sending cert request for "C=CN, O=iTrusChina Co.,Ltd., CN=vTrus Root CA"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, ST=Illinois, L=Chicago, O=Trustwave Holdings, Inc., CN=Trustwave Global Certification Authority"
Feb 27 11:14:33 02[IKE] sending cert request for "C=AT, O=e-commerce monitoring GmbH, CN=GLOBALTRUST 2020"
Feb 27 11:14:33 02[IKE] sending cert request for "C=RO, O=CERTSIGN SA, OU=certSIGN ROOT CA G2"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, O=IdenTrust, CN=IdenTrust Commercial Root CA 1"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, O=DigiCert, Inc., CN=DigiCert TLS ECC P384 Root G5"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., CN=Go Daddy Root Certificate Authority - G2"
Feb 27 11:14:33 02[IKE] sending cert request for "C=SK, L=Bratislava, O=Disig a.s., CN=CA Disig Root R2"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, O=AffirmTrust, CN=AffirmTrust Premium"
Feb 27 11:14:33 02[IKE] sending cert request for "C=GR, O=Hellenic Academic and Research Institutions CA, CN=HARICA TLS RSA Root CA 2021"
Feb 27 11:14:33 02[IKE] sending cert request for "C=CN, O=GUANG DONG CERTIFICATE AUTHORITY CO.,LTD., CN=GDCA TrustAUTH R5 ROOT"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, O=Amazon, CN=Amazon Root CA 2"
Feb 27 11:14:33 02[IKE] sending cert request for "C=ES, O=FNMT-RCM, OU=Ceres, 55:04:61=VATES-Q2826004J, CN=AC RAIZ FNMT-RCM SERVIDORES SEGUROS"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, O=SecureTrust Corporation, CN=SecureTrust CA"
Feb 27 11:14:33 02[IKE] sending cert request for "OU=GlobalSign ECC Root CA - R4, O=GlobalSign, CN=GlobalSign"
Feb 27 11:14:33 02[IKE] sending cert request for "C=NO, O=Buypass AS-983163327, CN=Buypass Class 2 Root CA"
Feb 27 11:14:33 02[IKE] sending cert request for "C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 1 G3"
Feb 27 11:14:33 02[IKE] sending cert request for "O=TeliaSonera, CN=TeliaSonera Root CA v1"
Feb 27 11:14:33 02[IKE] sending cert request for "C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA"
Feb 27 11:14:33 02[IKE] sending cert request for "C=JP, O=SECOM Trust Systems CO.,LTD., CN=Security Communication ECC RootCA1"
Feb 27 11:14:33 02[IKE] sending cert request for "C=IN, OU=emSign PKI, O=eMudhra Technologies Limited, CN=emSign Root CA - G1"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, O=Google Trust Services LLC, CN=GTS Root R3"
Feb 27 11:14:33 02[IKE] sending cert request for "C=CH, O=SwissSign AG, CN=SwissSign Gold CA - G2"
Feb 27 11:14:33 02[IKE] sending cert request for "C=BE, O=GlobalSign nv-sa, CN=GlobalSign Root E46"
Feb 27 11:14:33 02[IKE] sending cert request for "C=CH, O=WISeKey, OU=OISTE Foundation Endorsed, CN=OISTE WISeKey Global Root GC CA"
Feb 27 11:14:33 02[IKE] sending cert request for "C=TW, O=Chunghwa Telecom Co., Ltd., OU=ePKI Root Certification Authority"
Feb 27 11:14:33 02[IKE] sending cert request for "C=PL, O=Asseco Data Systems S.A., OU=Certum Certification Authority, CN=Certum Trusted Root CA"
Feb 27 11:14:33 02[IKE] sending cert request for "C=KR, O=NAVER BUSINESS PLATFORM Corp., CN=NAVER Global Root Certification Authority"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, O=Amazon, CN=Amazon Root CA 1"
Feb 27 11:14:33 02[IKE] sending cert request for "OU=GlobalSign ECC Root CA - R5, O=GlobalSign, CN=GlobalSign"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, O=AffirmTrust, CN=AffirmTrust Networking"
Feb 27 11:14:33 02[IKE] sending cert request for "C=CN, O=UniTrust, CN=UCA Global G2 Root"
Feb 27 11:14:33 02[IKE] sending cert request for "C=HK, O=Hongkong Post, CN=Hongkong Post Root CA 1"
Feb 27 11:14:33 02[IKE] sending cert request for "O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=© 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048)"
Feb 27 11:14:33 02[IKE] sending cert request for "C=FR, O=Dhimyotis, CN=Certigna"
Feb 27 11:14:33 02[IKE] sending cert request for "C=IN, OU=emSign PKI, O=eMudhra Technologies Limited, CN=emSign ECC Root CA - G3"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, O=Amazon, CN=Amazon Root CA 3"
Feb 27 11:14:33 02[IKE] sending cert request for "C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Trusted Network CA"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, O=Starfield Technologies, Inc., OU=Starfield Class 2 Certification Authority"
Feb 27 11:14:33 02[IKE] sending cert request for "CN=Atos TrustedRoot 2011, O=Atos, C=DE"
Feb 27 11:14:33 02[IKE] sending cert request for "OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign"
Feb 27 11:14:33 02[IKE] sending cert request for "C=DE, O=T-Systems Enterprise Services GmbH, OU=T-Systems Trust Center, CN=T-TeleSec GlobalRoot Class 2"
Feb 27 11:14:33 02[IKE] sending cert request for "C=TR, L=Gebze - Kocaeli, O=Turkiye Bilimsel ve Teknolojik Arastirma Kurumu - TUBITAK, OU=Kamu Sertifikasyon Merkezi - Kamu SM, CN=TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1"
Feb 27 11:14:33 02[IKE] sending cert request for "C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, O=Google Trust Services LLC, CN=GTS Root R4"
Feb 27 11:14:33 02[IKE] sending cert request for "C=ES, CN=Autoridad de Certificacion Firmaprofesional CIF A62634068"
Feb 27 11:14:33 02[IKE] sending cert request for "C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Certification Authority"
Feb 27 11:14:33 02[IKE] sending cert request for "C=ES, CN=Autoridad de Certificacion Firmaprofesional CIF A62634068"
Feb 27 11:14:33 02[IKE] sending cert request for "C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2 G3"
Feb 27 11:14:33 02[IKE] sending cert request for "C=CH, O=WISeKey, OU=OISTE Foundation Endorsed, CN=OISTE WISeKey Global Root GB CA"
Feb 27 11:14:33 02[IKE] sending cert request for "C=PL, O=Asseco Data Systems S.A., OU=Certum Certification Authority, CN=Certum EC-384 CA"
Feb 27 11:14:33 02[IKE] sending cert request for "C=TW, O=Chunghwa Telecom Co., Ltd., CN=HiPKI Root CA - G1"
Feb 27 11:14:33 02[IKE] sending cert request for "CN=ACCVRAIZ1, OU=PKIACCV, O=ACCV, C=ES"
Feb 27 11:14:33 02[IKE] sending cert request for "C=JP, O=SECOM Trust Systems CO.,LTD., CN=Security Communication RootCA3"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, O=Internet Security Research Group, CN=ISRG Root X2"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust ECC Certification Authority"
Feb 27 11:14:33 02[IKE] sending cert request for "C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO ECC Certification Authority"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, O=Amazon, CN=Amazon Root CA 4"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, O=IdenTrust, CN=IdenTrust Public Sector Root CA 1"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, O=Entrust, Inc., OU=www.entrust.net/CPS is incorporated by reference, OU=© 2006 Entrust, Inc., CN=Entrust Root Certification Authority"
Feb 27 11:14:33 02[IKE] sending cert request for "C=FI, O=Telia Finland Oyj, CN=Telia Root CA v2"
Feb 27 11:14:33 02[IKE] sending cert request for "C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, ST=Texas, L=Houston, O=SSL Corporation, CN=SSL.com EV Root Certification Authority ECC"
Feb 27 11:14:33 02[IKE] sending cert request for "C=DE, O=T-Systems Enterprise Services GmbH, OU=T-Systems Trust Center, CN=T-TeleSec GlobalRoot Class 3"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, ST=Texas, L=Houston, O=SSL Corporation, CN=SSL.com EV Root Certification Authority RSA R2"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2"
Feb 27 11:14:33 02[IKE] sending cert request for "C=CN, O=UniTrust, CN=UCA Extended Validation Root"
Feb 27 11:14:33 02[IKE] sending cert request for "C=DE, O=D-Trust GmbH, CN=D-TRUST Root Class 3 CA 2 EV 2009"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, O=Certainly, CN=Certainly Root E1"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, OU=emSign PKI, O=eMudhra Inc, CN=emSign ECC Root CA - C3"
Feb 27 11:14:33 02[IKE] sending cert request for "C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 3"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, O=Microsoft Corporation, CN=Microsoft RSA Root Certificate Authority 2017"
Feb 27 11:14:33 02[IKE] sending cert request for "serialNumber=G63287510, C=ES, O=ANF Autoridad de Certificacion, OU=ANF CA Raiz, CN=ANF Secure Server Root CA"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, O=The Go Daddy Group, Inc., OU=Go Daddy Class 2 Certification Authority"
Feb 27 11:14:33 02[IKE] sending cert request for "C=ES, O=IZENPE S.A., CN=Izenpe.com"
Feb 27 11:14:33 02[IKE] sending cert request for "C=GR, O=Hellenic Academic and Research Institutions CA, CN=HARICA TLS ECC Root CA 2021"
Feb 27 11:14:33 02[IKE] sending cert request for "C=HU, L=Budapest, O=Microsec Ltd., 55:04:61=VATHU-23584497, CN=e-Szigno Root CA 2017"
Feb 27 11:14:33 02[IKE] sending cert request for "C=HU, L=Budapest, O=NetLock Kft., OU=Tan??s??tv??nykiad??k (Certification Services), CN=NetLock Arany (Class Gold) F??tan??s??tv??ny"
Feb 27 11:14:33 02[IKE] sending cert request for "C=NO, O=Buypass AS-983163327, CN=Buypass Class 3 Root CA"
Feb 27 11:14:33 02[IKE] sending cert request for "C=CN, O=iTrusChina Co.,Ltd., CN=vTrus ECC Root CA"
Feb 27 11:14:33 02[IKE] sending cert request for "C=ES, O=FNMT-RCM, OU=AC RAIZ FNMT-RCM"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root G2"
Feb 27 11:14:33 02[IKE] sending cert request for "C=GR, L=Athens, O=Hellenic Academic and Research Institutions Cert. Authority, CN=Hellenic Academic and Research Institutions ECC RootCA 2015"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, ST=Illinois, L=Chicago, O=Trustwave Holdings, Inc., CN=Trustwave Global ECC P256 Certification Authority"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=© 2009 Entrust, Inc. - for authorized use only, CN=Entrust Root Certification Authority - G2"
Feb 27 11:14:33 02[IKE] sending cert request for "C=RO, O=certSIGN, OU=certSIGN ROOT CA"
Feb 27 11:14:33 02[IKE] sending cert request for "C=DE, O=D-Trust GmbH, CN=D-TRUST BR Root CA 1 2020"
Feb 27 11:14:33 02[IKE] sending cert request for "C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Root Certificate Authority - G2"
Feb 27 11:14:33 02[IKE] sending cert request for "C=TW, O=TAIWAN-CA, OU=Root CA, CN=TWCA Global Root CA"
Feb 27 11:14:33 02[IKE] sending cert request for "C=DE, O=D-Trust GmbH, CN=D-TRUST Root Class 3 CA 2 2009"
Feb 27 11:14:33 02[IKE] sending cert request for "C=HK, ST=Hong Kong, L=Hong Kong, O=Hongkong Post, CN=Hongkong Post Root CA 3"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, O=AffirmTrust, CN=AffirmTrust Commercial"
Feb 27 11:14:33 02[IKE] sending cert request for "C=JP, O=Japan Certification Services, Inc., CN=SecureSign RootCA11"
Feb 27 11:14:33 02[IKE] sending cert request for "C=GR, L=Athens, O=Hellenic Academic and Research Institutions Cert. Authority, CN=Hellenic Academic and Research Institutions RootCA 2015"
Feb 27 11:14:33 02[IKE] sending cert request for "C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2"
Feb 27 11:14:33 02[IKE] establishing CHILD_SA android{4}
Feb 27 11:14:33 02[ENC] generating IKE_AUTH request 1 [ IDi N(INIT_CONTACT) CERTREQ CPRQ(ADDR ADDR6 DNS DNS6) SA TSi TSr N(MOBIKE_SUP) N(NO_ADD_ADDR) N(MULT_AUTH) N(EAP_ONLY) N(MSG_ID_SYN_SUP) ]
Feb 27 11:14:33 02[ENC] splitting IKE message (3104 bytes) into 3 fragments
Feb 27 11:14:33 02[ENC] generating IKE_AUTH request 1 [ EF(1/3) ]
Feb 27 11:14:33 02[ENC] generating IKE_AUTH request 1 [ EF(2/3) ]
Feb 27 11:14:33 02[ENC] generating IKE_AUTH request 1 [ EF(3/3) ]
Feb 27 11:14:33 02[NET] sending packet: from xx.xx.xx.xx[38577] to xx.xx.xx.xx[4500] (1364 bytes)
Feb 27 11:14:33 02[NET] sending packet: from xx.xx.xx.xx[38577] to xx.xx.xx.xx[4500] (1364 bytes)
Feb 27 11:14:33 02[NET] sending packet: from xx.xx.xx.xx[38577] to xx.xx.xx.xx[4500] (532 bytes)
Feb 27 11:14:34 05[NET] received packet: from xx.xx.xx.xx[4500] to xx.xx.xx.xx[38577] (1236 bytes)
Feb 27 11:14:34 05[ENC] parsed IKE_AUTH response 1 [ EF(1/3) ]
Feb 27 11:14:34 05[ENC] received fragment #1 of 3, waiting for complete IKE message
Feb 27 11:14:34 05[NET] received packet: from xx.xx.xx.xx[4500] to xx.xx.xx.xx[38577] (1236 bytes)
Feb 27 11:14:34 05[ENC] parsed IKE_AUTH response 1 [ EF(2/3) ]
Feb 27 11:14:34 05[ENC] received fragment #2 of 3, waiting for complete IKE message
Feb 27 11:14:34 06[NET] received packet: from xx.xx.xx.xx[4500] to xx.xx.xx.xx[38577] (644 bytes)
Feb 27 11:14:34 06[ENC] parsed IKE_AUTH response 1 [ EF(3/3) ]
Feb 27 11:14:34 06[ENC] received fragment #3 of 3, reassembled fragmented IKE message (2976 bytes)
Feb 27 11:14:34 06[ENC] parsed IKE_AUTH response 1 [ IDr CERT CERT AUTH EAP/REQ/ID ]
Feb 27 11:14:34 06[IKE] received end entity cert "CN=amxband.freeboxos.fr"
Feb 27 11:14:34 06[IKE] received issuer cert "C=US, O=Let's Encrypt, CN=R3"
Feb 27 11:14:34 06[CFG] using certificate "CN=amxband.freeboxos.fr"
Feb 27 11:14:34 06[CFG] using untrusted intermediate certificate "C=US, O=Let's Encrypt, CN=R3"
Feb 27 11:14:34 06[CFG] using trusted ca certificate "C=US, O=Internet Security Research Group, CN=ISRG Root X1"
Feb 27 11:14:34 06[CFG] reached self-signed root ca with a path length of 1
Feb 27 11:14:34 06[CFG] checking certificate status of "CN=amxband.freeboxos.fr"
Feb 27 11:14:34 06[CFG] requesting ocsp status from 'http://r3.o.lencr.org' … Feb 27 11:14:34 06[CFG] ocsp response correctly signed by "C=US, O=Let's Encrypt, CN=R3"
Feb 27 11:14:34 06[CFG] ocsp response is valid: until Mar 05 10:07:58 2024
Feb 27 11:14:34 06[CFG] certificate status is good
Feb 27 11:14:34 06[CFG] checking certificate status of "C=US, O=Let's Encrypt, CN=R3"
Feb 27 11:14:34 06[CFG] using trusted certificate "C=US, O=Internet Security Research Group, CN=ISRG Root X1"
Feb 27 11:14:34 06[CFG] crl correctly signed by "C=US, O=Internet Security Research Group, CN=ISRG Root X1"
Feb 27 11:14:34 06[CFG] crl is valid: until Jan 05 00:59:59 2025
Feb 27 11:14:34 06[CFG] using cached crl
Feb 27 11:14:34 06[CFG] certificate status is good
Feb 27 11:14:34 06[IKE] authentication of 'amxband.freeboxos.fr' with RSA_EMSA_PKCS1_SHA2_256 successful
Feb 27 11:14:34 06[IKE] server requested EAP_IDENTITY (id 0x00), sending 'GE'
Feb 27 11:14:34 06[ENC] generating IKE_AUTH request 2 [ EAP/RES/ID ]
Feb 27 11:14:34 06[NET] sending packet: from xx.xx.xx.xx[38577] to xx.xx.xx.xx[4500] (80 bytes)
Feb 27 11:14:34 07[NET] received packet: from xx.xx.xx.xx[4500] to xx.xx.xx.xx[38577] (112 bytes)
Feb 27 11:14:34 07[ENC] parsed IKE_AUTH response 2 [ EAP/REQ/MSCHAPV2 ]
Feb 27 11:14:34 07[IKE] server requested EAP_MSCHAPV2 authentication (id 0x0E)
Feb 27 11:14:34 07[ENC] generating IKE_AUTH request 3 [ EAP/RES/MSCHAPV2 ]
Feb 27 11:14:34 07[NET] sending packet: from xx.xx.xx.xx[38577] to xx.xx.xx.xx[4500] (144 bytes)
Feb 27 11:14:36 16[IKE] retransmit 1 of request with message ID 3
Feb 27 11:14:36 16[NET] sending packet: from xx.xx.xx.xx[38577] to xx.xx.xx.xx[4500] (144 bytes)
Feb 27 11:14:36 15[NET] received packet: from xx.xx.xx.xx[4500] to xx.xx.xx.xx[38577] (128 bytes)
Feb 27 11:14:36 15[ENC] parsed IKE_AUTH response 3 [ EAP/REQ/MSCHAPV2 ]
Feb 27 11:14:36 15[IKE] EAP-MS-CHAPv2 failed with error ERROR_AUTHENTICATION_FAILURE: '(null)'
Feb 27 11:14:36 15[IKE] EAP_MSCHAPV2 method failed
Feb 27 11:14:36 15[ENC] generating INFORMATIONAL request 4 [ N(AUTH_FAILED) ]
Feb 27 11:14:36 15[NET] sending packet: from xx.xx.xx.xx[38577] to xx.xx.xx.xx[4500] (80 bytes)
Bonjour
Vous n'avez pas bien anonymisé les logs postés sur un forum public. Dangereux !
Vous êtes bon pour changer votre nom de domaine qui résout bien sur votre IPv4 full stack et sur votre IPv6 publique (je parle de celui qui commence par am***)
la prochaine fois en + de masquer les IP avec xx.xx.xx.xx et avant de poster :
@free : il fut un temps ou un certain constructeur en tête du Gartner à eu un problème similaire lié à l'expiration d'une des CA ayant CROSS SIGNED le certificat RootCA “Internet Security Resarch Group - ISRG Root X1”
Un souci similaire dans la Freebox ?
Cordialement
nbanba
Merci Nbanba, j'ai effectivement pas fais gaffe à la trace du nom de domaine, je vais rapidement le changer du coup.
Nom de domaine changer.
J'ai aussi desactivé le server VPN puis réactivé, j'ai essayer de me connecter avec StrongSwan et j'ai eu "Server unreachable" puis "Server authentication failed".
Au changement de nom de domaine j'ai demandé la création d'un certif Let's Encrypt et il a bien été regénéré.
Je viens de recréer mon login utilisateur IKE sur la freebox et maintenant cela fonctionne à nouveau.
En fait je me suis trompé, mon téléphone était connecté en wifi.
Cela ne fonctionne donc toujours pas depuis une connexion extérieure.
Et bien je fais un post par jour
Ca y est aujourd'hui cela fonctionne !!! et avec mon téléphone bien déconnecté du WIFI.
Je ne sais si Free a fait quelque chose de particulier mais en tout cas c'est ok, enfin pour le moment …