~

安装Installing StrongSwan

mac ikev2 authentication of ‘moneyslow.com’ (myself) with RSA signature failed

—

from

moneyslow
of

swanctl –log

08[IKE] authentication of 'moneyslow.com' (myself) with RSA signature failed
08[ENC] generating IKE_AUTH response 1 [ N(AUTH_FAILED) ]

reason:

Mac IKEv2 still force SHA-1 , but Rocky Linux 9 （Crypto Policies）not support SHA-1 ,so :

update-crypto-policies --show
update-crypto-policies --set DEFAULT:SHA1
systemctl restart strongswan
swanctl --reload
# update-crypto-policies --show
DEFAULT:SHA1