swanctl --log
08[IKE] authentication of 'moneyslow.com' (myself) with RSA signature failed
08[ENC] generating IKE_AUTH response 1 [ N(AUTH_FAILED) ]
reason:
Mac IKEv2 still force SHA-1 , but Rocky Linux 9 (Crypto Policies)not support SHA-1 ,so :
update-crypto-policies --show
update-crypto-policies --set DEFAULT:SHA1
systemctl restart strongswan
swanctl --reload
# update-crypto-policies --show
DEFAULT:SHA1
