I am trying to connect onto azure P2S using strongswan, followed the instructions on here to no avail. I am using self signed certs and just cannot get it to work. Ubuntu 22.04 running on VM ware workstation. I have tried the CLI option and the GUI option. The errors from syslog can be seen below. Any detailed step by step instructions on how to get Azure P2S working from ubuntu would be appreciated.
Sep 20 22:06:58 linux01 charon-nm: 00[LIB] dropped capabilities, running as uid 0, gid 0
Sep 20 22:06:58 linux01 charon-nm: 00[JOB] spawning 16 worker threads
Sep 20 22:06:58 linux01 NetworkManager[706]: <info> [1663708018.4985] manager: (tun0): new Tun device (/org/freedesktop/NetworkManager/Devices/4)
Sep 20 22:06:58 linux01 charon-nm: 06[IKE] installed bypass policy for 169.254.0.0/16
Sep 20 22:06:58 linux01 charon-nm: 06[IKE] installed bypass policy for 192.168.74.0/24
Sep 20 22:06:58 linux01 charon-nm: 06[IKE] installed bypass policy for ::1/128
Sep 20 22:06:58 linux01 charon-nm: 06[IKE] installed bypass policy for fe80::/64
Sep 20 22:06:58 linux01 systemd-udevd[7578]: Using default interface naming scheme 'v249'.
Sep 20 22:06:59 linux01 charon-nm: 05[CFG] received initiate for NetworkManager connection ct-vpnf
Sep 20 22:06:59 linux01 charon-nm: 05[CFG] using gateway identity 'azuregateway-123456.vpn.azure.com'
Sep 20 22:06:59 linux01 charon-nm: 05[IKE] initiating IKE_SA ct-vpnf[1] to 155.23.78.19
Sep 20 22:06:59 linux01 charon-nm: 05[ENC] generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) N(HASH_ALG) N(REDIR_SUP) ]
Sep 20 22:06:59 linux01 charon-nm: 05[NET] sending packet: from 192.168.74.128[44291] to 155.23.78.19[500] (1096 bytes)
Sep 20 22:06:59 linux01 charon-nm: 11[NET] received packet: from 155.23.78.19[500] to 192.168.74.128[44291] (38 bytes)
Sep 20 22:06:59 linux01 charon-nm: 11[ENC] parsed IKE_SA_INIT response 0 [ N(INVAL_KE) ]
Sep 20 22:06:59 linux01 charon-nm: 11[IKE] peer didn't accept DH group CURVE_25519, it requested ECP_384
Sep 20 22:06:59 linux01 charon-nm: 11[IKE] initiating IKE_SA ct-vpnf[1] to 155.23.78.19
Sep 20 22:06:59 linux01 charon-nm: 11[ENC] generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) N(HASH_ALG) N(REDIR_SUP) ]
Sep 20 22:06:59 linux01 charon-nm: 11[NET] sending packet: from 192.168.74.128[44291] to 155.23.78.19[500] (1160 bytes)
Sep 20 22:06:59 linux01 charon-nm: 12[NET] received packet: from 155.23.78.19[500] to 192.168.74.128[44291] (377 bytes)
Sep 20 22:06:59 linux01 charon-nm: 12[ENC] parsed IKE_SA_INIT response 0 [ SA KE No N(FRAG_SUP) N(NATD_S_IP) N(NATD_D_IP) V V CERTREQ ]
Sep 20 22:06:59 linux01 charon-nm: 12[IKE] received MS NT5 ISAKMPOAKLEY v9 vendor ID
Sep 20 22:06:59 linux01 charon-nm: 12[IKE] received MS-Negotiation Discovery Capable vendor ID
Sep 20 22:06:59 linux01 charon-nm: 12[CFG] selected proposal: IKE:AES_GCM_16_256/PRF_HMAC_SHA2_384/ECP_384
Sep 20 22:06:59 linux01 charon-nm: 12[IKE] local host is behind NAT, sending keep alives
Sep 20 22:06:59 linux01 charon-nm: 12[IKE] received cert request for "CN=VPN CA"
Sep 20 22:06:59 linux01 charon-nm: 12[IKE] received 1 cert requests for an unknown ca
Sep 20 22:06:59 linux01 charon-nm: 12[IKE] sending cert request for "CN=VPN CA"
Sep 20 22:06:59 linux01 charon-nm: 12[IKE] authentication of 'CN=client' (myself) with RSA signature successful
Sep 20 22:06:59 linux01 charon-nm: 12[IKE] sending end entity cert "CN=client"
Sep 20 22:06:59 linux01 charon-nm: 12[IKE] establishing CHILD_SA ct-vpnf{1}
Sep 20 22:06:59 linux01 charon-nm: 12[ENC] generating IKE_AUTH request 1 [ IDi CERT N(INIT_CONTACT) CERTREQ AUTH CPRQ(ADDR ADDR6 DNS NBNS DNS6) SA TSi TSr N(MOBIKE_SUP) N(NO_ADD_ADDR) N(EAP_ONLY) N(MSG_ID_SYN_SUP) ]
Sep 20 22:06:59 linux01 charon-nm: 12[ENC] splitting IKE message (1477 bytes) into 2 fragments
Sep 20 22:06:59 linux01 charon-nm: 12[ENC] generating IKE_AUTH request 1 [ EF(1/2) ]
Sep 20 22:06:59 linux01 charon-nm: 12[ENC] generating IKE_AUTH request 1 [ EF(2/2) ]
Sep 20 22:06:59 linux01 charon-nm: 12[NET] sending packet: from 192.168.74.128[42354] to 155.23.78.19[4500] (1248 bytes)
Sep 20 22:06:59 linux01 charon-nm: 12[NET] sending packet: from 192.168.74.128[42354] to 155.23.78.19[4500] (294 bytes)
Sep 20 22:06:59 linux01 charon-nm: 16[NET] received packet: from 155.23.78.19[4500] to 192.168.74.128[42354] (1276 bytes)
Sep 20 22:06:59 linux01 charon-nm: 16[ENC] parsed IKE_AUTH response 1 [ EF(1/4) ]
Sep 20 22:06:59 linux01 charon-nm: 16[ENC] received fragment #1 of 4, waiting for complete IKE message
Sep 20 22:06:59 linux01 charon-nm: 16[NET] received packet: from 155.23.78.19[4500] to 192.168.74.128[42354] (1276 bytes)
Sep 20 22:06:59 linux01 charon-nm: 16[ENC] parsed IKE_AUTH response 1 [ EF(2/4) ]
Sep 20 22:06:59 linux01 charon-nm: 16[ENC] received fragment #2 of 4, waiting for complete IKE message
Sep 20 22:06:59 linux01 charon-nm: 14[NET] received packet: from 155.23.78.19[4500] to 192.168.74.128[42354] (156 bytes)
Sep 20 22:06:59 linux01 charon-nm: 14[ENC] parsed IKE_AUTH response 1 [ EF(4/4) ]
Sep 20 22:06:59 linux01 charon-nm: 14[ENC] received fragment #4 of 4, waiting for complete IKE message
Sep 20 22:06:59 linux01 charon-nm: 13[NET] received packet: from 155.23.78.19[4500] to 192.168.74.128[42354] (1276 bytes)
Sep 20 22:06:59 linux01 charon-nm: 13[ENC] parsed IKE_AUTH response 1 [ EF(3/4) ]
Sep 20 22:06:59 linux01 charon-nm: 13[ENC] received fragment #3 of 4, reassembled fragmented IKE message (3750 bytes)
Sep 20 22:06:59 linux01 charon-nm: 13[ENC] parsed IKE_AUTH response 1 [ IDr CERT CERT AUTH CPRP(ADDR) SA TSi TSr ]
Sep 20 22:06:59 linux01 charon-nm: 13[IKE] received end entity cert "C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=12520069-4f8b-47d6-b4ba-e92fb0cd7626.vpn.azure.com"
Sep 20 22:06:59 linux01 charon-nm: 13[IKE] received issuer cert "C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA"
Sep 20 22:06:59 linux01 charon-nm: 13[CFG] using certificate "C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=12520069-4f8b-47d6-b4ba-e92fb0cd7626.vpn.azure.com"
Sep 20 22:06:59 linux01 charon-nm: 13[CFG] using untrusted intermediate certificate "C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA"
Sep 20 22:06:59 linux01 charon-nm: 13[CFG] checking certificate status of "C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=12520069-4f8b-47d6-b4ba-e92fb0cd7626.vpn.azure.com"
Sep 20 22:06:59 linux01 charon-nm: 13[CFG] requesting ocsp status from 'http://ocsp.digicert.com' ...
Sep 20 22:06:59 linux01 charon-nm: 13[CFG] ocsp response correctly signed by "C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA"
Sep 20 22:06:59 linux01 charon-nm: 13[CFG] ocsp response is valid: until Sep 27 18:30:01 2022
Sep 20 22:06:59 linux01 charon-nm: 13[CFG] certificate status is good
Sep 20 22:06:59 linux01 NetworkManager[706]: <warn> [1663708019.9098] vpn[0x564b73e861a0,593aae06-f9f6-46a2-8266-513bc8d2a300,"ct-vpnf"]: dbus: failure: connect-failed (1)
Sep 20 22:06:59 linux01 charon-nm: 13[CFG] no issuer certificate found for "C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA"
Sep 20 22:06:59 linux01 NetworkManager[706]: <warn> [1663708019.9100] vpn[0x564b73e861a0,593aae06-f9f6-46a2-8266-513bc8d2a300,"ct-vpnf"]: dbus: failure: connect-failed (1)
Sep 20 22:06:59 linux01 charon-nm: 13[CFG] issuer is "C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA"
Sep 20 22:06:59 linux01 charon-nm: 13[IKE] no trusted RSA public key found for 'C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=12520069-4f8b-47d6-b4ba-e92fb0cd7626.vpn.azure.com'
Sep 20 22:06:59 linux01 charon-nm: 13[ENC] generating INFORMATIONAL request 2 [ N(AUTH_FAILED) ]
Sep 20 22:06:59 linux01 charon-nm: 13[NET] sending packet: from 192.168.74.128[42354] to 155.23.78.19[4500] (65 bytes)