(racoon 797) IKE failed to find valid machine certificate

ok i am currently tring to setup Windows XP professional and Freebsd 
4.10 running racoon-20030711a

*i keep getting this in event logs on the XP machine


*IKE security association negotiation failed.
Mode:
Key Exchange Mode (Main Mode)

Filter:
Source IP Address 10.246.38.106
Source IP Address Mask 255.255.255.255
Destination IP Address 205.134.161.53
Destination IP Address Mask 255.255.255.255
Protocol 0
Source Port 0
Destination Port 0
IKE Local Addr 10.246.38.106
IKE Peer Addr 205.134.161.53

Peer Identity:
Certificate based Identity. Peer Subject
Peer SHA Thumbprint 0000000000000000000000000000000000000000
Peer Issuing Certificate Authority
Root Certificate Authority
My Subject C=US, O=AI.NET, CN=vpn group, [email protected]
My SHA Thumbprint a7e8042582c270d834f50207ed259d1166673633
Peer IP Address: 205.134.161.53

 Failure Point:
Me

Failure Reason:
IKE failed to find valid machine certificate

Extra Status:
0x80092004 0x0


*this is what the racoon logs show*

2004-10-11 23:45:30: INFO: isakmp.c:894:isakmp_ph1begin_r(): respond new 
phase 1 negotiation: 205.134.161.53[500]<=>141.156.111.75[500]
2004-10-11 23:45:30: INFO: isakmp.c:899:isakmp_ph1begin_r(): begin 
Identity Protection mode.
2004-10-11 23:45:30: INFO: vendorid.c:128:check_vendorid(): received 
Vendor ID: MS NT5 ISAKMPOAKLEY
2004-10-11 23:45:30: ERROR: ipsec_doi.c:1318:get_transform(): Only a 
single transform payload is allowed during phase 1 processing.
2004-10-11 23:45:30: ERROR: isakmp_inf.c:776:isakmp_info_recv_n(): 
unknown notify message, no phase2 handle found.
2004-10-11 23:46:12: INFO: session.c:299:check_sigreq(): caught signal 2
2004-10-11 23:46:13: INFO: session.c:180:close_session(): racoon shutdown


*and this is my racoon config file

*%cat /usr/local/etc/racoon/racoon.cert.conf
path certificate        "/usr/local/etc/openssl";                       
# Path to x.509 Certs
#path pre_shared_key    "/usr/local/etc/racoon/psk/txt" # Path to 
pre_shared_key file

timer
{
       counter 5;                                      # Maximum number 
of time retries are sent
       interval 20 sec;                                        # How 
often to send retries out
       persend 1;                                      # Number of 
packets to send
       phase1 30 sec;                                  # Phase 1 timeout 
value
       phase2 15 sec;                                  # Phase 2 timeout 
value
}

remote  anonymous {
               exchange_mode aggressive, main;         # possible modes 
are main and aggressive
               certificate_type x509 "server-signed.pem" 
"server-key.pem";     # Server cert files
               peers_certfile "user-signed.pem";               # Remote 
client cert
               passive on;                             # turns passive 
mode on, when on, racoon does not initiate the connection
               generate_policy on;                     # tells racoon to 
generate the policies for new connections
       verify_cert off;                                        # Turn on 
peer certificate verification
               my_identifier asn1dn;                   # ASN.1 
distinguished name
       peers_identifier asn1dn;                        # specifies the 
peers identifier to be received
               proposal {
                       encryption_algorithm 3des;      # spcifies key 
exchange encryption method 3des or des needed for windows clients, unix 
to unix can
                                                       # use most 
popular encryption schemes see man page (racoon.conf (5))
                       hash_algorithm sha1;            # specifies hash 
method, either md5 or sha
                       authentication_method rsasig;   # specifies 
authentication method used in phase 1, pre_shared_key, rsasig, or 
gssapi_krb
                       dh_group 2;                     # defines group 
for DH key exchange, modp768, modp1024, modp1536, when using aggressive 
mode
                                                       # each group must 
define the same DH group, can also use 1,2,or 5 as group
               }
       }

sainfo  anonymous {
       pfs_group 2;                                    # defines the DH 
exponentiations group, mod768, modp1024, modp1536 or can define 1,2, or 5
       encryption_algorithm 3des;                      # encryption 
method ipsec is to use, 3des and des needed for windows clients
                                                       # see man page 
(racoon (5)) for more options
       authentication_algorithm hmac_sha1;             # authentication 
method for ip header, hmac_md5 or hmac_sha1 needed by win32 clients
                                                       # see man page 
(racoon (5)) for more options
       compression_algorithm deflate;                  # compression 
algorithm
}

padding {
       randomize off;                                  # Enable use of 
randomized values for padding
       maximum_length 20;                              # Define maximum 
padding length
       strict_check off;                               # Turns strict 
pad checking off
       exclusive_tail off;                             # Puts number of 
bytes minus one into last part of padding
}




any suggestions??
thank you