IPv6 readyNote: This archive passes through spamassassin. Every mail marked with the subject "*****SPAM*****" has exceed a certain threshold of spam-like behaviour.

Re: [Users] ipsec.conf rightrsasigkey Q

From: Sam Sgro (sam_at_freeswan.org)
Date: Wed May 08 2002 - 09:21:28 CEST


-----BEGIN PGP SIGNED MESSAGE-----

> I am trying to place the key value return from a DNS key search (dig xxx
> key) in my ipsec.conf in a conn definition
>
> When I try and place the value in with rightrsasigkey=xxxxx where xxxxx is
> the value returned by dig minus the spaces and the first three values

    You can't cut-and-paste public keys from a DNS KEY field (they're using
 it for opportunism, presumably). The prefix you are looking for specifies
 the type of encoding used for the key. ('0x' for a hexidecimal key, and
 '0s' for base64.)
    Your key is apparently base 64 encoded; put '0s' in front of the key
 (so it would show:

 0sAQPUD85...

 and you should be fine.

 Sam Sgro
 sam_at_freeswan.org
-----BEGIN PGP SIGNATURE-----
Version: 2.6.2
Comment: For the matching public key, finger the Reply-To: address.

iQCVAwUBPNinqEOSC4btEQUtAQGkHQP/W8Qd/pncsZIOk3hJSMQ/NuM/XTdoTTB+
Cw5NJcSjJTAtcvGaTC5S0VwlRGclqW9X6SS9D2uWa722oys+wlg4MsRJ5LJAtYBg
+6ZkBDdS2Bea41uYf1JQ10eAXc0wOT3Nb4E33fcwpjr/FvLF8qaevBMAckM8X/3W
R3oy8L5J4J8=
=gM6n
-----END PGP SIGNATURE-----

_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users



This archive was generated by hypermail 2.1.3 : Mon Jul 29 2002 - 05:19:57 CEST