Re: [Users] Newbie: Following Nate Carlsons document...

From: Sam Sgro (sam_at_freeswan.org)
Date: Mon Aug 19 2002 - 06:37:07 CEST

• Next message: Sam Sgro: "Re: [Users] I have an established connection but can't ping (please help)"
• Previous message: Alistair Nelson: "[Users] Newbie: Following Nate Carlsons document..."
• In reply to: Alistair Nelson: "[Users] Newbie: Following Nate Carlsons document..."
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

-----BEGIN PGP SIGNED MESSAGE-----

On Mon, 19 Aug 2002, Alistair Nelson wrote:

> /var/log/messages is currently logging the following on my gateway:
>
> ....."ipsec_auto: fatal error in "roadwarrior": ID "%any" cannot have
> RSA key
>
> My gateway ipsec.conf is exactly as Nate's document describes, as far as
> I can tell.

1) Are you sure you are running FreeS/WAN with the x.509 patch?

2) You haven't posted your ipsec.conf. Does it have:
 
leftrsasigkey=%cert
rightrsasigkey=%cert

under the %default connection?

- --
Sam Sgro
sam_at_freeswan.org

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv
Comment: For the matching public key, finger the Reply-To: address.

iQCVAwUBPWB19UOSC4btEQUtAQFECwP6A1777yu0V1ZJNXuWosGX5XoATiIEBIcQ
5sLZ16mmgiY9QGA32xb4L9ngZ1rahBD7ymJjQfcWkqqe12tME8uUaAfE1ifR7q91
r01jRjdYlFZokBTDRvNnd0rrcMUANeVPi/GVI6OxsKQuFONDcR/k+6b5P++xIAl4
GS88HrdW/WY=
=SaNj
-----END PGP SIGNATURE-----

_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users

• Next message: Sam Sgro: "Re: [Users] I have an established connection but can't ping (please help)"
• Previous message: Alistair Nelson: "[Users] Newbie: Following Nate Carlsons document..."
• In reply to: Alistair Nelson: "[Users] Newbie: Following Nate Carlsons document..."
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Mon Aug 19 2002 - 08:19:45 CEST