Re: [Users] can't get freeswan to work with X.509/RSA

From: martin f krafft (madduck_at_madduck.net)
Date: Wed Oct 23 2002 - 12:40:43 CEST


also sprach Andreas Steffen <andreas.steffen_at_strongsec.net> [2002.10.23.1134 +0200]:
> : RSA myKey.pem "<optional passphrase"
>
> in ipsec.secrets terminated with a newline character?

yes:

  fishbowl:/etc# tail -3 ipsec.secrets
  # with "ipsec showhostkey".
  : RSA /etc/ipsec.d/private/fishbowl.dyn.madduck.net.pem "fishbowl"
  # do not change the indenting of that "}"

> If yes, is there an additional error message concerning the private
> key in the syslog?

I can't really find any. I have set klips and pluto debugging to all
and then started freeswan, which yielded the attached log entries
(2.5kb, so i don't feel too guilty sending this as attachment to the
mailing list).

Thanks for your time and help!

-- 
martin;              (greetings from the heart of the sun.)
  \____ echo mailto: !#^."<*>"|tr "<*> mailto:" net_at_madduck
 
consciousness: that annoying time between naps.


_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users





This archive was generated by hypermail 2.1.5 : Fri Oct 25 2002 - 05:20:31 CEST