Package: openswan Version: 1:2.6.28+dfsg-5+b1 Severity: normal I am having trouble getting openswan to work with RSA keys. It used to work, and I have a few computer where ipsec showhostkey works. But now it doesn't. I don't know if the problem is in my configuration. I tried purging all the configuration files and starting from sratch. I don't know if the problem is with openswan reading the key file. Or maybe the problem is with the way debconf generates the key file.
I did try one thing. I went to one of my computers where showhostkey is working. I backed up the /etc/ipsec.d/private/*.pem. I created a new pem file by running "dpkg-reconfigure openswan". I did not change the config files. ipsec showhostkey broke. I restored the pem file and it started working again. This makes me think that debconf is not generating a valid pem file. I don't know what else to try. I welcome any suggestions. Marc # dpkg-reconfigure openswan Generating a 2048 bit RSA private key ...................................+++ .................................................................+++ writing new private key to '/etc/ipsec.d/private/wcrg-routerKey.pem' ----- You are about to be asked to enter information that will be incorporated into your certificate request. What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter '.', the field will be left blank. ----- Country Name (2 letter code) [AU]:State or Province Name (full name) [Some-Stat$ # /etc/init.d/ipsec restart ipsec_setup: Stopping Openswan intelIPsec... ipsec_setup: ERROR: Module xfrm4_mode_transport is in use ipsec_setup: ERROR: Module esp4 is in use ipsec_setup: Starting Openswan intelIPsec U2.6.28/K2.6.39-2-686-pae... # ipsec showhostkey --left ipsec showhostkey error in PKCS#1 private key ipsec showhostkey "/etc/ipsec.secrets" line 15: error loading RSA private key f$ ipsec showhostkey: wrong kind of key PPK_XAUTH in show_confkey. Expected PPK_RS$ Exit 5 -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
