<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.6000.16850" name=GENERATOR></HEAD>
<BODY>
<DIV dir=ltr align=left><FONT face=Arial size=2><SPAN
class=789583123-07072009>What does "CKAIDNSS keyword not found where expected in
RSA key" mean?</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=789583123-07072009></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=789583123-07072009>I have an aging
system running Linux Openswan U2.4.5/K2.6.18-1.2798.fc6 (netkey). I am
replacing it with a new system running Linux Openswan U2.6.21/K(no kernel code
presently loaded). The replacement system will also run netkey, I
just have Openswan shut down on it right now. </SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=789583123-07072009></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=789583123-07072009>So I copied the
hostkey.secrets file and appropriate .conf files from the old to the new
system. When I start IPSEC on the new system, I see this message in
/var/log/secure:</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=789583123-07072009></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=789583123-07072009>Jul 7 17:59:02
huge-fw pluto[4537]: "/etc/ipsec.d/hostkey.secrets" line 14: CKAIDNSS keyword
not found where expected in RSA key<BR></SPAN></FONT><FONT face=Arial
size=2><SPAN class=789583123-07072009></SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN class=789583123-07072009>What does this
mean? I am replacing the HQ site and there are a couple of branch
sites in this case. Did the format of the keys change and do I need to
generate a new key at the HQ site and fiddle with scripts at all my branch sites
to use the new key at the HQ site?</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=789583123-07072009></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN
class=789583123-07072009>thanks</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=789583123-07072009></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=789583123-07072009>- Greg
Scott</DIV></SPAN></FONT></BODY></HTML>