<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">Rescued from the Spam bucket. Please remember to subscribe to the mailing list before posting to it.<br><div><br><div><div><div class="hmmessage" style="font-size: 12pt; font-family: Calibri; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;"><div style="margin: 0px;"><span style="font-family: Helvetica; color: rgb(127, 127, 127);"><b>From:<span class="Apple-converted-space"> </span></b></span><span style="font-family: Helvetica;">andy paleologopoulos <<a href="mailto:chfanfiction@hotmail.com">chfanfiction@hotmail.com</a>><br></span></div><div style="margin: 0px;"><span style="font-family: Helvetica; color: rgb(127, 127, 127);"><b>Subject:<span class="Apple-converted-space"> </span></b></span><span style="font-family: Helvetica;"><b>Using the %dns option</b><br></span></div><div style="margin: 0px;"><span style="font-family: Helvetica; color: rgb(127, 127, 127);"><b>Date:<span class="Apple-converted-space"> </span></b></span><span style="font-family: Helvetica;">July 28, 2014 at 3:06:22 PM GMT-4<br></span></div><div style="margin: 0px;"><span style="font-family: Helvetica; color: rgb(127, 127, 127);"><b>To:<span class="Apple-converted-space"> </span></b></span><span style="font-family: Helvetica;">"<a href="mailto:users@lists.openswan.org">users@lists.openswan.org</a>" <<a href="mailto:users@lists.openswan.org">users@lists.openswan.org</a>><br></span></div><br><br><div dir="ltr"><div><div>Hi all,<br><br></div>I'm currently trying to set up a simple host-to-host connection between two machines. I want to set it up using DNS to store the pubic keys so that I don't need to copy them over using the leftrsasigkey=%dns option, but simply replacing the keys in the .conf file doesn't seem to work. Is there a step I'm missing to store the keys in DNS? I haven't changed anything from how you would to a normal host-to-host connection. My .conf file currently looks similar to this:<br><br>conn vpn<br> left=0.1.0.1<br> leftrsasigkey=%dns<br> right=1.0.1.0<br> rightrsasigkey=%dns<br> auto=start<br> type=transport<br> authby=rsasig<br> forceencaps=on<br> ikev2=insist<br><br></div>The man page for pluto points me to the man page for named, but I still can't seem to find what I'm looking for. Any help would be much appreciated.</div></div></div></div></div><br></body></html>