[Openswan Users] misleading verify output?

Ulrich Lauther ulrich.lauther at siemens.com
Wed Oct 20 21:47:20 CEST 2004


I switched from kernel 2.4.1 + freeswan-1.98b to kernel with native
ipsec + openswan-2.2.0.
No changes in the host I am talking to.
The good news: I still can connect.

However, "ipsec verify" gives:

Checking your system to see if IPsec got installed and started correctly:
Version check and ipsec on-path [OK]
Linux Openswan U2.2.0/K2.6.8.1 (native)
Checking for IPsec support in kernel [OK]
Checking for RSA private key (/etc/ipsec.secrets) [FAILED]
ipsec showhostkey: no default key in "/etc/ipsec.secrets"
Checking that pluto is running [OK]

What does the FAILED answer mean? 


Ulrich Lauther          ph: +49 89 636 48834 fx: ... 636 42284
Siemens CT SE 6         Internet: Ulrich.Lauther at siemens.com

More information about the Users mailing list