[Openswan Users] misleading verify output?

Paul Wouters paul at xelerance.com
Thu Oct 21 01:48:19 CEST 2004


On Wed, 20 Oct 2004, Ulrich Lauther wrote:

> However, "ipsec verify" gives:
>
> Checking your system to see if IPsec got installed and started correctly:
> Version check and ipsec on-path [OK]
> Linux Openswan U2.2.0/K2.6.8.1 (native)
> Checking for IPsec support in kernel [OK]
> Checking for RSA private key (/etc/ipsec.secrets) [FAILED]
> ipsec showhostkey: no default key in "/etc/ipsec.secrets"
> Checking that pluto is running [OK]
>
> What does the FAILED answer mean?

That you haven't ever used raw RSA keys to establish a connection. The
error is confusing and will be replaced. (It's in the bug tracker as todo item)

Paul


More information about the Users mailing list