[Openswan Users] "unable to locate my private key for RSA Signature"

Kevin Wilson wkevils at gmail.com
Fri Aug 9 17:47:52 UTC 2013


Hello,
I installed today openswan on Fedora 18.
I use a simple secrets file with PSK:

cat  /etc/ipsec.secrets


192.168.1.7 192.168.1.200 : PSK "123456789"

And my /etc/ipsec.conf is also very simple:

conn linux-to-linux
        right=192.168.1.7
        left=192.168.1.200
        type=tunnel
        auto=start

I did not any tweaking with other conf files.

When I run
systemctl start ipsec.service
I get"
Main PID: 8060 (sh)
   CGroup: name=systemd:/system/ipsec.service
           ââ8060 /bin/sh -c eval `/usr/libexec/ipsec/pluto --config
/etc/ipsec.conf --nofork $PLUTO_OPTIONS`
           ââ8061 /bin/sh -c eval `/usr/libexec/ipsec/pluto --config
/etc/ipsec.conf --nofork $PLUTO_OPTIONS`
           ââ8062 /usr/libexec/ipsec/pluto --config /etc/ipsec.conf --nofork
           ââ8087 _pluto_adns

Aug 09 20:45:18 n pluto[8062]: "linux-to-linux" #1: STATE_MAIN_I2:
sent MI2, expecting MR2
Aug 09 20:45:18 n pluto[8062]: "linux-to-linux" #1: I will NOT send an
initial contact payload
Aug 09 20:45:18 n pluto[8062]: "linux-to-linux" #1: unable to locate
my private key for RSA Signature
Aug 09 20:45:18 n pluto[8062]: "linux-to-linux" #1: sending
notification AUTHENTICATION_FAILED to 192.168.1.200:500
Aug 09 20:45:28 n pluto[8062]: "linux-to-linux" #1: I will NOT send an
initial contact payload
Aug 09 20:45:28 n pluto[8062]: "linux-to-linux" #1: unable to locate
my private key for RSA Signature
Aug 09 20:45:28 n pluto[8062]: "linux-to-linux" #1: sending
notification AUTHENTICATION_FAILED to 192.168.1.200:500
Aug 09 20:45:48 n pluto[8062]: "linux-to-linux" #1: I will NOT send an
initial contact payload
Aug 09 20:45:48 n pluto[8062]: "linux-to-linux" #1: unable to locate
my private key for RSA Signature
Aug 09 20:45:48 n pluto[8062]: "linux-to-linux" #1: sending
notification AUTHENTICATION_FAILED to 192.168.1.200:500
[root at n ~]#



Any idea what is the "unable to locate my private key for RSA
Signature" error ?

rgs
Kevin


More information about the Users mailing list