[strongSwan] Strongswan Unable to load OpenSSL RSA Private-Key File

Tobias Brunner tobias at strongswan.org
Thu Nov 10 19:26:00 CET 2011


Hi Rajiv,

When I use

	openssl rsa -in mfcgw1key2.pem -check -noout

on my x86_64 machine with OpenSSL 0.9.8o I get

	RSA key error: dmp1 not congruent to d
	RSA key error: dmq1 not congruent to d

which is also the reason why our libgmp based plugin doesn't like the
keys, i.e.

> 00[LIB] key integrity tests failed

is logged.  Actually, OpenSSL reports this error for all the keys you
sent.  So it sure looks like your keys got corrupted somehow (or never
were valid in the first place).

Regards,
Tobias




More information about the Users mailing list