<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:arial, helvetica, sans-serif;font-size:12pt">
<div style="font-family:arial, helvetica, sans-serif;font-size:12pt;color:#000000;"><div style="color:rgb(0, 0, 0);font-family:arial, helvetica, sans-serif;font-size:12pt;">Hello,</div><div style="color:rgb(0, 0, 0);font-family:arial, helvetica, sans-serif;font-size:12pt;"><br></div><div style="color:rgb(0, 0, 0);font-family:arial, helvetica, sans-serif;font-size:12pt;">The charon daemon keeps restarting after the "loading secrets from '/etc/ipsec.secrets' log line when the private key is in der format. In pem form, same thing but with:</div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif"><br></font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif"><div>Nov 30 14:28:52 00[CFG] loading secrets from '/etc/ipsec.secrets'</div><div>Nov 30 14:28:52 00[LIB] file content is not binary ASN.1</div><div>Nov 30 14:28:52 00[LIB] -----BEGIN EC PRIVATE KEY-----</div><div>Nov 30 14:28:52 00[LIB]
-----END EC PRIVATE KEY-----</div><div><br></div></font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">So der form seems the way to go. It appears that </font>I'm having the same issue as this:</div><meta charset="utf-8"><div style="color: rgb(0, 0, 0); font-family: arial, helvetica, sans-serif; font-size: 12pt; "><br></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif"><span><a target="_blank" href="https://lists.strongswan.org/pipermail/users/2008-December/003030.html">https://lists.strongswan.org/pipermail/users/2008-December/003030.html</a></span></font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif"><br></font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">I've regenerated these ECDSA keys several times and I'm at a loss right now how to get going with SuiteB testing. I've attached the files that I'm using,
hoping that someone can tease a clue out from them.</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif"><br></font></div><div>Thanks in advance for any help anyone can provided,</div><div>Bill</div><div><br></div><div><br></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif"><br></font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Note: I was unable to use "ipsec pki" commands to create the keys so I resolved myself to using openssl and I </font>removed the passphase from the private key file, so I know that can't be the issue. To do this I did the following:</div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif"><br></font></div><div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif"><br></font></div><div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">[root@KAP8 private]# openssl ecparam
-genkey -name secp384r1 -out testParam.pem</font></div></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif"><br></font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif"><div>[root@KAP8 private]# openssl req -x509 -newkey ec:testParam.pem -config /root/openssl.cnf -out testPub.pem -outform PEM</div><div>Generating a 384 bit EC private key</div><div>writing new private key to 'privkey.pem'</div><div>Enter PEM pass phrase:</div><div>Verifying - Enter PEM pass phrase:</div><div>-----</div><div>...</div><div><br></div><div><div>[root@KAP8 private]# ls</div><div>privkey.pem temp testParam.pem testPub.pem</div><div><br></div><div>[root@KAP8 private]# openssl ec -in privkey.pem -out testKey.pem</div><div>read EC key</div><div>Enter PEM pass phrase:</div><div>writing EC key</div><div><br></div><div>[root@KAP8 private]# ls</div><div>privkey.pem temp testKey.pem
testParam.pem testPub.pem</div><div><br></div></div><div><div>[root@KAP8 private]# openssl ec -outform DER -in testKey.pem -out testKey.der</div><div>read EC key</div><div>writing EC key</div></div><div><br></div><div><br></div></font></div><div><font class="Apple-style-span" face="arial, helvetica,
sans-serif"><br></font></div><div style="font-family:arial, helvetica, sans-serif;"><br></div></div><div style="color:rgb(0, 0, 0);font-family:arial, helvetica, sans-serif;font-size:12pt;"></div>
</div><div style="position:fixed"></div></div><br>
</body></html>