<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:arial, helvetica, sans-serif;font-size:12pt"><div><br></div><div>I'm pretty much at a dead end on how to proceed further. Does anyone have ideas or suggestions to debug the charon daemon when it is in a restart loop when using ECDSA public and private keys?</div><div><br></div><div>Thanks in advance for any help and/or suggestions to proceed,</div><div>Bill</div><div style="font-family:arial, helvetica, sans-serif;font-size:12pt"><br><div style="font-family:times new roman, new york, times, serif;font-size:12pt"><font size="2" face="Tahoma"><hr size="1"><b><span style="font-weight: bold;">From:</span></b> William Greene <wgreene9617@yahoo.com><br><b><span style="font-weight: bold;">To:</span></b> Andreas Steffen <andreas.steffen@strongswan.org><br><b><span style="font-weight: bold;">Cc:</span></b>
users@lists.strongswan.org<br><b><span style="font-weight: bold;">Sent:</span></b> Wed, December 1, 2010 9:44:59 AM<br><b><span style="font-weight: bold;">Subject:</span></b> Re: [strongSwan] Fail on loading secrets (ECDSA)<br></font><br>
<div style="font-family:arial, helvetica, sans-serif;font-size:12pt;"><div style="color:black;font-family:arial, helvetica, sans-serif;font-size:12pt;"><br></div><div style="color:black;font-family:arial, helvetica, sans-serif;font-size:12pt;">Here are snippets from the logs for each type of encoding. They just repeat.</div><div style="color:black;font-family:arial, helvetica, sans-serif;font-size:12pt;"><br></div><div style="color:black;font-family:arial, helvetica, sans-serif;font-size:12pt;">Using DER encoded certificates, from the charon.log:</div><div style="color:black;font-family:arial, helvetica, sans-serif;font-size:12pt;"><br></div><div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:54 00[DMN] Starting IKEv2 charon daemon (strongSwan 4.5.0)</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:54 00[LIB] plugin 'aes': loaded
successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:54 00[LIB] plugin 'des': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:54 00[LIB] plugin 'sha1': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:54 00[LIB] plugin 'sha2': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:54 00[LIB] plugin 'md5': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:54 00[LIB] plugin 'random': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:54 00[LIB] plugin 'x509':
loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:54 00[LIB] plugin 'revocation': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:54 00[LIB] plugin 'pubkey': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:54 00[LIB] plugin 'pkcs1': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:54 00[LIB] plugin 'pgp': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:54 00[LIB] plugin 'pem': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:54 00[LIB] plugin 'openssl': loaded successfully</font></div><div><font class="Apple-style-span"
face="arial, helvetica, sans-serif">Dec 1 09:36:54 00[LIB] plugin 'gcrypt': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:54 00[LIB] plugin 'fips-prf': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:54 00[LIB] plugin 'gmp': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:54 00[LIB] plugin 'xcbc': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:54 00[LIB] plugin 'hmac': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:54 00[LIB] plugin 'gcm': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:54 00[LIB] plugin
'attr': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:54 00[KNL] listening on interfaces:</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:54 00[KNL] eth0</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:54 00[KNL] 10.168.80.8</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:54 00[KNL] 2005:a8::21e:c9ff:feff:124</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:54 00[KNL] 2004:a8::21e:c9ff:feff:124</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:54 00[KNL] fe80::21e:c9ff:feff:124</font></div><div><font class="Apple-style-span" face="arial, helvetica,
sans-serif">Dec 1 09:36:54 00[KNL] received netlink error: Address family not supported by protocol (97)</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:54 00[KNL] unable to create IPv6 routing table rule</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:54 00[LIB] plugin 'kernel-netlink': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:54 00[LIB] plugin 'resolve': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:54 00[LIB] plugin 'socket-default': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:54 00[CFG] loading ca certificates from '/etc/ipsec.d/cacerts'</font></div><div><font class="Apple-style-span" face="arial,
helvetica, sans-serif">Dec 1 09:36:54 00[CFG] loading aa certificates from '/etc/ipsec.d/aacerts'</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:54 00[CFG] loading ocsp signer certificates from '/etc/ipsec.d/ocspcerts'</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:54 00[CFG] loading attribute certificates from '/etc/ipsec.d/acerts'</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:54 00[CFG] loading crls from '/etc/ipsec.d/crls'</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:54 00[CFG] loading secrets from '/etc/ipsec.secrets'</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:59 00[DMN] Starting IKEv2 charon daemon (strongSwan 4.5.0)</font></div><div><font class="Apple-style-span"
face="arial, helvetica, sans-serif">Dec 1 09:36:59 00[LIB] plugin 'aes': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:59 00[LIB] plugin 'des': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:59 00[LIB] plugin 'sha1': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:59 00[LIB] plugin 'sha2': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:59 00[LIB] plugin 'md5': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:59 00[LIB] plugin 'random': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:59 00[LIB] plugin 'x509':
loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:59 00[LIB] plugin 'revocation': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:59 00[LIB] plugin 'pubkey': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:59 00[LIB] plugin 'pkcs1': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:59 00[LIB] plugin 'pgp': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:59 00[LIB] plugin 'pem': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:59 00[LIB] plugin 'openssl': loaded successfully</font></div><div><font class="Apple-style-span"
face="arial, helvetica, sans-serif">Dec 1 09:36:59 00[LIB] plugin 'gcrypt': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:59 00[LIB] plugin 'fips-prf': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:59 00[LIB] plugin 'gmp': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:59 00[LIB] plugin 'xcbc': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:59 00[LIB] plugin 'hmac': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:59 00[LIB] plugin 'gcm': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:59 00[LIB] plugin
'attr': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:59 00[KNL] listening on interfaces:</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:59 00[KNL] eth0</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:59 00[KNL] 10.168.80.8</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:59 00[KNL] 2005:a8::21e:c9ff:feff:124</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:59 00[KNL] 2004:a8::21e:c9ff:feff:124</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:59 00[KNL] fe80::21e:c9ff:feff:124</font></div><div><font class="Apple-style-span" face="arial, helvetica,
sans-serif">Dec 1 09:36:59 00[KNL] received netlink error: Address family not supported by protocol (97)</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:59 00[KNL] unable to create IPv6 routing table rule</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:59 00[LIB] plugin 'kernel-netlink': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:59 00[LIB] plugin 'resolve': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:59 00[LIB] plugin 'socket-default': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:59 00[CFG] loading ca certificates from '/etc/ipsec.d/cacerts'</font></div><div><font class="Apple-style-span" face="arial,
helvetica, sans-serif">Dec 1 09:36:59 00[CFG] loading aa certificates from '/etc/ipsec.d/aacerts'</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:59 00[CFG] loading ocsp signer certificates from '/etc/ipsec.d/ocspcerts'</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:59 00[CFG] loading attribute certificates from '/etc/ipsec.d/acerts'</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:59 00[CFG] loading crls from '/etc/ipsec.d/crls'</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:36:59 00[CFG] loading secrets from '/etc/ipsec.secrets'</font></div><div style="color:black;font-family:arial, helvetica, sans-serif;font-size:12pt;"><br></div></div><div style="color:black;font-family:arial, helvetica, sans-serif;font-size:12pt;"><br></div><div
style="color:black;font-family:arial, helvetica, sans-serif;font-size:12pt;">Using PEM encoded certificates, the charon.log:</div><div style="color:black;font-family:arial, helvetica, sans-serif;font-size:12pt;"><br></div><div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:19 00[DMN] Starting IKEv2 charon daemon (strongSwan 4.5.0)</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:19 00[LIB] plugin 'aes': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:19 00[LIB] plugin 'des': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:19 00[LIB] plugin 'sha1': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:19 00[LIB] plugin
'sha2': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:19 00[LIB] plugin 'md5': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:19 00[LIB] plugin 'random': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:19 00[LIB] plugin 'x509': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:19 00[LIB] plugin 'revocation': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:19 00[LIB] plugin 'pubkey': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:19 00[LIB] plugin 'pkcs1': loaded successfully</font></div><div><font
class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:19 00[LIB] plugin 'pgp': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:19 00[LIB] plugin 'pem': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:19 00[LIB] plugin 'openssl': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:19 00[LIB] plugin 'gcrypt': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:19 00[LIB] plugin 'fips-prf': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:19 00[LIB] plugin 'gmp': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1
09:41:19 00[LIB] plugin 'xcbc': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:19 00[LIB] plugin 'hmac': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:19 00[LIB] plugin 'gcm': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:19 00[LIB] plugin 'attr': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:19 00[KNL] listening on interfaces:</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:19 00[KNL] eth0</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:19 00[KNL] 10.168.80.8</font></div><div><font class="Apple-style-span" face="arial,
helvetica, sans-serif">Dec 1 09:41:19 00[KNL] 2005:a8::21e:c9ff:feff:124</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:19 00[KNL] 2004:a8::21e:c9ff:feff:124</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:19 00[KNL] fe80::21e:c9ff:feff:124</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:19 00[KNL] received netlink error: Address family not supported by protocol (97)</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:19 00[KNL] unable to create IPv6 routing table rule</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:19 00[LIB] plugin 'kernel-netlink': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica,
sans-serif">Dec 1 09:41:19 00[LIB] plugin 'resolve': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:19 00[LIB] plugin 'socket-default': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:19 00[CFG] loading ca certificates from '/etc/ipsec.d/cacerts'</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:19 00[CFG] loading aa certificates from '/etc/ipsec.d/aacerts'</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:19 00[CFG] loading ocsp signer certificates from '/etc/ipsec.d/ocspcerts'</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:19 00[CFG] loading attribute certificates from '/etc/ipsec.d/acerts'</font></div><div><font class="Apple-style-span"
face="arial, helvetica, sans-serif">Dec 1 09:41:19 00[CFG] loading crls from '/etc/ipsec.d/crls'</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:19 00[CFG] loading secrets from '/etc/ipsec.secrets'</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:19 00[LIB] file content is not binary ASN.1</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:19 00[LIB] -----BEGIN EC PRIVATE KEY-----</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:19 00[LIB] -----END EC PRIVATE KEY-----</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:24 00[DMN] Starting IKEv2 charon daemon (strongSwan 4.5.0)</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1
09:41:24 00[LIB] plugin 'aes': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:24 00[LIB] plugin 'des': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:24 00[LIB] plugin 'sha1': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:24 00[LIB] plugin 'sha2': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:24 00[LIB] plugin 'md5': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:24 00[LIB] plugin 'random': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:24 00[LIB] plugin 'x509': loaded successfully</font></div><div><font
class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:24 00[LIB] plugin 'revocation': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:24 00[LIB] plugin 'pubkey': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:24 00[LIB] plugin 'pkcs1': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:24 00[LIB] plugin 'pgp': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:24 00[LIB] plugin 'pem': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:24 00[LIB] plugin 'openssl': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec
1 09:41:24 00[LIB] plugin 'gcrypt': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:24 00[LIB] plugin 'fips-prf': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:24 00[LIB] plugin 'gmp': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:24 00[LIB] plugin 'xcbc': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:24 00[LIB] plugin 'hmac': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:24 00[LIB] plugin 'gcm': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:24 00[LIB] plugin 'attr': loaded
successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:24 00[KNL] listening on interfaces:</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:24 00[KNL] eth0</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:24 00[KNL] 10.168.80.8</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:24 00[KNL] 2005:a8::21e:c9ff:feff:124</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:24 00[KNL] 2004:a8::21e:c9ff:feff:124</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:24 00[KNL] fe80::21e:c9ff:feff:124</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec
1 09:41:24 00[KNL] received netlink error: Address family not supported by protocol (97)</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:24 00[KNL] unable to create IPv6 routing table rule</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:24 00[LIB] plugin 'kernel-netlink': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:24 00[LIB] plugin 'resolve': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:24 00[LIB] plugin 'socket-default': loaded successfully</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:24 00[CFG] loading ca certificates from '/etc/ipsec.d/cacerts'</font></div><div><font class="Apple-style-span" face="arial, helvetica,
sans-serif">Dec 1 09:41:24 00[CFG] loading aa certificates from '/etc/ipsec.d/aacerts'</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:24 00[CFG] loading ocsp signer certificates from '/etc/ipsec.d/ocspcerts'</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:24 00[CFG] loading attribute certificates from '/etc/ipsec.d/acerts'</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:24 00[CFG] loading crls from '/etc/ipsec.d/crls'</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:24 00[CFG] loading secrets from '/etc/ipsec.secrets'</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:24 00[LIB] file content is not binary ASN.1</font></div><div><font class="Apple-style-span" face="arial,
helvetica, sans-serif">Dec 1 09:41:24 00[LIB] -----BEGIN EC PRIVATE KEY-----</font></div><div><font class="Apple-style-span" face="arial, helvetica, sans-serif">Dec 1 09:41:24 00[LIB] -----END EC PRIVATE KEY-----</font></div><div style="color:black;font-family:arial, helvetica, sans-serif;font-size:12pt;"><br></div></div><div style="font-family:arial, helvetica, sans-serif;font-size:12pt;color:black;"><br><div style="font-family:arial, helvetica, sans-serif;font-size:13px;"><font size="2" face="Tahoma"><hr size="1"><b><span style="font-weight:bold;">From:</span></b> Andreas Steffen <andreas.steffen@strongswan.org><br><b><span style="font-weight:bold;">To:</span></b> William Greene <wgreene9617@yahoo.com><br><b><span style="font-weight:bold;">Cc:</span></b> users@lists.strongswan.org<br><b><span style="font-weight:bold;">Sent:</span></b> Tue, November 30, 2010 5:35:04 PM<br><b><span style="
font-weight:bold;">Subject:</span></b> Re: [strongSwan] Fail on loading secrets (ECDSA)<br></font><br>
Hello Bill,<br><br>what does "restarting" mean? Does charon crash? (what it shouldn't)<br>If you give the key in PEM format then it is normal that it is<br>automatically converted to DER format first.<br><br>Regards<br><br>Andreas<br><br>On 11/30/2010 09:55 PM, William Greene wrote:<br>> Hello,<br>><br>> The charon daemon keeps restarting after the "loading secrets from<br>> '/etc/ipsec.secrets' log line when the private key is in der format. In<br>> pem form, same thing but with:<br>><br>> Nov 30 14:28:52 00[CFG] loading secrets from '/etc/ipsec.secrets'<br>> Nov 30 14:28:52 00[LIB] file content is not binary ASN.1<br>> Nov 30 14:28:52 00[LIB] -----BEGIN EC PRIVATE KEY-----<br>> Nov 30 14:28:52 00[LIB] -----END EC PRIVATE KEY-----<br>><br>> So der form seems the way to go. It appears that I'm having the same<br>> issue as this:<br>><br>> <a rel="nofollow" target="_blank"
href="https://lists.strongswan.org/pipermail/users/2008-December/003030.html">https://lists.strongswan.org/pipermail/users/2008-December/003030.html</a><br>><br>> I've regenerated these ECDSA keys several times and I'm at a loss right<br>> now how to get going with SuiteB testing. I've attached the files that<br>> I'm using, hoping that someone can tease a clue out from them.<br>><br>> Thanks in advance for any help anyone can provided,<br>> Bill<br>><br>><br>><br>> Note: I was unable to use "ipsec pki" commands to create the keys so I<br>> resolved myself to using openssl and I removed the passphase from the<br>> private key file, so I know that can't be the issue. To do this I did<br>> the following:<br>><br>><br>> [root@KAP8 private]# openssl ecparam -genkey -name secp384r1 -out<br>> testParam.pem<br>><br>> [root@KAP8 private]# openssl req -x509 -newkey ec:testParam.pem
-config<br>> /root/openssl.cnf -out testPub.pem -outform PEM<br>> Generating a 384 bit EC private key<br>> writing new private key to 'privkey.pem'<br>> Enter PEM pass phrase:<br>> Verifying - Enter PEM pass phrase:<br>> -----<br>> ...<br>><br>> [root@KAP8 private]# ls<br>> privkey.pem temp testParam.pem testPub.pem<br>><br>> [root@KAP8 private]# openssl ec -in privkey.pem -out testKey.pem<br>> read EC key<br>> Enter PEM pass phrase:<br>> writing EC key<br>><br>> [root@KAP8 private]# ls<br>> privkey.pem temp testKey.pem testParam.pem testPub.pem<br>><br>> [root@KAP8 private]# openssl ec -outform DER -in testKey.pem -out<br>> testKey.der<br>> read EC key<br>> writing EC key<br><br>======================================================================<br>Andreas Steffen <a rel="nofollow"
ymailto="mailto:andreas.steffen@strongswan.org" target="_blank" href="mailto:andreas.steffen@strongswan.org">andreas.steffen@strongswan.org</a><br>strongSwan - the Linux VPN Solution! <a rel="nofollow" target="_blank" href="http://www.strongswan.org">www.strongswan.org</a><br>Institute for Internet Technologies and Applications<br>University of Applied Sciences Rapperswil<br>CH-8640 Rapperswil (Switzerland)<br>===========================================================[ITA-HSR]==<br></div></div><div style="color:black;font-family:arial, helvetica, sans-serif;font-size:12pt;"></div>
</div><br>
</div></div><div style="position:fixed"></div>
</div><br>
</body></html>