<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>So I set debug level to 4 for ike, kernel, config and network<br><br>I removed the ids to keep the minimum configuration (for better understanding) so I used IP adresses only.<br>conn cisco_home<br> left=192.168.168.152<br> leftsubnet=169.254.229.0/24<br> leftauth=psk<br> right=192.168.168.161<br> rightsubnet=192.168.15.0/24<br> rightauth=psk<br> type=tunnel<br> ike=aes128-sha1-modp1024<br> esp=aes128-sha1<br> auto=add<br><br>and ipsecure.secrets<br>192.168.168.152 192.168.168.161 : PSK password<br>include /var/lib/strongswan/ipsec.secrets.inc<br><br><br>BUT, i have the error when removing the quotes<br>$ ipsec secrets<br>002 loading secrets from "/etc/ipsec.secrets"<br>002 loaded PSK secret for 192.168.168.152 192.168.168.161<br>003 "/etc/ipsec.secrets" line 10: PSK data malformed (input does not begin with format prefix): password<br>002 loading secrets from "/var/lib/strongswan/ipsec.secrets.inc"<br><br>the version I am using <br>$ ipsec version<br>Linux strongSwan U4.5.2/K3.2.0-29-generic-pae<br><br>latest in ubuntu repo<br><b><br><br><br>From:</b> Izz Abdullah <a class="moz-txt-link-rfc2396E" href="mailto:izz.abdullah@wepanow.com">
<izz.abdullah@wepanow.com></a><br>
<b>Sent:</b> Wednesday, November 20, 2013 10:52<br>
<b>To:</b> <a class="moz-txt-link-abbreviated" href="mailto:users@lists.strongswan.org">
users@lists.strongswan.org</a> <a class="moz-txt-link-rfc2396E" href="mailto:users@lists.strongswan.org">
<users@lists.strongswan.org></a><br>
<b>Subject: </b>Re: [strongSwan] recurring problem of PSK, but cannot spot the error<br>
<br>
I ran into this same problem when I first setup strongSwan. The ipsec.secrets file is in the format like so:<br>
RemoteID : PSK PSK_VALUE<br>
192.168.168.161 : PSK password
<br>
No need for quotes, and since your ID of the remote peer is the same as the IP, then the above should work.<br>
<br>
<br>
<b>Izz Abdullah</b><br>
<i>Senior Systems Engineer</i><br>
<a moz-do-not-send="true" href="mailto:izz.abdullah@wepanow.com">Izz.Abdullah@wepanow.com</a><br>
205.605.6039 Office<br>
800.675.7639 Toll Free<br>
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="http://www.wepanow.com">www.wepanow.com</a> </div></body>
</html>