[strongSwan-dev] SQL and key IDs

[J. Tang]

Andreas Steffen <andreas.steffen at strongswan.org> writes:
> But you can compute the keyid of a certificate directly with the
> following command:
>
> ipsec pki --keyid --in strongswanCert.pem --type x509

This command did not work for me:

$ ipsec pki --pub --in strongswanCert.pem --type x509
building CRED_CERTIFICATE - X509 failed, tried 3 builders
parsing certificate failed

Thas was with the certificate in
strongswan-4.3.6/testing/hosts/carol/etc/ipsec.d/cacerts.

-- 
Jason Tang  /  tang at jtang.org  /  http://www.jtang.org