[strongSwan-dev] SQL and key IDs

Andreas Steffen andreas.steffen at strongswan.org
Tue May 4 16:53:59 CEST 2010

Hmmm, it seems as if some libstrongswan plugins are missing.

ipsec pki --keyid with RSA keys requires either

   sha1 gmp pkcs1 pem x509


   openssl pkcs1 pem x509



On 04.05.2010 16:35, J. Tang wrote:
> Andreas Steffen<andreas.steffen at strongswan.org>  writes:
>> But you can compute the keyid of a certificate directly with the
>> following command:
>> ipsec pki --keyid --in strongswanCert.pem --type x509
> This command did not work for me:
> $ ipsec pki --pub --in strongswanCert.pem --type x509
> building CRED_CERTIFICATE - X509 failed, tried 3 builders
> parsing certificate failed
> Thas was with the certificate in
> strongswan-4.3.6/testing/hosts/carol/etc/ipsec.d/cacerts.

Andreas Steffen                         andreas.steffen at strongswan.org
strongSwan - the Linux VPN Solution!                www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)

More information about the Dev mailing list