[strongSwan] Strongswan Unable to load OpenSSL RSA Private-Key File

[Rajiv Kulkarni]

Hello Tobias

I did as adviced and iam getting the following error on "ipsec start
--nofork"

-------------------------------
00[CFG] loading secrets from '/usr/local/etc/ipsec.secrets'
00[LIB] key integrity tests failed
00[LIB] building CRED_PRIVATE_KEY - RSA failed, tried 5 builders
00[CFG]   loading private key from '/etc/ipsec.d/private/mfcgw1key.pem'
failed
-----------------------------------------------------------------

thanks & regards

rajiv


On Thu, Nov 10, 2011 at 9:41 PM, Tobias Brunner <tobias at strongswan.org>wrote:

> Hi Rajiv,
>
> Try adding an empty line between the third and fourth line of your
> private key file, like this:
>
> > -----BEGIN RSA PRIVATE KEY-----
> > Proc-Type: 4,ENCRYPTED
> > DEK-Info: DES-EDE3-CBC,2FC8D750D505E922
> > D8p/CHn/F5PuiLtSIp9AWfZ9Iig9VQydF7uhCDgJKgOutYGj7PkoufOhFsJ+H7D1
> > 85P87fkzGA6LYj8LyF7/UXKGs0eBC8BT+c6zlVO1SVgvUii5A42oYXKUQQD1AA6d
> > ...
> > -----END RSA PRIVATE KEY-----
>
> ====>
>
> > -----BEGIN RSA PRIVATE KEY-----
> > Proc-Type: 4,ENCRYPTED
> > DEK-Info: DES-EDE3-CBC,2FC8D750D505E922
> >
> > D8p/CHn/F5PuiLtSIp9AWfZ9Iig9VQydF7uhCDgJKgOutYGj7PkoufOhFsJ+H7D1
> > 85P87fkzGA6LYj8LyF7/UXKGs0eBC8BT+c6zlVO1SVgvUii5A42oYXKUQQD1AA6d
> > ...
> > -----END RSA PRIVATE KEY-----
>
> Regards,
> Tobias
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20111110/46ce6b05/attachment.html>