[strongSwan] strongswan pki command error

anand rao anandrao_me at yahoo.co.in
Fri Nov 11 12:00:32 CET 2011

Hi Andreas,

when I execute openssl rsa -inform der -in caKey.der -noout -text
I am getting below errors.

root at OpenWrt:/# openssl rsa -inform der -in caKey.der -noout -text
unable to load Private Key


----- Original Message -----
From: Andreas Steffen <andreas.steffen at strongswan.org>
To: anand rao <anandrao_me at yahoo.co.in>
Cc: "users at lists.strongswan.org" <users at lists.strongswan.org>
Sent: Thursday, November 10, 2011 7:28 PM
Subject: Re: [strongSwan] strongswan pki command error

Hi Anand,

If I execute the same commands then the ca cert generation works.

- Verify if openssl rsa -inform der -in caKey.der -noout -text works



On 10.11.2011 14:49, anand rao wrote:
> Hi,
>   I am using strongswan 4.3.6
> I have tried generate certificates using strongswan PKI gen tool to generate RSA certificate.
> I am getting below errors.
> root at evm1gw:/etc/cert# ipsec pki --gen>  caKey.der
> root at evm1gw:/etc/cert#
> root at evm1gw:/etc/cert# ipsec pki --self --in caKey.der --dn "C=IN,O=strongSwan, CN=strongSwan CA" --ca>  caCert.der
> file coded in unknown format, discarded
> building CRED_PRIVATE_KEY - RSA failed, tried 6 builders
> parsing private key failed
> I have used the default load so all the plugins are loaded. Please help.
> Thanks,
> Anand

Andreas Steffen                        andreas.steffen at strongswan.org
strongSwan - the Linux VPN Solution!                www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)

More information about the Users mailing list