[strongSwan] IPSec PKI error

Tobias Brunner tobias at strongswan.org
Mon Apr 16 10:39:47 CEST 2012

Hi Chris,

> Strongswan 4.3.xx on SLES11 SP1.
> ...
> when I run IPSec pki --gen >> cakey.der I get unknown IPSec command
> 'pki'. IPSec is started. What is the problem?

The ipsec pki command was introduced with 4.3.5, so depending on the
value of .xx in the version number above, it won't be available.  The
same applies if you configured strongSwan with --disable-tools.
Anyway, since 'ipsec pki' is an independent utility it doesn't matter
whether the daemons are running or not (i.e. 'ipsec start' is not
required to use it).


More information about the Users mailing list