[strongSwan] RSA-encr authentication IKEv1 - no RSA private key found for

[Noel Kuntze]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hello Alex,

Please show us your configuration.

Mit freundlichen Grüßen/Regards,
Noel Kuntze

Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658

Am 18.05.2015 um 11:42 schrieb Alex Zetaeffesse:
> Hi there,
> 
> I'm trying to build a tunnel with key-auth between strongswan and a Cisco router.
> Phase 1 doesn't complete successfully because StrongSwan complains that it cannot find a key for the the other side.
> 
> May 17 05:52:10 ubuntu charon: 05[IKE] no RSA private key found for '192.168.72.4'
> 
> however the key is loaded fine when I reload ipsec
> 
> May 17 05:42:12 ubuntu charon: 00[CFG]   loaded RSA private key from '/etc/ipsec.d/private/ubuntu_prv.key'
> 
> and ipsec.secrets looks as follows
> 
> 192.168.72.144 : RSA /etc/ipsec.d/private/ubuntu_prv.key
> 
> root at ubuntu:/etc# ls -la /etc/ipsec.secrets /etc/ipsec.d/private/ubuntu_prv.key
> -r-------- 1 root root 1679 May 15 03:02 /etc/ipsec.d/private/ubuntu_prv.key
> -rw------- 1 root root  379 May 17 05:42 /etc/ipsec.secrets
> 
> root at ubuntu:~/temp# head -2 /etc/ipsec.d/private/ubuntu_prv.key
> -----BEGIN RSA PRIVATE KEY-----
> MIIEpAIBAAKCAQEAx70hAWwWg6LRdqXkdInmShazUHsrHHbbaPc6jUtlR2n/zngv
> (it's not encrypted)
> 
> Where am I doing wrong?
> 
> Thanks in advance, Alex
> 
> 
> _______________________________________________
> Users mailing list
> Users at lists.strongswan.org
> https://lists.strongswan.org/mailman/listinfo/users
> 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=V+Tj
-----END PGP SIGNATURE-----