> Yes, my ipsec.secrets contains this line: > : RSA RH7Standard.vpnHostPrivateKey.der > > Do I need to convert it to a .pem format? No, but you should check in the log whether it is successfully loaded when the daemon is started. Regards, Tobias