Re: IPSec WinXP interop
On Fri, Dec 26, 2003 at 12:18:24AM +0000, Antony Gelberg wrote:
> Dec 26 00:09:44 mailhost Pluto: loaded private key file
> '/etc/ipsec.d/private/mailhostKey.pem' (1751 bytes)
> Dec 26 00:09:44 mailhost Pluto: file coded in unknown format,
> Dec 26 00:09:44 mailhost Pluto: "/etc/ipsec.secrets" line 1: error
> loading RSA private key file
That looks nasty. You better sort that out first. Perhaps you can find
some test certificates online and try with them. My private key file
looks like this:
-----BEGIN RSA PRIVATE KEY-----
some lines with encrypted key
-----END RSA PRIVATE KEY-----
> mailhost:~# cat /etc/ipsec.secrets
> : RSA /etc/ipsec.d/private/mailhostKey.pem "xxx"
My ipsec.secrets looks similar...
> Note that the xxx is really the "export password" that I gave when I
> generated the key.
Try doing 'openssl des -d -in mailhostKey.pem' to see if that xxx
> I guess that the "no suitable connection" is because of the above
Perhaps... First get that private key working and then try again.