Re: [strongSwan] expected record boundary in key

2012-02-08 Thread Tobias Brunner
When I try to add 'leftcert', I can no longer use PSK. Well, what's the point of defining a certificate if you want to use a pre-shared secret for authentication? Most (all) of my connections will eventually use certificates, so the plan was to put that in the %default section, so I don't

[strongSwan] expected record boundary in key

2012-02-07 Thread Turbo Fredriksson
I'm trying to setup the usage of certificates etc with strongSWAN, but there might be something I've missed. I have had my own CA for many years, genererating working certificates for a bunch of services (ldaps, https, etc). When I try to add 'leftcert', I can no longer use PSK. conn

Re: [strongSwan] expected record boundary in key

2012-02-07 Thread Turbo Fredriksson
On Tue, 07 Feb 2012 16:44:41 +0200, Turbo Fredriksson wrote: conn %default ... leftcert=host_domain_tld.pem [...] C=SE, O=Bayour.COM, OU=System, CN=host.domain.tld, E=tu...@bayour.com %any : PSK aNothEERseCreT And if I try to connect, this is what I get in the logs:

Re: [strongSwan] expected record boundary in key

2012-02-07 Thread Tobias Brunner
Hi, When I try to add 'leftcert', I can no longer use PSK. Well, what's the point of defining a certificate if you want to use a pre-shared secret for authentication? conn %default ... leftcert=host_domain_tld.pem leftid=@host.domain.tld This gives me the following