Well, I goofed and entered the wrong network name while trying to set up keys for a new network:

# tincd -n existing_net -K
Generating 2048 bits keys:
............................................+++++ p
..................................................................+++++ q
Done.
Please enter a file to save private RSA key to [/etc/tinc/existing_net/rsa_key.priv]:
Warning: old key(s) found and disabled.
Please enter a file to save public RSA key to [/etc/tinc/existing_net/hosts/host_on_existing_net]: ^C

I realized my error when tinc warned me, thus the ^C.
Now /etc/tinc/existing_net/rsa_key.priv has been replaced, while /etc/tinc/existing_net/hosts/host_on_existing_net still contains the old public key.

When tinc says it "disabled" the old key, did it it in fact *delete* it? I haven't found it anywhere on the system. I should look at source, but pressed for time right now. (Of course, that's when these mistakes ALWAYS happen.)

host_on_existing_net still has access to existing_net. I assume it will lose access when tinc is restarted unless I fix the config. It's a problem because some remote hosts are reachable only via existing_net, and have host_on_existing_net's now-old public key.

Thanks,
Frank
_______________________________________________
tinc mailing list
tinc@tinc-vpn.org
https://www.tinc-vpn.org/cgi-bin/mailman/listinfo/tinc

Reply via email to