Anton Sabelski <[EMAIL PROTECTED]> said:

> First you need to upgrade kernel to add support for latest FREES/wan
> support.

Is this necessary?  I believe if we stick to using the SME5 kernel and
the freeswan version already installed (freeswan-1.8-06) this is
ready-to-go?  Please correct me if I am wrong.

>
> Then take Christopher Worthington's rpm, but here is the problem
> everything installs without problem, everything appears and configures
> in e-smith manager, but no encrypted key is created

Yes, that was the first thing I noticed.  As I reported previously the
file locations in CW's templates are incorrect for SME5.  Let me explain 
further:

The RSA keys get generated by the 'rsasigkey' command.  In CW's
~/templates/etc/ipsec.secrets/10RSAKey he has the following:

"/usr/local/lib/ipsec/ipsec", "rsasigkey", "2048"

The correct location under SME5 is:

"/usr/lib/ipsec/ipsec", "rsasigkey", "2048"

Minor change but of course will not work w/o being correct.

I'm not sure how many other changes will be necessary but if no one else
has done this already, I will edit CW's source files and update all CW's
templates with the correct file locations to match SME5, then rebuild the
rpm and see where we are at.

Regards,


-- 
Darrell May
DMC Netsourced.com
http://netsourced.com
http://myEZserver.com


--
Please report bugs to [EMAIL PROTECTED]
Please mail [EMAIL PROTECTED] (only) to discuss security issues
Support for registered customers and partners to [EMAIL PROTECTED]
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org

Reply via email to