Execute ipsec rereadsecrets
and look for error messages in the log. It might be that your passphrase is not correct. ipsec listcerts should show your certificate with the comment .., has private key Best regards Andreas On 24.03.2010 14:01, Abbhishek Misra wrote: > Hello All, > > I'm trying to setup host2host-cert example but very basic steps are > not going through. > > > plm56:~/abhishek # ipsec up host-host > initiating IKE_SA host-host[1] to 9.182.176.61 > generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) (NATD_D_IP) ] > sending packet: from 9.182.176.56[500] to 9.182.176.61[500] > received packet: from 9.182.176.61[500] to 9.182.176.56[500] > parsed IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) (NATD_D_IP) > N(MULT_AUTH) ] > no private key found for 'plm56.in.ibm.com' > plm56:~/abhishek # > > > I have used all conf files as mentioned in the example > > ipsec listcerts is not showing my certificates that i generated using > this doc http://www.ipsec-howto.org/x595.html > > This is how my secrets file looks > > plm56:~/abhishek # cat /etc/ipsec.secrets > # /etc/ipsec.secrets - strongSwan IPsec secrets file > : RSA newkey.pem "abhishek" > > > following is my dir listing http://pastebin.com/PZUgn6zQ > > this is my /etc/ssl/openssl.cnf http://pastebin.com/w3v2zymm > > i have gone through > https://lists.strongswan.org/pipermail/users/2009-August/003771.html > and verified modulus for newcert.pem and newkey.pem > > Please take a look at these and let me know what more should I do to > get through. > > > regards > Abhishek Misra ====================================================================== Andreas Steffen [email protected] strongSwan - the Linux VPN Solution! www.strongswan.org Institute for Internet Technologies and Applications University of Applied Sciences Rapperswil CH-8640 Rapperswil (Switzerland) ===========================================================[ITA-HSR]== _______________________________________________ Users mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/users
