Hi,
I just want to enable openssl plugin for all cryptographic needs. I have
following plugins enabled/disabled:
--enable-openssl \
--disable-aes \
--disable-des \
--disable-md5 \
--disable-rc2 \
--disable-sha1 \
--disable-sha2 \
--disable-fips-prf \
--disable-gmp \
--disable-pubkey \
--disable-pkcs1 \
--disable-pkcs7 \
--disable-pkcs8 \
--disable-pkcs12 \
--disable-dnskey \
--disable-sshkey \
--enable-sqlite \
--enable-tnc-ifmap \
--enable-tnc-pdp \
--enable-imc-test \
--enable-imv-test \
--enable-imc-scanner \
--enable-imv-scanner \
--enable-imc-attestation \
--enable-imv-attestation \
--enable-imv-os \
--enable-imc-os \
--enable-imc-swid \
--enable-imv-swid \
--enable-tnccs-20 \
--enable-tnccs-11 \
--enable-tnccs-dynamic \
--enable-tnc-imc \
--enable-tnc-imv \
--enable-curl \
--enable-acert \
--enable-aikgen
However I observe following errors when using aikgen:
strongswan pki --gen --type rsa --size 2048 > aikCaKey.der
strongswan pki --pub --in aikCaKey.der > aikCaPub.der
strongswan pki --self --in aikCaKey.der --dn "C=CH, O=test Project, CN=test
Privacy CA" --lifetime 3650 --ca --digest sha256 > aikCaCert.der
strongswan aikgen --capubkey aikCaPub.der --aikblob aikBlob.bin --aikpubkey
aikPub.der building CRED_CERTIFICATE - TRUSTED_PUBKEY failed, tried 0
builders
error: could not read ca public key file 'aikCaPub.der'
Thanks and Regards
Avesh
_______________________________________________
Users mailing list
[email protected]
https://lists.strongswan.org/mailman/listinfo/users
