On Tue, Jan 20, 2015 at 10:37 AM, Avesh Agarwal <[email protected]> wrote:
> Hi, > > I just want to enable openssl plugin for all cryptographic needs. I have > following plugins enabled/disabled: > > --enable-openssl \ > --disable-aes \ > --disable-des \ > --disable-md5 \ > --disable-rc2 \ > --disable-sha1 \ > --disable-sha2 \ > --disable-fips-prf \ > --disable-gmp \ > --disable-pubkey \ > --disable-pkcs1 \ > --disable-pkcs7 \ > --disable-pkcs8 \ > --disable-pkcs12 \ > --disable-dnskey \ > --disable-sshkey \ > --enable-sqlite \ > --enable-tnc-ifmap \ > --enable-tnc-pdp \ > --enable-imc-test \ > --enable-imv-test \ > --enable-imc-scanner \ > --enable-imv-scanner \ > --enable-imc-attestation \ > --enable-imv-attestation \ > --enable-imv-os \ > --enable-imc-os \ > --enable-imc-swid \ > --enable-imv-swid \ > --enable-tnccs-20 \ > --enable-tnccs-11 \ > --enable-tnccs-dynamic \ > --enable-tnc-imc \ > --enable-tnc-imv \ > --enable-curl \ > --enable-acert \ > --enable-aikgen > > However I observe following errors when using aikgen: > > strongswan pki --gen --type rsa --size 2048 > aikCaKey.der > > strongswan pki --pub --in aikCaKey.der > aikCaPub.der > > strongswan pki --self --in aikCaKey.der --dn "C=CH, O=test Project, > CN=test Privacy CA" --lifetime 3650 --ca --digest sha256 > aikCaCert.der > > strongswan aikgen --capubkey aikCaPub.der --aikblob aikBlob.bin > --aikpubkey aikPub.der building CRED_CERTIFICATE - TRUSTED_PUBKEY failed, > tried 0 builders > error: could not read ca public key file 'aikCaPub.der' > I noticed that I had to enable pubkey, and pkcs1/7/8/12 plugins too to make it work and then there is no error. > > Thanks and Regards > Avesh >
_______________________________________________ Users mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/users
