(Courriels de diversion: <muscs@etroitement-aberrante.com> <couses@check-lists-mandariniers.com> <malfaiteurs@meteorologique-demanche.com> <croquer@delicatesses-congeneres.com> <emeche@satisfaisant-suppleerent.com> <enjambera@grossissons-accumulateurs.com> <indifferemment@eluciderez-cueillais.com> <malversation@convenu-insonorisait.com> <vilipendees@encapsules-deformons.com> <imaginerez@maîtresse-blinderont.com> )
On Thu, Aug 12, 2004 at 04:23:12PM +0200, Frank Taillandier wrote:
> f1sxo a écrit :
> > Un ipsec restart me donne ce message d'erreur :
> > ipsec_setup: (/etc/ipsec.conf, line 25) section header
> > "rightrsasigkey=xxxxxxxxxxxxxxxxxxxxxxxxxxxxv"
> > has wrong number of fields (1) -- `restart' aborted
Bon, j'ai trouvé une partie de la reponse :
Il manquait un espace à cette ligne :
rightrsasigkey=xxxxxxxxxxxx
Par contre ipsec barf n'est pas du tout content :-(
Aug 12 18:35:17 fred3 ipsec_setup: send: Invalid argument
Aug 12 18:35:19 fred3 ipsec_setup: pluto appears to be running already
Aug 12 18:35:19 fred3 ipsec_setup: send: Invalid argument
Aug 12 18:35:22 fred3 ipsec__plutorun: 003 "/etc/ipsec.secrets" line 10:
premature end of RSA key
Aug 12 18:35:22 fred3 ipsec__plutorun: 003 ERROR "/etc/ipsec.secrets"
line 10: index "/tmp/ipsec-postinst.JSKPPL" illegal (non-DNS-name)
character in name
Aug 12 18:35:22 fred3 ipsec__plutorun: 003 ERROR "/etc/ipsec.secrets"
line 11: index "}" illegal (non-DNS-name) character in name
Aug 12 18:35:22 fred3 ipsec__plutorun: 003 "/etc/ipsec.secrets" line 11:
unexpected end of id list
Aug 12 18:35:22 fred3 ipsec__plutorun: 003 "packetdefault": ERROR:
netlink XFRM_MSG_NEWPOLICY response for flow %trap included errno 17:
File exists
Aug 12 18:35:22 fred3 ipsec__plutorun: 025 "packetdefault": could not
route
Aug 12 18:35:22 fred3 ipsec__plutorun: ...could not route conn
"packetdefault"
Aug 12 18:35:22 fred3 pluto[11417]: loading group
"/etc/ipsec.d/policies/clear-or-private"
Aug 12 18:35:22 fred3 pluto[11417]: loading group
"/etc/ipsec.d/policies/block"
Aug 12 18:35:22 fred3 pluto[11417]: "packetdefault": ERROR: netlink
XFRM_MSG_NEWPOLICY response for flow %trap included errno 17: File
exists
Aug 12 18:43:17 fred3 pluto[11417]: ERROR: netlink XFRM_MSG_DELPOLICY
response for flow int.0@0.0.0.0 included errno 2: No such file ordirectory
> Que dit /var/log/secure ?
Pas de fichier de ce type
> A quoi ressemble ton ipsec.conf ?
version 2.0 # conforms to second version of ipsec.conf specification
# basic configuration
conn F1SXOtoF6HQZ
authby=rsasig
left=%defaultroute
leftsubnet=44.151.131.128/25
leftfirewall=yes
leftrsasigkey=
leftid=@F1SXO
right=212.180.113.45
rightsubnet=44.151.177.64/27
rightfirewall=yes
rightrsasigkey=xxxxxxxxxxxx
rightid=@F6HQZ
esp=3des-md5-96
auto=add
~
> Quelle implementation d'ipsec utilises-tu ?
||/ Name Version Description
+++-=========================-=========================-==================================================================
ii freeswan 2.04-11 IPSEC utilities
for FreeSWan
ipsec.secrets :
: RSA {
/tmp/ipsec-postinst.JSKPPL
}
~
~
~
~
--
Frédéric Zulian
f1sxo
--------------------------------------------------------------------
Les listes de diffusion occultes: <URL:http://www.CULTe.org/listes/>