Re: RSA Signature Authentication problem using XCA

On Sun, Nov 22, 2009 at 1:34 PM, Joe <[email protected]> wrote:
> Hello,
>
> I have a site to site vpn set up with m0n0 to m0n0 using pre shared keys and
> it has been working for over a year.
>
> I would like to use RSA Signature Authentication and have followed the
> following instructions:
> <http://doc.m0n0.ch/handbook/ipsec-rsa-auth.html>
>
> When I try to "Save" the configuration on the m0n0wall web interface on the
> ipsec edit page, I get the following:
>
> The following input errors were detected:
>
>   * This key does not appear to be valid.
>
> I think this is referring to the private key.
> I have searched the mailing list, the forum, and the web, but I don't see
> anything that even comes close to explaining this.
>

Look at the source code.

		if (!strstr($_POST['p1privatekey'], "BEGIN RSA PRIVATE KEY") ||
!strstr($_POST['p1privatekey'], "END RSA PRIVATE KEY"))
			$input_errors[] = "This key does not appear to be valid.";	


So your key does not contain the listed BEGIN and/or END, and hence is
not a valid key.