what will happen when to execute command line "ipsec auto --up "?
"yli" <[email protected]> Mon, 10 Mar 2003 15:06:28 +0800
| Newsgroups | gmane.network.freeswan.devel |
|---|---|
| Message-ID | <00a401c2e6d3$928bf950$6f0a0a0a@yli> |
Hi.
When I executed command line "# ipsec auto --up one-one" to trigger one security connectin "one-one" called in ipsec.conf, I got an error with messages as following:
#113: STATE_MAIN_I1: initiate
#113: STATE_MAIN_I2: sent MIS, expecting MR2
#113: unable to locate my private key for RSA signature
#113: STATE_MAIN_I2: AUTHENTICATION_FAILED
#113: STATE_MAIN_I2: retransmission; will wait 20s for response
#113: unable to locate my private key for RSA signature
#113: STATE_MAIN_I2: AUTHENTICATION_FAILED
#113: STATE_MAIN_I2: retransmission; will wait 40s for response
#113: max number of retransmissions (2) reached STATE_MAIN_I2
#113: starting keying attempt 2 of an unlimited number, but releasing whack
My ipsec.secrets was created from command line with
# ipsec newhostkey --output ipsec.secrets --bits 2048
and have been placed in /etc/. Furthermore, I have checked my ipsec.conf again and again, I thinked there was also no error in it.
So, I want to locate error in source codes of FreeS/WAN. But I am confused that which parts of codes is responsible for dealing with
instruction from "ipsec auto --up one-one", i.e., what will happen when to execute command line "ipsec auto --up one-one"?
Is whack_handle() in server.c responsible for dealing with above command line?
Where I can fine some documents or help information about how the connections specified in ipsec.conf is initiated when their peers have been offline?
Thanks in advance.