Re: man isakmpd typos

Stuart Henderson <[email protected]> Mon, 27 Oct 2008 07:30:23 +0000

Newsgroups	gmane.os.openbsd.ipv6
Message-ID	<[email protected]>

On 2008/10/27 02:19, Felipe Alfaro Solana wrote:
> 
>                 # openssl req -new -key /etc/isakmpd/private/local.key \
>                         -out /etc/isakmpd/private/10.0.0.1.csr
> 
> I think the command is wrong. The "-key" command-line argument tells
> OpenSSL where the existing RSA private key is located. However, since
> we are requesting a new CSR and they key does not exist yet

It is created by /etc/rc at system startup.