Re: man isakmpd typos

Hi Felipe,

On Mon, Oct 27, 2008 at 12:36:17PM +0100, Felipe Alfaro Solana wrote:
| On Mon, Oct 27, 2008 at 8:30 AM, Stuart Henderson <[email protected]>
wrote:
| > On 2008/10/27 02:19, Felipe Alfaro Solana wrote:
| >>
| >>                 # openssl req -new -key /etc/isakmpd/private/local.key \
| >>                         -out /etc/isakmpd/private/10.0.0.1.csr
| >>
| >> I think the command is wrong. The "-key" command-line argument tells
| >> OpenSSL where the existing RSA private key is located. However, since
| >> we are requesting a new CSR and they key does not exist yet
| >
| > It is created by /etc/rc at system startup.
|
| You are totally right. I killed that file when configuring isakmpd.
|
| But, wouldn't it be nice to add a comment to the manual page about how
| local.key is generated by /etc/rc? It might prevent dumb people like
| me, that removed the local.key file, from getting funny error messages
| in the command-line when they are not familiar with OpenSSL?

A reboot will get you this file back (well, not exactly the same
file). This is mentioned in the documentation of isakpmd(8) :

     /etc/isakmpd/private/
             The directory where local private keys used for public
             key authentication are kept.  By default, the system
             startup script rc(8) generates a key-pair when starting,
             if one does not already exist.

Cheers,

Paul 'WEiRD' de Weerd

--
>++++++++[<++++++++++>-]<+++++++.>+++[<------>-]<.>+++[<+
+++++++++++>-]<.>++[<------------>-]<+.--------------.[-]
                 http://www.weirdnet.nl/

[demime 1.01d removed an attachment of type application/pgp-signature]