Не удалось найти наш PreShared Key libreswan
У меня есть конфигурация для libreswan. у меня естьipsec.conf
иipsec.secrets
.
Когда я бегуsudo ipsec auto --up conname
Это то, что я получаю
181 "conname" #9: initiating IKEv2 IKE SA
181 "conname" #9: STATE_PARENT_I1: sent v2I1, expected v2R1
003 "conname" #9: No matching PSK found for connection: conname
003 "conname" #9: Failed to find our PreShared Key
002 "conname" #10: deleting other state #10 (STATE_CHILDSA_DEL) aged 0.000s and NOT sending notification
036 "conname" #9: encountered fatal error in state STATE_PARENT_I2
Пожалуйста, помогите мне понять, что я делаю неправильно.
/etc/ipsec.conf
conn conname
auto=start
left=%defaultroute
right=x.x.x.x
secretsfile=/etc/ipsec.secrets
leftsourceip=x.x.x.x
type=tunnel
authby=secret
keyexchange=ike
ike=aes256-sha1;modp1536
ikelifetime=8h
esp=aes256-sha1-dh5
lifetime=1h
keyingtries=%forever
leftsubnet=x.x.0.0/x
rightsubnet=x.x.x.x/x
dpddelay=100s
dpdtimeout=30s
dpdaction=restart
/etc/ipsec.secrets
# This file holds shared secrets (PSK) and XAUTH user passwords used for
# authentication. See pluto(8) manpage or the libreswan website.
# Unlike older openswan, this file does NOT contain any X.509 related
# information such as private key :RSA statements as these now reside
# in the NSS database. See:
#
# https://libreswan.org/wiki/Using_NSS_with_libreswan
# https://libreswan.org/wiki/Migrating_from_Openswan
#
# The preferred method for adding secrets is to create a new file in
# the /etc/ipsec.d/ directory, so it will be included via the include
# line below
x.x.x.x x.x.x.x : PSK "xxxxxxxxxxxxxx"
#include /etc/ipsec.d/*.secrets
Пожалуйста, сообщите соответственно