Не удалось найти наш PreShared Key libreswan

У меня есть конфигурация для libreswan. у меня естьipsec.confиipsec.secrets.

Когда я бегуsudo ipsec auto --up conname

Это то, что я получаю

      181 "conname" #9: initiating IKEv2 IKE SA
181 "conname" #9: STATE_PARENT_I1: sent v2I1, expected v2R1
003 "conname" #9: No matching PSK found for connection: conname
003 "conname" #9: Failed to find our PreShared Key
002 "conname" #10: deleting other state #10 (STATE_CHILDSA_DEL) aged 0.000s and NOT sending notification
036 "conname" #9: encountered fatal error in state STATE_PARENT_I2

Пожалуйста, помогите мне понять, что я делаю неправильно.

/etc/ipsec.conf

      conn conname
    auto=start
    left=%defaultroute
    right=x.x.x.x
    secretsfile=/etc/ipsec.secrets
    leftsourceip=x.x.x.x
    type=tunnel
    authby=secret
    keyexchange=ike
    ike=aes256-sha1;modp1536
    ikelifetime=8h
    esp=aes256-sha1-dh5
    lifetime=1h
    keyingtries=%forever
    leftsubnet=x.x.0.0/x
    rightsubnet=x.x.x.x/x
    dpddelay=100s
    dpdtimeout=30s
    dpdaction=restart

/etc/ipsec.secrets

      # This file holds shared secrets (PSK) and XAUTH user passwords used for
# authentication.  See pluto(8) manpage or the libreswan website.

# Unlike older openswan, this file does NOT contain any X.509 related
# information such as private key :RSA statements as these now reside
# in the NSS database. See:
#
# https://libreswan.org/wiki/Using_NSS_with_libreswan
# https://libreswan.org/wiki/Migrating_from_Openswan
#
# The preferred method for adding secrets is to create a new file in
# the /etc/ipsec.d/ directory, so it will be included via the include
# line below

x.x.x.x x.x.x.x : PSK "xxxxxxxxxxxxxx"

#include /etc/ipsec.d/*.secrets

Пожалуйста, сообщите соответственно

0 ответов

Другие вопросы по тегам