[CentOS] upgrade to 5.4 openswan broke
Myron Williams
list at wcstc.comFri Oct 23 03:33:10 UTC 2009
- Previous message: [CentOS] Upgrading CentOS 5.3 to 5.4 errors
- Next message: [CentOS] upgrade to 5.4 openswan broke
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Hi All, I upgraded from 5.3 to 5.4 today on a vpn gateway using openswan. After the upgrade the vpn stopped working. From what I could tell the new version of openswan uses NSS. I tried following the instructions in this thead https://bugzilla.redhat.com/show_bug.cgi?id=508107 without success. # certutil -N -d sql:/etc/ipsec.d certutil: function failed: security library: bad database. If I ran the command without the sql: like this # certutil -N -d sql:/etc/ipsec.d it would create the database files. I would then execute # modutil -fips true -dbdir /etc/ipsec.d followed by # /usr/sbin/ipsec newhostkey --configdir /etc/ipsec.d/nssdb --password password1 --output /etc/ipsec.d/host.secrets After replacing the hostkey in the file I tried to bring the connection up but the connection would not start and the following error message was in the log file. unable to locate my private key for RSA Signature sending notification AUTHENTICATION_FAILED I finally had to downgrade from openswan-2.6.21-5.el5 to openswan-2.6.14-1.el5 to get things to work. Am I missing something that is needed to make this work? Any help would be appreciated. Myron Williams
- Previous message: [CentOS] Upgrading CentOS 5.3 to 5.4 errors
- Next message: [CentOS] upgrade to 5.4 openswan broke
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
More information about the CentOS mailing list