On Fri, Jun 25, 2010 at 08:28:39PM +0200, Benjamin S. wrote: > > Dear Harald,
Hello Benjamin > > On Wed, 23 Jun 2010 10:27:32 +0200 > Harald Jenny <har...@a-little-linux-box.at> wrote: > > > I talked with Paul about your issue and he is not sure how your > setup worked in the first place as the config you speficied should > be considered invalid. > > Unfortunately I have no system with lenny anymore and thus I can't > test it again. But I'm almost sure that the configuration worked > with it and stopped working after the upgrade to testing. Well as I'm a really nasty guy I tested your setup in my environment and found that your report is 100% correct... > > Can you explain why it is invalid? If it is because of the > non-existent certificate would there be the possibility to add a > warning or an error message that complains about it? Yes that's the reason - there is already a message Jun 27 23:53:20 i-am pluto[28146]: could not open host cert file '/etc/ipsec.d/certs/testing-cert.pem' but it's logged when you start openswan (which can be quite some lines above the connection initiation). > > > Does the problem still persist when you omit the line who refers > to the non-existent certificate? > > No. Actually that was the only solution I've found to get it > working again. And again right - Paul, could you point me to where to look for this issue? > > > Kind regards > Benjamin Wish you a good night Harald -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org