On Fri, Jun 25, 2010 at 08:28:39PM +0200, Benjamin S. wrote:
> 
> Dear Harald,

Hello Benjamin

> 
> On Wed, 23 Jun 2010 10:27:32 +0200
> Harald Jenny <har...@a-little-linux-box.at> wrote:
> 
> > I talked with Paul about your issue and he is not sure how your
>  setup worked in the first place as the config you speficied should
>  be considered invalid.
> 
> Unfortunately I have no system with lenny anymore and thus I can't
> test it again. But I'm almost sure that the configuration worked
> with it and stopped working after the upgrade to testing.

Well as I'm a really nasty guy I tested your setup in my environment and found 
that your report is 100% correct...

> 
> Can you explain why it is invalid? If it is because of the
> non-existent certificate would there be the possibility to add a
> warning or an error message that complains about it?

Yes that's the reason - there is already a message

Jun 27 23:53:20 i-am pluto[28146]:   could not open host cert file 
'/etc/ipsec.d/certs/testing-cert.pem'

but it's logged when you start openswan (which can be quite some lines above 
the connection initiation).

> 
> > Does the problem still persist when you omit the line who refers
>  to the non-existent certificate?
> 
> No. Actually that was the only solution I've found to get it
> working again.

And again right - Paul, could you point me to where to look for this issue?

> 
> 
> Kind regards
> Benjamin

Wish you a good night
Harald



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to