Re: IPSec und SAs

[jason@thought.net (Jason L. Wright)]

AMozhar@SPIRIT21.de writes:

> Hello OpenBSD!
> I try to build a small VPN with IPSec and PKI.
> To create an IPSec Tunnel and SAs I used following command:
> 
> ipsecadm new esp -spi 1000 -src 126.23.123.4
> -dst 123.34.54.102 -forcetunnel -enc 3des
> -auth sha1 -keyfile /.../Filename -authkeyfile /.../Filename
> 
> Everytime I get the same error:
> 
> write: invalid argument
> 
> What could be wrong?

Several things, but the most likely is the key file doesn't contain the
right number of digits.  Use the example keys from ipsecadm.8 and see
if they work.  Your commandline looks otherwise correct.

> What is the problem!
> 
Don't know for sure.