[Swan-dev] libreswan in debian - Ondřej offered to help (fwd)

Daniel Kahn Gillmor dkg at fifthhorseman.net
Thu Jun 23 02:48:28 UTC 2016

On Wed 2016-06-22 19:41:59 -0400, Paul Wouters wrote:
> On Wed, 22 Jun 2016, Daniel Kahn Gillmor wrote:
>> the EXAMPLES section in ipsec_rsasigkey(8) shows:
>>  ipsec rsasigkey --verbose 4096 >mykey.txt
>> but of course that fails...
> It does? It works for me.

Ah, it works for the superuser.

> If you specify --configdir then it does need to get the sql: prefix
> unfortunately. We do need to fix our tools to always add that to a
> prefix if not there.

is this bug/enhancement reported/tracked someplace?

As a non-privileged user, it works if i first initnss (supplying
--configdir without sql:) and then rsasigkey --configdir *with* the sql:


More information about the Swan-dev mailing list