[Swan-dev] libreswan in debian - Ondřej offered to help (fwd)

[Daniel Kahn Gillmor]

On Wed 2016-06-22 19:41:59 -0400, Paul Wouters wrote:
> On Wed, 22 Jun 2016, Daniel Kahn Gillmor wrote:
>> the EXAMPLES section in ipsec_rsasigkey(8) shows:
>>
>>  ipsec rsasigkey --verbose 4096 >mykey.txt
>>
>> but of course that fails...
>
> It does? It works for me.

Ah, it works for the superuser.

> If you specify --configdir then it does need to get the sql: prefix
> unfortunately. We do need to fix our tools to always add that to a
> prefix if not there.

is this bug/enhancement reported/tracked someplace?

As a non-privileged user, it works if i first initnss (supplying
--configdir without sql:) and then rsasigkey --configdir *with* the sql:
prefix.

        --dkg