FIXME east:~# TZ=GMT export TZ east:~# ipsec showhostkey --dump FIXME 25(1): RSA keyid: AwEAAaFHY with id: %any 25(2): RSA keyid: AwEAAaFHY with id: E=testing.libreswan.org 25(3): RSA keyid: AwEAAaFHY with id: CN=east.testing.libreswan.org 25(4): RSA keyid: AwEAAaFHY with id: L=Toronto 25(5): RSA keyid: AwEAAaFHY with id: O=Libreswan 25(6): RSA keyid: AwEAAaFHY with id: ST=Ontario 25(7): RSA keyid: AwEAAaFHY with id: C=ca 8(1): RSA keyid: AQN3cn11F with id: (none) 8(2): RSA keyid: AQN3cn11F with id: (none) east:~# ipsec showhostkey --dump --verbose ipsec showhostkey loading secrets from "/etc/ipsec.secrets" ipsec showhostkey loaded private key for keyid: PPK_RSA:AQN3cn11F ipsec showhostkey loaded private key file '/etc/ipsec.d/private/east.pem' (963 bytes) ipsec showhostkey loaded private key for keyid: PPK_RSA:AwEAAaFHY 25(1): RSA keyid: AwEAAaFHY with id: %any 25(2): RSA keyid: AwEAAaFHY with id: E=testing.libreswan.org 25(3): RSA keyid: AwEAAaFHY with id: CN=east.testing.libreswan.org 25(4): RSA keyid: AwEAAaFHY with id: L=Toronto 25(5): RSA keyid: AwEAAaFHY with id: O=Libreswan 25(6): RSA keyid: AwEAAaFHY with id: ST=Ontario 25(7): RSA keyid: AwEAAaFHY with id: C=ca 8(1): RSA keyid: AQN3cn11F with id: (none) 8(2): RSA keyid: AQN3cn11F with id: (none) east:~# : error to load west.pem is expected east:~# ipsec showhostkey --file /testing/baseconfigs/west/etc/ipsec.secrets --dump ipsec showhostkey could not open private key file '/etc/ipsec.d/private/west.pem' ipsec showhostkey "/testing/baseconfigs/west/etc/ipsec.secrets" line 26: error loading RSA private key file 8(1): RSA keyid: AQNzGEFs1 with id: (none) 8(2): RSA keyid: AQNzGEFs1 with id: (none) east:~# ipsec showhostkey --file /testing/baseconfigs/west/etc/ipsec.secrets --dump --verbose ipsec showhostkey loading secrets from "/testing/baseconfigs/west/etc/ipsec.secrets" ipsec showhostkey loaded private key for keyid: PPK_RSA:AQNzGEFs1 ipsec showhostkey could not open private key file '/etc/ipsec.d/private/west.pem' ipsec showhostkey "/testing/baseconfigs/west/etc/ipsec.secrets" line 26: error loading RSA private key file 8(1): RSA keyid: AQNzGEFs1 with id: (none) 8(2): RSA keyid: AQNzGEFs1 with id: (none) east:~# ipsec showhostkey --left # rsakey AQN3cn11F leftrsasigkey=0sAQN3cn11FrBVbZhWGwRnFDAf8O9FHBmBIyIvmvt0kfkI2UGDDq8k+vYgRkwBZDviLd1p3SkL30LzuV0rqG3vBriqaAUUGoCQ0UMgsuX+k01bROLsqGB1QNXYvYiPLsnoDhKd2Gx9MUMHEjwwEZeyskMT5k91jvoAZvdEkg+9h7urbJ+kRQ4e+IHkMUrreDGwGVptV/hYQVCD54RZep6xp5ymaKRCDgMpzWvlzO80fP7JDjSZf9LI/MMu6c+qwXIKnWoNha75IhFyLWniVczxK2RdhmMhLsi0kC0CoOwWDSIEOb+5zbECDjjud+SF5tT8qRCWnSomX8jtbCdZ50WraQlL east:~# ipsec showhostkey --right # rsakey AQN3cn11F rightrsasigkey=0sAQN3cn11FrBVbZhWGwRnFDAf8O9FHBmBIyIvmvt0kfkI2UGDDq8k+vYgRkwBZDviLd1p3SkL30LzuV0rqG3vBriqaAUUGoCQ0UMgsuX+k01bROLsqGB1QNXYvYiPLsnoDhKd2Gx9MUMHEjwwEZeyskMT5k91jvoAZvdEkg+9h7urbJ+kRQ4e+IHkMUrreDGwGVptV/hYQVCD54RZep6xp5ymaKRCDgMpzWvlzO80fP7JDjSZf9LI/MMu6c+qwXIKnWoNha75IhFyLWniVczxK2RdhmMhLsi0kC0CoOwWDSIEOb+5zbECDjjud+SF5tT8qRCWnSomX8jtbCdZ50WraQlL east:~# ipsec showhostkey --txt 192.168.1.2 ; info about key: AQN3cn11F east. IN TXT "X-IPsec-Server(10)=192.168.1.2 " "AQN3cn11FrBVbZhWGwRnFDAf8O9FHBmBIyIvmvt0kfkI2UGDDq8k+vYgRkwBZDviLd1p3SkL30LzuV0rqG3vBriqaAUUGoCQ0UMgsuX+k01bROLsqGB1QNXYvYiPLsnoDhKd2Gx9MUMHEjwwEZeyskMT5k91jvoAZvdEkg+9h7urbJ+kRQ4e+IHkMUrreDGwGVptV/hYQVCD54RZep6xp5ymaKRCDgMpzWvlzO80fP7JDjSZ" "f9LI/MMu6c+qwXIKnWoNha75IhFyLWniVczxK2RdhmMhLsi0kC0CoOwWDSIEOb+5zbECDjjud+SF5tT8qRCWnSomX8jtbCdZ50WraQlL" east:~# ipsec showhostkey --key key not yet implemented east:~# ipsec showhostkey --x509self You must specify some operation Usage: ipsec showhostkey [--ipseckey {gateway}][--left ] [--right ] [--dump ] [--list ] [--x509self] [--x509req ] [--x509cert ] [ --txt gateway ] [--dhclient ] [ --file secretfile ] [ --keynum count ] [ --id identity ] [ --rsaid keyid ] [--verbose] [--version] east:~# ipsec showhostkey --x509req You must specify some operation Usage: ipsec showhostkey [--ipseckey {gateway}][--left ] [--right ] [--dump ] [--list ] [--x509self] [--x509req ] [--x509cert ] [ --txt gateway ] [--dhclient ] [ --file secretfile ] [ --keynum count ] [ --id identity ] [ --rsaid keyid ] [--verbose] [--version] east:~# ipsec showhostkey --x509cert You must specify some operation Usage: ipsec showhostkey [--ipseckey {gateway}][--left ] [--right ] [--dump ] [--list ] [--x509self] [--x509req ] [--x509cert ] [ --txt gateway ] [--dhclient ] [ --file secretfile ] [ --keynum count ] [ --id identity ] [ --rsaid keyid ] [--verbose] [--version] east:~# ipsec showhostkey --id east --left ; picking by keyid=east # rsakey AQN3cn11F leftrsasigkey=0sAQN3cn11FrBVbZhWGwRnFDAf8O9FHBmBIyIvmvt0kfkI2UGDDq8k+vYgRkwBZDviLd1p3SkL30LzuV0rqG3vBriqaAUUGoCQ0UMgsuX+k01bROLsqGB1QNXYvYiPLsnoDhKd2Gx9MUMHEjwwEZeyskMT5k91jvoAZvdEkg+9h7urbJ+kRQ4e+IHkMUrreDGwGVptV/hYQVCD54RZep6xp5ymaKRCDgMpzWvlzO80fP7JDjSZf9LI/MMu6c+qwXIKnWoNha75IhFyLWniVczxK2RdhmMhLsi0kC0CoOwWDSIEOb+5zbECDjjud+SF5tT8qRCWnSomX8jtbCdZ50WraQlL east:~# ipsec showhostkey --file /testing/baseconfigs/west/etc/ipsec.secrets --id east --left ipsec showhostkey could not open private key file '/etc/ipsec.d/private/west.pem' ipsec showhostkey "/testing/baseconfigs/west/etc/ipsec.secrets" line 26: error loading RSA private key file ; picking by keyid=east # rsakey AQNzGEFs1 leftrsasigkey=0sAQNzGEFs18VKT00sA+4p+GUKn9C55PYuPQca6C+9Qhj0jfMdQnTRTDLeI+lp9TnidHH7fVpq+PkfiF2LHlZtDwMurLlwzbNOghlEYKfQ080WlOTTUAmOLhAzH28MF70q3hzq0m5fCaVZWtxcV+LfHWdxceCkjBUSaTFtR2W12urFCBz+SB3+OM33aeIbfHxmck2yzhJ8xyMods5kF3ek/RZlFvgN8VqBdcFVrZwTh0mXDCGN12HNFixL6FzQ1jQKerKBbjb0m/IPqugvpVPWVIUajUpLMEmi1FAXc1mFZE9x1SFuSr0NzYIu2ZaHfvsAZY5oN+I+R2oC67fUCjgxY+t7 east:~# ipsec showhostkey --file /testing/baseconfigs/west/etc/ipsec.secrets --id west --right ipsec showhostkey could not open private key file '/etc/ipsec.d/private/west.pem' ipsec showhostkey "/testing/baseconfigs/west/etc/ipsec.secrets" line 26: error loading RSA private key file ; picking by keyid=west # rsakey AQNzGEFs1 rightrsasigkey=0sAQNzGEFs18VKT00sA+4p+GUKn9C55PYuPQca6C+9Qhj0jfMdQnTRTDLeI+lp9TnidHH7fVpq+PkfiF2LHlZtDwMurLlwzbNOghlEYKfQ080WlOTTUAmOLhAzH28MF70q3hzq0m5fCaVZWtxcV+LfHWdxceCkjBUSaTFtR2W12urFCBz+SB3+OM33aeIbfHxmck2yzhJ8xyMods5kF3ek/RZlFvgN8VqBdcFVrZwTh0mXDCGN12HNFixL6FzQ1jQKerKBbjb0m/IPqugvpVPWVIUajUpLMEmi1FAXc1mFZE9x1SFuSr0NzYIu2ZaHfvsAZY5oN+I+R2oC67fUCjgxY+t7 east:~# ipsec showhostkey --file /testing/baseconfigs/west/etc/ipsec.secrets --left ipsec showhostkey could not open private key file '/etc/ipsec.d/private/west.pem' ipsec showhostkey "/testing/baseconfigs/west/etc/ipsec.secrets" line 26: error loading RSA private key file # rsakey AQNzGEFs1 leftrsasigkey=0sAQNzGEFs18VKT00sA+4p+GUKn9C55PYuPQca6C+9Qhj0jfMdQnTRTDLeI+lp9TnidHH7fVpq+PkfiF2LHlZtDwMurLlwzbNOghlEYKfQ080WlOTTUAmOLhAzH28MF70q3hzq0m5fCaVZWtxcV+LfHWdxceCkjBUSaTFtR2W12urFCBz+SB3+OM33aeIbfHxmck2yzhJ8xyMods5kF3ek/RZlFvgN8VqBdcFVrZwTh0mXDCGN12HNFixL6FzQ1jQKerKBbjb0m/IPqugvpVPWVIUajUpLMEmi1FAXc1mFZE9x1SFuSr0NzYIu2ZaHfvsAZY5oN+I+R2oC67fUCjgxY+t7 east:~# ipsec showhostkey --file /testing/baseconfigs/west/etc/ipsec.secrets --right ipsec showhostkey could not open private key file '/etc/ipsec.d/private/west.pem' ipsec showhostkey "/testing/baseconfigs/west/etc/ipsec.secrets" line 26: error loading RSA private key file # rsakey AQNzGEFs1 rightrsasigkey=0sAQNzGEFs18VKT00sA+4p+GUKn9C55PYuPQca6C+9Qhj0jfMdQnTRTDLeI+lp9TnidHH7fVpq+PkfiF2LHlZtDwMurLlwzbNOghlEYKfQ080WlOTTUAmOLhAzH28MF70q3hzq0m5fCaVZWtxcV+LfHWdxceCkjBUSaTFtR2W12urFCBz+SB3+OM33aeIbfHxmck2yzhJ8xyMods5kF3ek/RZlFvgN8VqBdcFVrZwTh0mXDCGN12HNFixL6FzQ1jQKerKBbjb0m/IPqugvpVPWVIUajUpLMEmi1FAXc1mFZE9x1SFuSr0NzYIu2ZaHfvsAZY5oN+I+R2oC67fUCjgxY+t7 east:~# ipsec showhostkey --file /testing/baseconfigs/west/etc/ipsec.secrets --key ipsec showhostkey could not open private key file '/etc/ipsec.d/private/west.pem' ipsec showhostkey "/testing/baseconfigs/west/etc/ipsec.secrets" line 26: error loading RSA private key file key not yet implemented east:~# ipsec showhostkey --file /testing/baseconfigs/west/etc/ipsec.secrets --txt 192.168.1.3 ipsec showhostkey could not open private key file '/etc/ipsec.d/private/west.pem' ipsec showhostkey "/testing/baseconfigs/west/etc/ipsec.secrets" line 26: error loading RSA private key file ; info about key: AQNzGEFs1 east. IN TXT "X-IPsec-Server(10)=192.168.1.3 " "AQNzGEFs18VKT00sA+4p+GUKn9C55PYuPQca6C+9Qhj0jfMdQnTRTDLeI+lp9TnidHH7fVpq+PkfiF2LHlZtDwMurLlwzbNOghlEYKfQ080WlOTTUAmOLhAzH28MF70q3hzq0m5fCaVZWtxcV+LfHWdxceCkjBUSaTFtR2W12urFCBz+SB3+OM33aeIbfHxmck2yzhJ8xyMods5kF3ek/RZlFvgN8VqBdcFVrZwTh0mXDCGN" "12HNFixL6FzQ1jQKerKBbjb0m/IPqugvpVPWVIUajUpLMEmi1FAXc1mFZE9x1SFuSr0NzYIu2ZaHfvsAZY5oN+I+R2oC67fUCjgxY+t7" east:~# ipsec showhostkey --file /testing/baseconfigs/west/etc/ipsec.secrets --x509self You must specify some operation Usage: ipsec showhostkey [--ipseckey {gateway}][--left ] [--right ] [--dump ] [--list ] [--x509self] [--x509req ] [--x509cert ] [ --txt gateway ] [--dhclient ] [ --file secretfile ] [ --keynum count ] [ --id identity ] [ --rsaid keyid ] [--verbose] [--version] east:~# ipsec showhostkey --file /testing/baseconfigs/west/etc/ipsec.secrets --x509req You must specify some operation Usage: ipsec showhostkey [--ipseckey {gateway}][--left ] [--right ] [--dump ] [--list ] [--x509self] [--x509req ] [--x509cert ] [ --txt gateway ] [--dhclient ] [ --file secretfile ] [ --keynum count ] [ --id identity ] [ --rsaid keyid ] [--verbose] [--version] east:~# ipsec showhostkey --file /testing/pluto/scripts/showhostkey-03/multiple.secrets --left