IPSEC.SECRETS(5) － IKE/IPsec認證所使用到的金鑰資訊
阿新 • • 發佈：2019-02-14
IPSEC.SECRETS
NAME
ipsec.secrets - IKE/IPsec認證所使用到的金鑰資訊
DESCRIPTION
ipsec.secrets包含了預金鑰、RSA簽名、X509數字證書，這些資訊被ipsec_pluto(8)使用。當前一共有5種金鑰：預共享金鑰、RSA私鑰、X509證書口令、XAUTH認證口令。
這個檔案內容格式由塊序列和include組成。例如：
# sample /etc/ipsec.secrets file for 10.1.0.1
此檔案只在啟動時載入。如果檔案在啟動後被修改，那麼應該告訴pluto重新載入，使用命令 ipsec secrets 或 ipsec auto --rereadsecrets。10.1.0.1 10.2.0.1: PSK "secret shared by two hosts"# sample roadwarrior%any gateway.corp.com: PSK "shared secret with many roadwarriors"# sample server for roadwarriorsmyip %any : PSK "shared secret with many roadwarriors"# an entry may be split across lines,# but indentation matterswww.xs4all.nl @www.kremvax.ru10.6.0.1 10.7.0.1 1.8.0.1: PSK "secret shared by 5 systems"# an RSA private key.# note that the lines are too wide for a# man page, so ... has been substituted for# the truncated part@my.com: rsa {Modulus: 0syXpo/6waam&opts=&page=ZhSs8Lt6jnBzu3C4grtt...PublicExponent: 0sAw==PrivateExponent: 0shlGbVR1m8Z&opts=&page=7rhzSyenCaBN...Prime1: 0s8njV7WTxzVzRz7AP&opts=&page=0OraDxmEAt1BL5l...Prime2: 0s1LgR7/oUMo9BvfU8yRFNos1s211KX5K0...Exponent1: 0soaXj85ihM5M2inVf/NfHmtLutVz4r...Exponent2: 0sjdAL9VFizF&opts=&page=BKU4ohguJFzOd55OG6...Coefficient: 0sK1LWwgnNrNFGZsS/2GuMBg9nYVZ...}# An X.509 pem encoded private key file with (optional) passphrase: RSA vpnserverKey.pem "<optional passphrase>"# An X.509 pem encoded private key file locked with a passphrase# Note: the %prompt keyword means someone has to actually enter the passphrase# at load time - usually via ipsec_whack(8): RSA vpnserverKey.pem %prompt# XAUTH password, used with leftxauthusername=username@username : XAUTH "password"include ipsec.*.secrets # get secrets from other files