From: Racoon U. <a48...@ti...> - 2018-04-25 06:27:07
|
Hello everybody. Friends, tell me what the problem is: I'm using the XXX version of YYY; I create a simple configuration file, I use the concept of inheritance in it; in the example below, fragment # 1 is used as the parent for fragment # 2; however I get an error: ============= log debug; listen { isakmp 192.168.74.22; } #fragment 1 remote "orangepi_alarm" { remote_address 192.168.74.42; exchange_mode main; certificate_type plain_rsa "/etc/racoon/plainrsa.priv"; peers_certfile plain_rsa "/etc/racoon/orangepi_alarm.pub"; verify_cert off; lifetime time 20 hours; generate_policy off; nat_traversal off; dpd_delay 30; dpd_retry 2; dpd_maxfail 2; proposal { encryption_algorithm aes; hash_algorithm sha256; authentication_method rsasig; dh_group modp1536; } } #fragment 2 remote "test_skynet_debian" inherit "orangepi_alarm" { remote_address 192.168.74.25; peers_certfile plain_rsa "/etc/racoon/test_skynet_debian.pub"; } ============= Log: --------- [root@host ~]# racoon -F -f /etc/racoon/racoon.conf Foreground mode. 2018-04-25 11:05:35: INFO: @(#)ipsec-tools 0.8.2 (http://ipsec-tools.sourceforge.net) 2018-04-25 11:05:35: INFO: @(#)This product linked OpenSSL 1.0.2o 27 Mar 2018 (http://www.openssl.org/) 2018-04-25 11:05:35: INFO: Reading configuration from "/etc/racoon/racoon.conf" 2018-04-25 11:05:35: DEBUG: getrmconf_by_name: remote "orangepi_alarm". 2018-04-25 11:05:35: DEBUG: filename: /etc/racoon/plainrsa.priv 2018-04-25 11:05:35: DEBUG: Parsing /etc/racoon/plainrsa.priv 2018-04-25 11:05:35: DEBUG: Entry any -> any 2018-04-25 11:05:35: DEBUG: Private PlainRSA keyfile parsed: /etc/racoon/plainrsa.priv 2018-04-25 11:05:35: DEBUG: filename: /etc/racoon/orangepi_alarm.pub 2018-04-25 11:05:35: DEBUG: Parsing /etc/racoon/orangepi_alarm.pub 2018-04-25 11:05:35: DEBUG: Entry any -> any 2018-04-25 11:05:35: DEBUG: Public PlainRSA keyfile parsed: /etc/racoon/orangepi_alarm.pub 2018-04-25 11:05:35: DEBUG: getrmconf_by_name: remote "test_skynet_debian". 2018-04-25 11:05:35: DEBUG: getrmconf_by_name: remote "orangepi_alarm". 2018-04-25 11:05:35: ERROR: /etc/racoon/racoon.conf:49: ";" remote_address already specified 2018-04-25 11:05:35: ERROR: fatal parse failure (1 errors) racoon: failed to parse configuration file. --------- Question: how correctly it is necessary to make out fragments of a configuration file to use inheritance? Thank you. |