diff --git a/_Header.md b/_Header.md index 73e388a..6a4d3f7 100644 --- a/_Header.md +++ b/_Header.md @@ -1 +1 @@ -[![dn42](/dn42.png)](/) +[![dn42](/dn42.png)](/) \ No newline at end of file diff --git a/howto/IPsecWithPublicKeys/RacoonExample.md b/howto/IPsecWithPublicKeys/RacoonExample.md index 6228f30..504c4a3 100644 --- a/howto/IPsecWithPublicKeys/RacoonExample.md +++ b/howto/IPsecWithPublicKeys/RacoonExample.md @@ -1,2 +1,35 @@ -# IPsec with public key authentication on Racoon -## Coming soon \ No newline at end of file +The keys are generated with plainrsa-gen. + +``` +Usage: plainrsa-gen [options] + + -b bits Generate long RSA key (default=1024) + -e pubexp Public exponent to use (default=0x3) + -f filename Filename to store the key to (default=stdout) + -i filename Input source for format conversion + -h Help +``` +I'd probably go with 4096 bits. + + +in your racoon.conf: +``` +path certificate "/etc/racoon/keys"; + +listen { + isakmp 192.168.255.1[500]; +} + +remote 192.168.255.2 { + exchange_mode main; + certificate_type plain_rsa "local.priv.key"; + peers_certfile plain_rsa "remote.pub.key"; + proposal { + authentication_method rsasig; + lifetime time 8 hour; + encryption_algorithm aes256; + hash_algorithm sha256; + dh_group modp1024; + } +} +``` \ No newline at end of file