IPSEC.SECRETS(5) strongSwan IPSEC.SECRETS(5) (NAME) ipsec.secrets - IKE/IPsec (DESCRIPTION) ipsec.secrets . (IKE) strongSwan pluto ( IKEv1) charon ( IKEv2) . . () . () include . . # /etc/ipsec.secrets - strongSwan IPsec secrets file 192.168.0.1 %any : PSK "v+NkxY9LLZvwj4qCC2o/gGrWDF2d21jL" : RSA moonKey.pem alice@strongswan.org : EAP "x3.dEhgN" carol : XAUTH "4iChxLT3" dave : XAUTH "ryftzG4A" # get secrets from other files include ipsec.*.secrets (ID selectors) . (:) . . IP (FQDN) user@FQDN %any %any6 ( ). : . << >> (Road Warrior) (Peer's ID) IP %any IPv4 %any6 IPv6 IP . 0.0.0.0 %any . IKEv1 : (Peer's ID payload) IP . . . ( ). . ( RSA) ( ). . ( IKE ). . . PSK . RSA . . . (token) . : PSK (pre-shared key) RSA RSA ECDSA ECDSA P12 PKCS#12 EAP EAP NTLM NTLM XAUTH XAUTH PIN (PIN) . . # (comment) . include . (<>) sh(1) . include ( ) . / . include include ( ) . (TYPES OF SECRETS) [ ] : PSK (secret) (") . . Base64 . 0x . 0s Base64 . : RSA [ | %prompt ] : ECDSA [ | %prompt ] /etc/ipsec.d/private . (passphrase) . %prompt . : P12 [ | %prompt ] PKCS#12 /etc/ipsec.d/private . (passphrase) . %prompt . CA . leftid (subjects) . : EAP secret PSK . EAP IKEv2 . : NTLM secret PSK NTLM MD4(UTF-16LE(secret)) . NTLM eap-mschapv2 . [ ] : XAUTH password PSK . XAUTH IKEv1 . : PIN %smartcard[[@]]: | %prompt keyid . (slot number) strongswan.conf(5) . %prompt . (FILES) /etc/ipsec.secrets (SEE ALSO) ipsec.conf(5), strongswan.conf(5), ipsec(8) (HISTORY) D. Hugh Redelmeier FreeS/WAN . Tobias Brunner Andreas Steffen strongSwan . (BUGS) 0.0.0.0 %any 0::0 %any6 . 6.1.0 2011-12-14 IPSEC.SECRETS(5)