RE: Still banging my head on ipsecadm "write: Invalid argument" error

["Sean Barraclough" <hellfire@paradise.net.nz>]

Aaah. Doh!
Thanks Jason, you've saved me pain 80)

-----Original Message-----
From: owner-misc@openbsd.org [mailto:owner-misc@openbsd.org]On Behalf Of
Jason Wright
Sent: Thursday, 22 February 2001 16:23
To: Sean Barraclough
Cc: Misc
Subject: Re: Still banging my head on ipsecadm "write: Invalid argument"
error


On Thu, Feb 22, 2001 at 05:11:54PM +1300, Sean Barraclough wrote:
> net.inet.esp.enable is on
>
> syntax: ipsecadm new esp -enc 3des -auth sha1 -spi 1000 -dst 10.0.0.2 -src
> 10.0.0.1 -key 11111111 -authkey 22222222
>
> Anything wrong with the above? Other than the highly predictable keys? 80)

Your keys are far too short.  3des key should be 48 hex digits long
(no more, no less).  sha1 keys should be 40 hex digits long.