<< | Thread Index | >> ]    [ << | Date Index | >> ]

To: herve.fache,AT,philips,DOT,com
Subject: Re: Newbie questions, trying to use pkcipe
From: jon+cipe,AT,silicide,DOT,dk
Date: Sat, 2 Aug 2003 16:40:32 +0200
Cc: cipe-l,AT,inka,DOT,de
In-reply-to: <OFFFB687CE.F091EA98-ON80256D74.00534C84@diamond.philips.com>
References: <OFFFB687CE.F091EA98-ON80256D74.00534C84@diamond.philips.com>
Reply-to: cipe-l,AT,inka,DOT,de

On Thu, Jul 31, 2003 at 04:09:44PM +0100, herve.fache,AT,philips,DOT,com 
wrote:

[cut]

> Questions:
> - should ipaddr and ptpaddr be the same as their respective eth0 addresses, 
> or something like 10.0.1.1/24 and 10.0.2.1/24?

NO, different ip's

> - do I need to ifconfig cipcb0 ipaddr manually, or does pkcipe do it for 
> me? I have tried and got an error (SIOCSIFFLAGS: No such device or address).

pkcipe does that

> - do I need to set a route?

pkcipe does that

> If I just try pkcipe -c machine1 -E, I get (either way):
> connect to IP_of_machine1
> /etc/cipe/pk/machine1: incorrect permissions
> handlePacket: error: Signature check failed
> handlePacket: received ERROR: Signature check failed
> 
> The permissions look ok though: -rw-r--r-- root root (I tried -r--r--r-- 
> too). There are no firewalls AFAIK on either of the machines.

they must be -rw----------

> 
> Also, /var/log/messages shows the connect from/to and then:
> Jul 31 16:09:10 machine1 pkcipe[3947]: handlePacket: received ERROR: 
> Signature check failed

wrong identity, did you use the right identity files?

JonB


<< | Thread Index | >> ]    [ << | Date Index | >> ]