I am in the process of upgrading a client's server hardware and o/s, and
thought while I was at it I would move them to the latest rev of tinc
(ie. pre7; I think they are currently on pre3). When I first set the
tinc daemon up I couldn't get the *KeyFile = <abs-path-to-key>
directive
to work as stated in the "manual" on tinc.nl.org, but at that time a
lot
of the documentation there was slightly off anyway, so I just used "*Key
= <KEY>" instead. Well, the docs there have been updated and they
insists that the *KeyFile = ought to work now (and even that the *Key =
directive is "obsolete"), but I still can't get it to work.
When I try it as shown in the manual (eg. PrivateKeyFile =
/etc/tinc/keys/rsa_key.priv) I get this in my logs:
Apr 23 22:37:42 lrouter tinc.vpn[3336]: tincd 1.0pre7 starting
Apr 23 22:37:42 lrouter tinc.vpn[3336]: /dev/misc/net/tun is a Linux
tun/tap device
Apr 23 22:37:42 lrouter tinc.vpn[3336]: Reading RSA private key file `|
^H @| ^H @c/keys/rsa_key.p ' failed: No such file or directory
Apr 23 22:37:42 lrouter tinc.vpn[3336]: Unrecoverable error
Apr 23 22:37:42 lrouter tinc.vpn[3336]: Restarting in 900 seconds!
If I try to put "" or '' around the path, or leave the leading
slash
off, I get more or less the same thing except:
Apr 23 22:36:19 lrouter tinc.vpn[3321]:
`"/etc/tinc/keys/lodi-key.priv"'
is not an absolute path
It still works "the old way" (ie. if I instead use *Key =
<KEY>), but it
just offends my sensibilities- I'd like to do it the "right way".
Ideas?
-Patrick
Tinc: Discussion list about the tinc VPN daemon
Archive: http://mail.nl.linux.org/lists/
Tinc site: http://tinc.nl.linux.org/
