1ike.preshared(4)                 File Formats                 ike.preshared(4)
2
3
4

NAME

6       ike.preshared - pre-shared keys file for IKE
7

SYNOPSIS

9       /etc/inet/secret/ike.preshared
10
11

DESCRIPTION

13        The  /etc/inet/secret/ike.preshared  file contains secret keying mate‐
14       rial that two IKE instances can use to authenticate each other. Because
15       of   the   sensitive   nature   of   this  data,  it  is  kept  in  the
16       /etc/inet/secret directory, which is only accessible by root.
17
18
19       Pre-shared keys are delimited by open-curly-brace ({) and  close-curly-
20       brace (}) characters. There are five name-value pairs required inside a
21       pre-shared key:
22
23
24
25
26              Name                 Value                 Example
27       localidtype          IP                     localidtype IP
28       remoteidtype         IP                     remoteidtype IP
29       localid              IP-address             localid 10.1.1.2
30       remoteid             IP-address             remoteid 10.1.1.3
31       key                  hex-string             1234567890abcdef
32
33
34
35       Comment lines with # appearing in the first column are also legal.
36
37
38       Files in this format can also be used by the ikeadm(1M) command to load
39       additional pre-shared keys into a running an in.iked(1M) process.
40

EXAMPLES

42       Example 1 A Sample ike.preshared File
43
44
45       The following is an example of an ike.preshared file:
46
47
48
49         #
50         # Two pre-shared keys between myself, 10.1.1.2, and two remote
51         # hosts.  Note that names are not allowed for IP addresses.
52         #
53         # A decent hex string can be obtained by performing:
54         #           od -x </dev/random | head
55         #
56
57         {
58             localidtype IP
59             localid 10.1.1.2
60             remoteidtype IP
61             remoteid 10.21.12.4
62             key 4b656265207761732068657265210c0a
63         }
64
65         {
66            localidtype IP
67            localid 10.1.1.2
68            remoteidtype IP
69            remoteid 10.9.1.25
70            key 536f20776572652042696c6c2c2052656e65652c20616e642043687269732e0a
71         }
72
73

SECURITY

75       If  this  file  is compromised, all IPsec security associations derived
76       from secrets in this file will be compromised as well. The default per‐
77       missions on ike.preshared are 0600. They should stay this way.
78

ATTRIBUTES

80       See attributes(5) for descriptions of the following attributes:
81
82
83
84
85       ┌─────────────────────────────┬─────────────────────────────┐
86       │      ATTRIBUTE TYPE         │      ATTRIBUTE VALUE        │
87       ├─────────────────────────────┼─────────────────────────────┤
88       │Availability                 │SUNWcsr                      │
89       └─────────────────────────────┴─────────────────────────────┘
90

SEE ALSO

92       od(1), ikeadm(1M), in.iked(1M), ipseckey(1M), attributes(5), random(7D)
93
94
95
96SunOS 5.11                        15 Oct 2001                 ike.preshared(4)
Impressum