Question

Hello:

We were previously using RUT-950 units and then had an /etc/config/strongswan file to configure the strongswan IPSec client on the unit.

This is changes to a /etc/config/ipsec file.

In the /etc/config/strongswan file the the keys are placed at the bottom like this:

 config preshared_keys

option psk_key 'PSK_for_this_side'

list id_selector 'keyid:CCrouter keyid:CORS413'

config preshared_keys

option psk_key 'PSK_for_the_other_side'

list id_selector 'keyid:CORS413 keyid:CCrouter'

In the /etc/config/ipsec file its like this:

config secret

option type 'psk'

option secret '0x75617930616550686168423061694765327175616536536168376d6f68596569766f6f32'

list id_selector 'keyid:CCrouter keyid:CORS469'

config secret

option type 'psk'

list id_selector 'keyid:CORS469 keyid:CCrouter'

option secret '0x536c65424b6567315671657642386d574c667776584d56624349586f50585a33396d6357'

I have checked and those are not MD%, SHA1, SHA256 or SHA512 hashes of the PSK.

Can anyone tell me what kind of hash that is?

Cheers,

john

Answer 1

Hello,

It's a hexadecimal value. To convert it back simply remove 0x and give it to any hexadecimal to ASCII converter, such as this.

Best regards,